450 matches found
SUSE CVE-2026-28737
Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the extensionsRequired field in glTF files rendered by the 3D file viewer...
CVE-2026-28737
Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the extensionsRequired field in glTF files rendered by the 3D file viewer...
CVE-2026-28737 Gitea 3D file viewer allows stored XSS through glTF extensionsRequired
Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the extensionsRequired field in glTF files rendered by the 3D file viewer...
CVE-2026-8682: Missing Authorization
The 3D Viewer – 3D Model Viewer – Augmented Reality – Virtual Try On plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
CVE-2026-40729: Missing Authorization
Missing Authorization vulnerability in bPlugins 3D viewer – Embed 3D Models 3d-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 3D viewer – Embed 3D Models: from n/a through = 1.8.5...
CVE-2022-26106
When a user opens a manipulated Computer Graphics Metafile .cgm, CgmCore.dll received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...
CVE-2021-27595
When a user opens manipulated Portable Document Format .PDF files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...
WordPress Easy 3D Viewer plugin <= 1.8.6.6 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via prettyPhoto JavaScript Library vulnerability
Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via prettyPhoto JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin Easy 3D Viewer versions = 1.8.6.6...
The vulnerability of the Substance 3D Viewer application, which allows the execution of arbitrary code, arises from the possibility of operations going beyond the buffer in memory. This vulnerability allows an attacker to execute arbitrary code.
The vulnerability of the Adobe Substance 3D Viewer application for viewing and editing 3D files is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted maliciou...
APSB25-99 : Security update available for Adobe Substance 3D Viewer
Adobe has released an update for Adobe Substance 3D Viewer. This update addresses critical and important vulnerabilities in Adobe Substance 3D Viewer. Successful exploitation could lead to arbitrary code execution and application denial-of-service...
EUVD-2020-27501
Malware in sbrugna...
EUVD-2020-27511
Malware in sbrugna...
EUVD-2020-27483
Malware in sbrugna...
EUVD-2021-14333
Malware in sbrugna...
EUVD-2021-14332
Malware in sbrugna...
EUVD-2020-27498
Malware in sbrugna...
EUVD-2021-18815
Malware in sbrugna...
EUVD-2021-18817
Malware in sbrugna...