Lucene search
+L

3058 matches found

Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-30153

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: rx-macro component. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•3 views

PT-2022-29535

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.17.1 Description The issue is related to accessing compander for aux in the ASoC: codecs: rx-macro. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-29843

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.16.18 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: rx-macro component. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2022/04/14 8:15 p.m.•20 views

CVE-2021-40400

An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit d7f42a9a. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious...

7.5CVSS6.2AI score
SaveExploits0References1
NVD
NVD
•added 2022/04/14 8:15 p.m.•54 views

CVE-2021-40400

An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit d7f42a9a. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious...

9.3CVSS0.01288EPSS
SaveExploits1References1
OSV
OSV
•added 2022/04/14 8:15 p.m.•14 views

DEBIAN-CVE-2021-40402

An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file...

7.5CVSS8.1AI score0.01484EPSS
SaveExploits1References1
OSV
OSV
•added 2022/04/14 8:15 p.m.•12 views

DEBIAN-CVE-2021-40400

An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit d7f42a9a. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious...

7.5CVSS8.1AI score0.01288EPSS
SaveExploits1References1
Prion
Prion
•added 2022/04/14 8:15 p.m.•30 views

Design/Logic Flaw

An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file...

5CVSS7.2AI score0.01484EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/04/14 8:15 p.m.•25 views

Design/Logic Flaw

An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit d7f42a9a. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious...

5CVSS7.1AI score0.01288EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2022/04/14 8:15 p.m.•17 views

UBUNTU-CVE-2021-40400

An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit d7f42a9a. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious...

9.3CVSS7.2AI score0.01288EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2022/04/14 7:56 p.m.•51 views

CVE-2021-40402

An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file...

9.3CVSS7.5AI score0.01484EPSS
SaveExploits1References1
CVE
CVE
•added 2022/04/14 7:56 p.m.•75 views

CVE-2021-40402

CVE-2021-40402 concerns Gerbv and its derivatives, where an out-of-bounds read in the RS-274X aperture macro multi-outline primitives can disclose information when processing a crafted Gerber/file input. Connected sources document affected versions and scope, including Gerbv, its forks, and relat...

9.3CVSS7.2AI score0.01484EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
•added 2022/04/14 7:56 p.m.•75 views

CVE-2021-40402

An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file...

9.3CVSS8AI score0.01484EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/14 12:00 a.m.•6 views

CVE-2021-40402: Improper Handling of Exceptional Conditions

An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file...

9.3CVSS7.8AI score0.01484EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/14 12:00 a.m.•3 views

CVE-2021-40400: Improper Restriction of Operations within the Bounds of a Memory Buffer

An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit d7f42a9a. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious...

9.3CVSS7.8AI score0.01288EPSS
SaveExploits1References3
NVD
NVD
•added 2022/04/08 5:15 p.m.•40 views

CVE-2021-43515

CSV Injection aka Excel Macro Injection or Formula Injection exists in creating new timesheet in Kimai. By filling the Description field with malicious payload, it will be mistreated while exporting to a CSV file...

7.8CVSS0.01014EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/08 5:15 p.m.•35 views

CVE-2021-43515

CSV Injection aka Excel Macro Injection or Formula Injection exists in creating new timesheet in Kimai. By filling the Description field with malicious payload, it will be mistreated while exporting to a CSV file...

7.8CVSS7.7AI score
SaveExploits0References1
CVE
CVE
•added 2022/04/08 4:23 p.m.•115 views

CVE-2021-43515

CVE-2021-43515 corresponds to a CSV Injection vulnerability in Kimai 2. The issue arises when creating a new timesheet and entering a payload in the Description field; during CSV export, this input is not sanitized and can be interpreted by spreadsheet programs (e.g., Excel) as formulas or comman...

7.8CVSS7.6AI score0.01014EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2022/04/08 4:23 p.m.•6 views

CVE-2021-43515

CSV Injection aka Excel Macro Injection or Formula Injection exists in creating new timesheet in Kimai. By filling the Description field with malicious payload, it will be mistreated while exporting to a CSV file...

8.5CVSS0.01014EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/04/08 4:23 p.m.•51 views

CVE-2021-43515

CSV Injection aka Excel Macro Injection or Formula Injection exists in creating new timesheet in Kimai. By filling the Description field with malicious payload, it will be mistreated while exporting to a CSV file...

7.9AI score0.01014EPSS
SaveExploits0References1
Rows per page
Query Builder