Lucene search
+L

989 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/26 12:00 a.m.11 views

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the ability to write beyond the buffer boundaries of memory, allowing an attacker to execute arbitrary code.

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the handling of memory buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted AR format files...

7.8CVSS7.8AI score0.00486EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:00 a.m.10 views

The vulnerability of Cobalt Ashlar-Vellum’s software for parametric automated design and 3D modeling lies in its inability to handle resources of incompatible types. This allows a hacker to execute arbitrary code.

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in its inability to access resources through incompatible types. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted AR format files...

7CVSS7.5AI score0.00398EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:00 a.m.9 views

The vulnerability of Cobalt Ashlar-Vellum’s software for parametric automated design and 3D modeling lies in its reliance on memory after it is released. This allows a hacker to execute arbitrary code.

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted AR format files...

7.8CVSS7.7AI score0.00541EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/09/21 12:00 a.m.21 views

PT-2023-5404 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.8AI score0.00486EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/09/21 12:00 a.m.12 views

PT-2023-5407 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: The issue is related to a type confusion condition that occurs when parsing AR files, allowing remote attackers to execute arbitrary code on affected installations. This is due...

7.8CVSS7AI score0.00398EPSS
SaveExploits0References8
Zero Day Initiative
Zero Day Initiative
added 2023/09/21 12:00 a.m.24 views

(0Day) Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.00486EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/09/21 12:00 a.m.10 views

PT-2023-5406 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: The issue is related to a use-after-free vulnerability in the parsing of AR files, which can be exploited by remote attackers to execute arbitrary code on affected installation...

7.8CVSS7.7AI score0.00541EPSS
SaveExploits0References8
Zero Day Initiative
Zero Day Initiative
added 2023/09/21 12:00 a.m.22 views

(0Day) Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.00541EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/09/21 12:00 a.m.9 views

PT-2023-5403 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. The flaw exists within the parsing of AR files due to the lack of proper validation of...

7.8CVSS7.8AI score0.00486EPSS
SaveExploits0References8
Zero Day Initiative
Zero Day Initiative
added 2023/09/21 12:00 a.m.19 views

(0Day) Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7CVSS6.8AI score0.00398EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/09/21 12:00 a.m.11 views

PT-2023-5405 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: The issue is related to a use-after-free vulnerability in the parsing of AR files, which can be exploited by remote attackers to execute arbitrary code on affected installation...

7.8CVSS7.7AI score0.00541EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/08/10 12:00 a.m.12 views

PT-2025-1446 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt versions prior to v12 SP2 Build 1204.200 Description: The affected application lacks proper validation of user-supplied data when parsing XE files, which could lead to an out-of-bounds write. An attacker could leverage th...

8.4CVSS7.7AI score0.00202EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/08/10 12:00 a.m.14 views

PT-2025-1449 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt versions prior to v12 SP2 Build 1204.200 Description: The affected application lacks proper validation of user-supplied data when parsing CO files, which could lead to a heap-based buffer overflow. An attacker could...

8.4CVSS7.9AI score0.00205EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2023/08/02 12:00 a.m.25 views

The software of Cobalt Ashlar-Vellum has vulnerabilities that allow a hacker to execute arbitrary code.

The vulnerability of the Cobalt Ashlar-Vellum software for parametric automated design and 3D modeling is related to an error in the analysis of AR files. Exploiting this vulnerability can allow attackers to execute arbitrary code...

7.8CVSS7.5AI score0.00399EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/02 12:00 a.m.15 views

The vulnerability of Cobalt Ashlar-Vellum’s software for parametric automated design and 3D modeling lies in the possibility of the operation exceeding the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the escape of operations from memory buffers during the processing of CO-files. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00404EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.17 views

The software of Cobalt Ashlar-Vellum has vulnerabilities that allow a hacker to execute arbitrary code.

The vulnerability of the Cobalt Ashlar-Vellum software for parametric automated design and 3D modeling is related to the use of an unreliable pointer. Exploiting this vulnerability allows a attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00399EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/06/26 12:00 a.m.13 views

The vulnerability of the Graphite Ashlar-Vellum automated drawing system lies in the ability to write beyond the buffer memory limit, allowing a malicious actor to execute arbitrary code.

The vulnerability of the Graphite Ashlar-Vellum drawing system is related to the writing beyond the buffer boundaries of the memory during the analysis of the VC6 file. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00916EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/06/15 12:00 a.m.8 views

PT-2023-24797 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious...

7.8CVSS7.5AI score0.00407EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/06/15 12:00 a.m.13 views

PT-2023-24799 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious...

7.8CVSS7.4AI score0.00401EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2023/06/15 12:00 a.m.22 views

(0Day) Ashlar-Vellum Cobalt Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.7AI score0.00401EPSS
SaveExploits0
Rows per page
Query Builder