Vulnerabilities (CVE)

Total 420475 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-38681 1 Siemens 1 Tecnomatix 2026-06-17 N/A 7.8 HIGH
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21270)
CVE-2023-38680 1 Siemens 1 Tecnomatix 2026-06-17 N/A 7.8 HIGH
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21132)
CVE-2023-38679 1 Siemens 1 Tecnomatix 2026-06-17 N/A 7.8 HIGH
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21106)
CVE-2023-38678 1 Paddlepaddle 1 Paddlepaddle 2026-06-17 N/A 4.7 MEDIUM
OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
CVE-2023-38677 1 Paddlepaddle 1 Paddlepaddle 2026-06-17 N/A 4.7 MEDIUM
FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
CVE-2023-38676 1 Paddlepaddle 1 Paddlepaddle 2026-06-17 N/A 4.7 MEDIUM
Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
CVE-2023-38675 1 Paddlepaddle 1 Paddlepaddle 2026-06-17 N/A 4.7 MEDIUM
FPE in paddle.linalg.matrix_rank in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
CVE-2023-38674 1 Paddlepaddle 1 Paddlepaddle 2026-06-17 N/A 4.7 MEDIUM
FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
CVE-2023-38673 1 Paddlepaddle 1 Paddlepaddle 2026-06-17 N/A 9.6 CRITICAL
PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability to execute arbitrary commands on the operating system.
CVE-2023-38672 1 Paddlepaddle 1 Paddlepaddle 2026-06-17 N/A 4.7 MEDIUM
FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service.
CVE-2023-38671 1 Paddlepaddle 1 Paddlepaddle 2026-06-17 N/A 8.3 HIGH
Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.
CVE-2023-38670 1 Paddlepaddle 1 Paddlepaddle 2026-06-17 N/A 4.7 MEDIUM
Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service.
CVE-2023-38669 1 Paddlepaddle 1 Paddlepaddle 2026-06-17 N/A 8.3 HIGH
Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition.
CVE-2023-38668 1 Nasm 1 Netwide Assembler 2026-06-17 N/A 5.5 MEDIUM
Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash).
CVE-2023-38667 1 Nasm 1 Netwide Assembler 2026-06-17 N/A 5.5 MEDIUM
Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service.
CVE-2023-38666 1 Axiosys 1 Bento4 2026-06-17 N/A 5.5 MEDIUM
Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor::ProcessFragments function in mp4encrypt.
CVE-2023-38665 1 Nasm 1 Netwide Assembler 2026-06-17 N/A 5.5 MEDIUM
Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash).
CVE-2023-38657 1 Tonybybell 1 Gtkwave 2026-06-17 N/A 7.8 HIGH
An out-of-bounds write vulnerability exists in the LXT2 zlib block decompression functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-38655 2026-06-17 N/A 6.8 MEDIUM
Improper buffer restrictions in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable denial of service via network access.
CVE-2023-38654 2026-06-17 N/A 8.2 HIGH
Improper input validation for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access.