Lucene search
+L

12815 matches found

BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.7 views

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading beyond the buffer boundary in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00265EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.17 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from operations that go beyond buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS5.8AI score0.00258EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.15 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00311EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.7 views

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading beyond the buffer boundary in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00265EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.5 views

PT-2024-8779 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 28.7.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

7.8CVSS7.8AI score0.00309EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2024/11/12 12:0 a.m.10 views

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing program is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS8AI score0.00764EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/11 12:0 a.m.14 views

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in its use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS7.6AI score0.0081EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/11 12:0 a.m.8 views

The vulnerability of the opennurbs.dll library, a software component used for modeling, designing, and drafting in AutoCAD, allows attackers to execute arbitrary code or cause the application to crash.

The vulnerability of the opennurbs.dll library, a software component used for modeling, designing, and drafting in AutoCAD, relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow attackers to cause the application to terminate abnormally or execute...

5.5CVSS7.6AI score0.00403EPSS
SaveExploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2024/11/11 12:0 a.m.8 views

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in its use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS7.6AI score0.00793EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/11 12:0 a.m.7 views

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in its use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS7.6AI score0.00793EPSS
SaveExploits0References4Affected Software2
OpenVAS
OpenVAS
added 2024/11/11 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2024-2910)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.3AI score0.00242EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/08 5:15 p.m.10 views

AZL-53187 CVE-2024-25431 affecting package fluent-bit for versions less than 2.2.3-5

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...

7.8CVSS5.8AI score0.00634EPSS
SaveExploits1References1
OSV
OSV
added 2024/11/08 5:15 p.m.15 views

AZL-53175 CVE-2024-25431 affecting package fluent-bit for versions less than 3.1.9-1

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...

7.8CVSS5.8AI score0.00634EPSS
SaveExploits1References1
NVD
NVD
added 2024/11/08 5:15 p.m.17 views

CVE-2024-25431

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...

8.8CVSS0.00634EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/11/08 12:0 a.m.7 views

CVE-2024-25431

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...

7.4AI score0.00634EPSS
SaveExploits1References3
CVE
CVE
added 2024/11/08 12:0 a.m.75 views

CVE-2024-25431

CVE-2024-25431 affects the WebAssembly Micro Runtime (WAMR) from Bytecode Alliance. Pre- v.b3f728c builds are vulnerable to privilege escalation via a crafted file that targets the check_was_abi_compatibility function. The issue is mitigated by the fix introduced in commit 06df58f. Multiple conne...

8.8CVSS7.1AI score0.00634EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/11/08 12:0 a.m.19 views

CVE-2024-25431

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...

8.8CVSS7.3AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/11/08 12:0 a.m.4 views

PT-2024-20939 · Bytecode Alliance · Wasm-Micro-Runtime

Name of the Vulnerable Software and Affected Versions: bytecodealliance wasm-micro-runtime versions before v.b3f728c Description: The issue allows a remote attacker to escalate privileges via a crafted file to the check was abi compatibility function. Recommendations: For versions before v.b3f728...

8.8CVSS7.5AI score0.00634EPSS
SaveExploits1References10
Cvelist
Cvelist
added 2024/11/08 12:0 a.m.21 views

CVE-2024-25431

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...

0.00634EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2024/11/07 12:0 a.m.8 views

The vulnerability of the `ff_mpeg4_decode_picture_header` function in the `libavcodec/mpeg4videodec.c` file of the FFmpeg multimedia library, related to insufficient input data validation, allows a attacker to trigger a service failure.

The vulnerability of the ffmpeg4decodepictureheader function in the libavcodec/mpeg4videodec.c file of the FFmpeg multimedia library is related to insufficient input data validation. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a specially created...

7.8CVSS6.5AI score0.01061EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder