CVE-2017-2907

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

CVE-2017-2908

An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. A...

CVE-2017-2901

An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.iris' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the applicatio...

CVE-2017-2908

An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. A...

CVE-2017-2905

CVE-2017-2905 affects Blender 2.78c, where an exploitable integer overflow in the BMP loading functionality can trigger a buffer overflow and execute code. A specially crafted BMP file could be provided as an asset via Blender’s sequencer to a user, leading to potential code execution in the appl...

CVE-2017-12099

Technical details of CVE-2017-12099 are not publicly available in the provided connected documents; monitor for updates.

CVE-2017-2900

Blender 2.78c contains an exploitable integer overflow in the PNG loading functionality. A crafted PNG file can trigger a buffer overflow and allow code execution in the Blender process, via the sequencer. Mitigation: update to Blender 2.79b or newer (fixed in downstream advisories; multiple dist...

CVE-2017-12105

Blender vulnerability CVE-2017-12105 (and related CVEs) arises from an integer overflow in applying a specific object modifier to a Mesh, leading to a buffer overflow and potential code execution when a crafted .blend is opened or used as a library. Affects Blender versions around v2.78c (and old...

CVE-2017-2903

An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-2899

An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-12102

An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts curves to polygons. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-12082

An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the Blender open-source 3d creation suite. A .blend file with a specially crafted external data file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the...

3d-sauna.ru XSS vulnerability

Open Bug Bounty ID: OBB-599907 Description| Value ---|--- Affected Website:| 3d-sauna.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

3d-ring.de XSS vulnerability

Open Bug Bounty ID: OBB-592724 Description| Value ---|--- Affected Website:| 3d-ring.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

GLSA-201803-13 : PLIB: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201803-13 PLIB: User-assisted execution of arbitrary code A stack-based buffer overflow within the error function of ssg/ssgParser.cxx was discovered in PLIB. Impact : A remote attacker, by enticing a user to open a specially...

Siemens RUGGEDCOM / Rugged Operating System Detection (Telnet)

Detection of Siemens RUGGEDCOM devices and the Rugged Operating System. The script sends a telnet connection request to the device and attempts to detect the presence of devices running RUGGEDCOM / Rugged Operating System and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some...

CVE-2018-5374

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

Sql injection

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5374

CVE-2018-5374 affects WordPress Dbox 3D Slider Lite plugin (

WordPress Dbox 3D Slider Lite 1.2.2 SQL Injection

DefenseCode ThunderScan SAST Advisory: WordPress Dbox 3D Slider Lite Multiple SQL injection Security Vulnerabilities Advisory ID: DC-2017-01-003 Advisory Title: WordPress Dbox 3D Slider Lite Plugin Multiple SQL injection Security Vulnerabilities Advisory URL:...