https://vulnogram.org/ Most recent CVEs assigned by 3ds (3ds). https://vulnogram.org/seaview/icons/3ds.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-105412 https://vulnogram.org/CVE-2026-105412 An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database. High Mon, 12 Oct 2026 10:45:22 GMT https://vulnogram.org/CVE-2026-105411 https://vulnogram.org/CVE-2026-105411 An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the trackers on t… High Mon, 12 Oct 2026 10:45:16 GMT https://vulnogram.org/CVE-2026-105410 https://vulnogram.org/CVE-2026-105410 A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session. High Mon, 12 Oct 2026 10:45:09 GMT https://vulnogram.org/CVE-2026-105409 https://vulnogram.org/CVE-2026-105409 A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session. High Mon, 12 Oct 2026 10:45:01 GMT https://vulnogram.org/CVE-2026-105408 https://vulnogram.org/CVE-2026-105408 A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session. High Mon, 12 Oct 2026 10:44:55 GMT https://vulnogram.org/CVE-2026-105407 https://vulnogram.org/CVE-2026-105407 An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server. High Mon, 12 Oct 2026 10:44:42 GMT https://vulnogram.org/CVE-2026-84154 https://vulnogram.org/CVE-2026-84154 A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary code on the server. Critical Tue, 29 Sep 2026 07:02:06 GMT https://vulnogram.org/CVE-2026-84285 https://vulnogram.org/CVE-2026-84285 An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server. High Mon, 21 Sep 2026 12:07:15 GMT https://vulnogram.org/CVE-2026-16279 https://vulnogram.org/CVE-2026-16279 An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts. Critical Network Exploitable Thu, 27 Aug 2026 14:11:33 GMT https://vulnogram.org/CVE-2026-19851 https://vulnogram.org/CVE-2026-19851 A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts created during XML import. High Network Exploitable Tue, 25 Aug 2026 07:47:18 GMT https://vulnogram.org/CVE-2026-17061 https://vulnogram.org/CVE-2026-17061 A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution. Critical Network Exploitable Tue, 11 Aug 2026 14:21:22 GMT https://vulnogram.org/CVE-2026-11756 https://vulnogram.org/CVE-2026-11756 A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution. Critical Network Exploitable Tue, 28 Jul 2026 07:35:17 GMT https://vulnogram.org/CVE-2026-14165 https://vulnogram.org/CVE-2026-14165 An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to access data of other users without authorization. High Network Exploitable Mon, 13 Jul 2026 07:13:53 GMT https://vulnogram.org/CVE-2026-9695 https://vulnogram.org/CVE-2026-9695 An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server. Critical Network Exploitable Wed, 08 Jul 2026 05:58:50 GMT https://vulnogram.org/CVE-2026-5120 https://vulnogram.org/CVE-2026-5120 A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 could allow a user to access unauthorized data from another user. High Wed, 01 Jul 2026 12:16:57 GMT https://vulnogram.org/CVE-2026-10094 https://vulnogram.org/CVE-2026-10094 A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrary files on the server. Critical Network Exploitable Wed, 17 Jun 2026 06:48:28 GMT https://vulnogram.org/CVE-2026-9024 https://vulnogram.org/CVE-2026-9024 A Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary script code in… High Mon, 01 Jun 2026 08:21:06 GMT https://vulnogram.org/CVE-2026-7858 https://vulnogram.org/CVE-2026-7858 A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an una… Critical Network Exploitable Mon, 01 Jun 2026 07:45:34 GMT https://vulnogram.org/CVE-2025-10559 https://vulnogram.org/CVE-2025-10559 A Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to read or write files in specific directories on the serv… High Tue, 31 Mar 2026 08:41:43 GMT https://vulnogram.org/CVE-2025-10553 https://vulnogram.org/CVE-2025-10553 A Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in use… High Tue, 31 Mar 2026 08:41:35 GMT https://vulnogram.org/CVE-2025-10551 https://vulnogram.org/CVE-2025-10551 A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in use… High Tue, 31 Mar 2026 08:38:33 GMT https://vulnogram.org/CVE-2026-3476 https://vulnogram.org/CVE-2026-3476 A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an attacker to execute arbitrary code on the user's machine while opening a specially crafted file. High Mon, 16 Mar 2026 11:48:18 GMT https://vulnogram.org/CVE-2026-2101 https://vulnogram.org/CVE-2026-2101 A Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 allows an attacker to execute arbitrary script code in user's browser session. High Mon, 16 Feb 2026 16:02:37 GMT https://vulnogram.org/CVE-2026-1335 https://vulnogram.org/CVE-2026-1335 An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a spec… High Mon, 16 Feb 2026 13:36:50 GMT