CVE-2017-2899

An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-2901

An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.iris' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the applicatio...

CVE-2017-2908

An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. A...

CVE-2017-12102

An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts curves to polygons. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-2906

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

CVE-2017-2907

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

CVE-2017-12102

CVE-2017-12102 refers to an exploitable integer overflow in Blender 2.78c where the conversion of curves to polygons can overflow, potentially causing a buffer overflow and code execution when a user opens a crafted .blend file or uses it as a library. Public records note this vulnerability along...

CVE-2017-12099

Technical details of CVE-2017-12099 are not publicly available in the provided connected documents; monitor for updates.

CVE-2017-12086: Integer Overflow or Wraparound

An exploitable integer overflow exists in the 'BKEmeshcalcnormalstessface' functionality of the Blender open-source 3d creation suite. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

3d-sauna.ru XSS vulnerability

Open Bug Bounty ID: OBB-599907 Description| Value ---|--- Affected Website:| 3d-sauna.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

3d-ring.de XSS vulnerability

Open Bug Bounty ID: OBB-592724 Description| Value ---|--- Affected Website:| 3d-ring.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

GLSA-201803-13 : PLIB: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201803-13 PLIB: User-assisted execution of arbitrary code A stack-based buffer overflow within the error function of ssg/ssgParser.cxx was discovered in PLIB. Impact : A remote attacker, by enticing a user to open a specially...

Siemens RUGGEDCOM / Rugged Operating System Detection (Telnet)

Detection of Siemens RUGGEDCOM devices and the Rugged Operating System. The script sends a telnet connection request to the device and attempts to detect the presence of devices running RUGGEDCOM / Rugged Operating System and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some...

CVE-2018-5374

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

Sql injection

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5374

CVE-2018-5374 affects WordPress Dbox 3D Slider Lite plugin (

CVE-2018-5374

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

PT-2018-16930

Name of the Vulnerable Software and Affected Versions Dbox 3D Slider Lite plugin versions prior to 1.2.3 Description The issue concerns SQL Injection via the settings/sliders.php endpoint, specifically the current slider id parameter. Recommendations For Dbox 3D Slider Lite plugin versions prior ...

CVE-2018-5374: Improper Neutralization of Special Elements used in an SQL Command

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

WordPress Dbox 3D Slider Lite 1.2.2 SQL Injection

DefenseCode ThunderScan SAST Advisory: WordPress Dbox 3D Slider Lite Multiple SQL injection Security Vulnerabilities Advisory ID: DC-2017-01-003 Advisory Title: WordPress Dbox 3D Slider Lite Plugin Multiple SQL injection Security Vulnerabilities Advisory URL:...