Lucene search
+L

2496 matches found

CNNVD
CNNVD
added 2021/07/13 12:0 a.m.9 views

Siemens JT2GO 缓冲区错误漏洞

Siemens Jt2go and Siemens Teamcenter Visualization are both products of Siemens AG, Germany. Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. A buffer over-read vulnerability exists in...

5.5CVSS5.8AI score0.01348EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/07/13 12:0 a.m.7 views

Siemens Jt2go 和 Siemens Teamcenter Visualization 缓冲区错误漏洞

Siemens Jt2go and Siemens Teamcenter Visualization are both products of the German company Siemens. Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. An out-of-bounds write vulnerability...

7.8CVSS5.9AI score0.01574EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/07/13 12:0 a.m.9 views

Siemens Jt2go 缓冲区错误漏洞

Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. An out-of-bounds write vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2. The...

7.8CVSS5.9AI score0.01793EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:0 a.m.13 views

The vulnerability of the ReadBMPImage function in the coders/bmp.c component of the console image editing tool ImageMagick, related to infinite loop execution, allows attackers to cause a service failure.

The vulnerability of the ReadBMPImage function in the coders/bmp.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created BMP file...

6.5CVSS6.9AI score0.03003EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:0 a.m.8 views

The vulnerability of the coders/bmp.c component in the console-based graphic editor ImageMagick, related to the infinite execution of a loop, allows an attacker to cause a service failure.

The vulnerability of the coders/bmp.c component in the console-based graphic editor ImageMagick is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker who operates remotely to cause a service failure using a specially created file...

6.5CVSS6.9AI score0.03099EPSS
SaveExploits1References10Affected Software3
OSV
OSV
added 2021/06/29 3:15 p.m.5 views

CVE-2021-31513

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS6.1AI score0.01811EPSS
SaveExploits0References3
NVD
NVD
added 2021/06/29 3:15 p.m.48 views

CVE-2021-31513

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS0.01811EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/06/29 3:15 p.m.3 views

CVE-2021-31513

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.2AI score0.01811EPSS
SaveExploits0References2
Prion
Prion
added 2021/06/29 3:15 p.m.18 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

6.8CVSS7.8AI score0.01811EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2021/06/29 2:33 p.m.84 views

CVE-2021-31513

OpenText Brava! Desktop (Build 16.6.4.55) is affected by CVE-2021-31513 due to an out-of-bounds write in BMP file parsing. The vulnerability allows remote code execution and requires user interaction (visiting a malicious page or opening a malicious BMP). Root cause: insufficient validation of us...

7.8CVSS7.8AI score0.01811EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/06/29 2:33 p.m.51 views

CVE-2021-31513

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS8AI score0.01811EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/15 12:0 a.m.65 views

OpenText Brava! Desktop BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01811EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.50 views

Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Animate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS4.5AI score0.0292EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.11 views

SUSE: Security Advisory (SUSE-SU-2017:3441-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/05/17 12:0 a.m.7 views

PT-2021-10680

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A null pointer dereference issue exists in GNU LibreDWG. This issue is related to the get bmp function in the dwgbmp.c file. Recommendations: For GNU LibreDWG version 0.10, consider avoiding the use of t...

6.5CVSS6.6AI score0.00856EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2021/05/05 12:0 a.m.29 views

Fedora: Security Advisory for perl-Image-ExifTool (FEDORA-2021-e3d8833d36)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.4AI score0.99982EPSS
SaveExploits39References4
OSV
OSV
added 2021/04/30 8:16 p.m.9 views

MGASA-2021-0201 Updated sdl2 packages fix security vulnerabilities

This update fixes two security vulnerabilities which could result in heap corruption or over-read with crafted .BMP files CVE-2020-14409, CVE-2020-14410...

7.8CVSS6.9AI score0.01666EPSS
SaveExploits0References5
Mageia
Mageia
added 2021/04/30 8:16 p.m.37 views

Updated sdl2 packages fix security vulnerabilities

This update fixes two security vulnerabilities which could result in heap corruption or over-read with crafted .BMP files CVE-2020-14409, CVE-2020-14410...

7.8CVSS1.2AI score0.01666EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/04/30 12:0 a.m.48 views

EulerOS 2.0 SP3 : libtiff (EulerOS-SA-2021-1813)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file...

9.8CVSS7.6AI score0.03301EPSS
SaveExploits1References6
The Hacker News
The Hacker News
added 2021/04/20 5:33 a.m.66 views

Lazarus APT Hackers are now using BMP images to hide RAT malware

A spear-phishing attack operated by a North Korean threat actor targeting its southern counterpart has been found to conceal its malicious code within a bitmap .BMP image file to drop a remote access trojan RAT capable of stealing sensitive information. Attributing the attack to the Lazarus Group...

0.1AI score
SaveExploits0
Rows per page
Query Builder