https://vulnogram.org/CVE-2026-1334 https://vulnogram.org/CVE-2026-1334 An Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a speci… High Mon, 16 Feb 2026 13:36:41 GMT https://vulnogram.org/CVE-2026-1333 https://vulnogram.org/CVE-2026-1333 A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while openi… High Mon, 16 Feb 2026 13:35:51 GMT https://vulnogram.org/CVE-2026-1284 https://vulnogram.org/CVE-2026-1284 An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a spec… High Mon, 26 Jan 2026 13:25:12 GMT https://vulnogram.org/CVE-2026-1283 https://vulnogram.org/CVE-2026-1283 A Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening… High Mon, 26 Jan 2026 13:25:04 GMT https://vulnogram.org/CVE-2025-12956 https://vulnogram.org/CVE-2025-12956 A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. High Mon, 08 Dec 2025 08:38:45 GMT https://vulnogram.org/CVE-2025-10555 https://vulnogram.org/CVE-2025-10555 A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. High Mon, 24 Nov 2025 15:31:54 GMT https://vulnogram.org/CVE-2025-10554 https://vulnogram.org/CVE-2025-10554 A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. High Mon, 24 Nov 2025 15:31:39 GMT https://vulnogram.org/CVE-2025-10558 https://vulnogram.org/CVE-2025-10558 A stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. High Mon, 13 Oct 2025 07:36:34 GMT https://vulnogram.org/CVE-2025-10557 https://vulnogram.org/CVE-2025-10557 A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's… High Mon, 13 Oct 2025 07:36:28 GMT https://vulnogram.org/CVE-2025-10556 https://vulnogram.org/CVE-2025-10556 A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's br… High Mon, 13 Oct 2025 07:36:19 GMT https://vulnogram.org/CVE-2025-10552 https://vulnogram.org/CVE-2025-10552 A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. High Mon, 13 Oct 2025 07:36:11 GMT https://vulnogram.org/CVE-2025-9976 https://vulnogram.org/CVE-2025-9976 An OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x could allow an attacker to execute arbitrary code on the user's machine. Critical Mon, 13 Oct 2025 07:33:15 GMT https://vulnogram.org/CVE-2025-9450 https://vulnogram.org/CVE-2025-9450 A Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted JT file. High Wed, 17 Sep 2025 06:13:25 GMT https://vulnogram.org/CVE-2025-9449 https://vulnogram.org/CVE-2025-9449 A Use After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted PAR file. High Wed, 17 Sep 2025 06:13:08 GMT https://vulnogram.org/CVE-2025-9447 https://vulnogram.org/CVE-2025-9447 An Out-Of-Bounds Read vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted PAR file. High Wed, 17 Sep 2025 06:12:58 GMT https://vulnogram.org/CVE-2025-6205 https://vulnogram.org/CVE-2025-6205 A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application. Critical Known Exploited Network Exploitable Mon, 04 Aug 2025 09:14:42 GMT https://vulnogram.org/CVE-2025-6204 https://vulnogram.org/CVE-2025-6204 An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code. High Known Exploited Mon, 04 Aug 2025 09:14:08 GMT https://vulnogram.org/CVE-2025-7042 https://vulnogram.org/CVE-2025-7042 Use After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted IPT file. High Tue, 15 Jul 2025 15:04:43 GMT https://vulnogram.org/CVE-2025-6974 https://vulnogram.org/CVE-2025-6974 Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT… High Tue, 15 Jul 2025 15:04:16 GMT https://vulnogram.org/CVE-2025-6973 https://vulnogram.org/CVE-2025-6973 Use After Free vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT file. High Tue, 15 Jul 2025 15:03:51 GMT https://vulnogram.org/CVE-2025-6972 https://vulnogram.org/CVE-2025-6972 Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted CATPRODUCT… High Tue, 15 Jul 2025 15:02:42 GMT https://vulnogram.org/CVE-2025-6971 https://vulnogram.org/CVE-2025-6971 Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted CATPRODUCT… High Tue, 15 Jul 2025 15:02:05 GMT https://vulnogram.org/CVE-2025-0831 https://vulnogram.org/CVE-2025-0831 Out-Of-Bounds Read vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT file. High Tue, 15 Jul 2025 15:00:10 GMT https://vulnogram.org/CVE-2025-4987 https://vulnogram.org/CVE-2025-4987 A stored Cross-site Scripting (XSS) vulnerability affecting Opportunity Management in Project Portfolio Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser… High Mon, 16 Jun 2025 07:22:02 GMT https://vulnogram.org/CVE-2025-5086 https://vulnogram.org/CVE-2025-5086 A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution. Critical Known Exploited Network Exploitable Mon, 02 Jun 2025 17:42:42 GMT https://vulnogram.org/CVE-2025-0602 https://vulnogram.org/CVE-2025-0602 A stored Cross-site Scripting (XSS) vulnerability affecting Compare in Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session… High Fri, 30 May 2025 14:19:49 GMT