Lucene search
+L

1122 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/09/21 12:00 a.m.•30 views

(0Day) Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.00572EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/09/21 12:00 a.m.•23 views

(0Day) Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7CVSS6.8AI score0.00468EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/09/21 12:00 a.m.•14 views

PT-2023-5403 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. The flaw exists within the parsing of AR files due to the lack of proper validation of...

7.8CVSS7.8AI score0.00572EPSS
SaveExploits0References8
Zero Day Initiative
Zero Day Initiative
•added 2023/09/21 12:00 a.m.•28 views

(0Day) Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.00638EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/08/10 12:00 a.m.•21 views

PT-2025-1449 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt versions prior to v12 SP2 Build 1204.200 Description: The affected application lacks proper validation of user-supplied data when parsing CO files, which could lead to a heap-based buffer overflow. An attacker could...

8.4CVSS7.9AI score0.00205EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2023/08/10 12:00 a.m.•21 views

PT-2025-1446 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt versions prior to v12 SP2 Build 1204.200 Description: The affected application lacks proper validation of user-supplied data when parsing XE files, which could lead to an out-of-bounds write. An attacker could leverage th...

8.4CVSS7.7AI score0.00202EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2023/08/02 12:00 a.m.•38 views

The software of Cobalt Ashlar-Vellum has vulnerabilities that allow a hacker to execute arbitrary code.

The vulnerability of the Cobalt Ashlar-Vellum software for parametric automated design and 3D modeling is related to an error in the analysis of AR files. Exploiting this vulnerability can allow attackers to execute arbitrary code...

7.8CVSS7.5AI score0.00399EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/08/02 12:00 a.m.•31 views

The vulnerability of Cobalt Ashlar-Vellum’s software for parametric automated design and 3D modeling lies in the possibility of the operation exceeding the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the escape of operations from memory buffers during the processing of CO-files. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00404EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/07/20 12:00 a.m.•24 views

The software of Cobalt Ashlar-Vellum has vulnerabilities that allow a hacker to execute arbitrary code.

The vulnerability of the Cobalt Ashlar-Vellum software for parametric automated design and 3D modeling is related to the use of an unreliable pointer. Exploiting this vulnerability allows a attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00399EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2023/06/26 12:00 a.m.•19 views

The vulnerability of the Graphite Ashlar-Vellum automated drawing system lies in the ability to write beyond the buffer memory limit, allowing a malicious actor to execute arbitrary code.

The vulnerability of the Graphite Ashlar-Vellum drawing system is related to the writing beyond the buffer boundaries of the memory during the analysis of the VC6 file. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00916EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/06/15 12:00 a.m.•15 views

PT-2023-25288 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required, as the target must visit a...

7.8CVSS7.1AI score0.00407EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2023/06/15 12:00 a.m.•31 views

(0Day) Ashlar-Vellum Cobalt Out-Of-Bounds Access Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.00401EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/06/15 12:00 a.m.•16 views

PT-2023-24802 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious...

7.8CVSS7.5AI score0.00401EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/06/15 12:00 a.m.•13 views

PT-2023-24801 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious...

7CVSS7.5AI score0.00319EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/06/15 12:00 a.m.•13 views

PT-2023-24795 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.3AI score0.00399EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/06/15 12:00 a.m.•12 views

PT-2023-24797 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious...

7.8CVSS7.5AI score0.00407EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/06/15 12:00 a.m.•15 views

PT-2023-25287 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. It requires user interaction, where the target must visit a...

7.8CVSS7.3AI score0.00425EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2023/06/15 12:00 a.m.•29 views

(0Day) Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7CVSS6.8AI score0.00328EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/06/15 12:00 a.m.•20 views

PT-2023-24800 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious...

7.8CVSS7.5AI score0.00401EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2023/06/15 12:00 a.m.•31 views

(0Day) Ashlar-Vellum Cobalt Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.7AI score0.00401EPSS
SaveExploits0
Rows per page
Query Builder