Lucene search
+L

12823 matches found

OSV
OSV
added 2024/03/06 11:5 a.m.30 views

BIT-GOLANG-2021-33196

In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count in an archive's header can cause a NewReader or OpenReader panic...

7.5CVSS7.7AI score0.03464EPSS
SaveExploits1References7
OSV
OSV
added 2024/03/06 10:59 a.m.16 views

BIT-ODOO-2021-45071

Cross-site scripting XSS issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via crafted uploaded file names...

6.1CVSS5.6AI score0.00657EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/03/06 12:0 a.m.12 views

The vulnerability of the Simcenter Femap simulation application, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Simcenter Femap simulation application lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by allowing the user to open a specially crafted Catia MODEL file...

7.8CVSS8AI score0.00318EPSS
SaveExploits0References6Affected Software1
Prion
Prion
added 2024/02/29 1:44 a.m.27 views

Memory corruption

A memory leak issue discovered in parseSWFTEXTRECORD in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file...

4.3CVSS6.8AI score0.00759EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2024/02/28 11:15 p.m.19 views

Buffer overflow

Buffer Overflow vulnerability in XNSoft NConvert 7.163 for Windows x86 allows attackers to cause a denial of service via crafted xwd file...

7AI score0.01126EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
added 2024/02/28 12:0 a.m.8 views

The vulnerability of the put_qpel_0_0_fallback_16 function (fallback-motion.cc) in the implementation of the h.265 Libde265 video codec allows a perpetrator to trigger a service failure.

The vulnerability of the putqpel00fallback16 function in fallback-motion.cc in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to trigger a service failure using a specially created file...

7.8CVSS7.1AI score0.00868EPSS
SaveExploits1References7Affected Software5
Vulnrichment
Vulnrichment
added 2024/02/28 12:0 a.m.14 views

CVE-2024-22532

Buffer Overflow vulnerability in XNSoft NConvert 7.163 for Windows x86 allows attackers to cause a denial of service via crafted xwd file...

6.7AI score0.01126EPSS
SaveExploits2References1
OSV
OSV
added 2024/02/26 4:27 p.m.10 views

CVE-2024-23605

A heap-based buffer overflow vulnerability exists in the GGUF library header.nkv functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS6.2AI score0.01349EPSS
SaveExploits1References2
OSV
OSV
added 2024/02/26 4:27 p.m.8 views

CVE-2024-23496

A heap-based buffer overflow vulnerability exists in the GGUF library gguffreadstr functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS7.7AI score0.01349EPSS
SaveExploits1References2
OSV
OSV
added 2024/02/26 4:27 p.m.7 views

CVE-2024-21802

A heap-based buffer overflow vulnerability exists in the GGUF library info-ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS7.6AI score0.01375EPSS
SaveExploits1References2
Prion
Prion
added 2024/02/26 4:27 p.m.15 views

Heap overflow

A heap-based buffer overflow vulnerability exists in the GGUF library info-ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

6.8CVSS8.2AI score0.01375EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2024/02/26 4:7 p.m.10 views

CVE-2024-23496

A heap-based buffer overflow vulnerability exists in the GGUF library gguffreadstr functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS7.6AI score0.01349EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2024/02/26 4:7 p.m.10 views

CVE-2024-21802

A heap-based buffer overflow vulnerability exists in the GGUF library info-ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS7.6AI score0.01375EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2024/02/26 4:7 p.m.8 views

CVE-2024-21836

A heap-based buffer overflow vulnerability exists in the GGUF library header.ntensors functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS7.6AI score0.01349EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/02/26 12:0 a.m.6 views

PT-2024-2168 · Unknown · Gguf Library

Name of the Vulnerable Software and Affected Versions: GGUF library version Commit 18c2e17 Description: A heap-based buffer overflow vulnerability exists in the GGUF library gguf fread str functionality of llama.cpp. This vulnerability can be triggered by a specially crafted .gguf file, potential...

9.8CVSS9.7AI score0.01349EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2024/02/26 12:0 a.m.6 views

PT-2024-2029 · Unknown · Gguf Library

Name of the Vulnerable Software and Affected Versions: GGUF library affected versions not specified Description: A heap-based buffer overflow vulnerability exists in the GGUF library's header.n tensors functionality of llama.cpp Commit 18c2e17. This issue is related to an integer overflow in the...

9.8CVSS9.1AI score0.01349EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2024/02/22 3:24 a.m.14 views

CVE-2024-23129 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted MODEL 3DM, STP, or SLDASM file, when in opennurbs.dll parsed through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of th...

7.8CVSS7.8AI score0.00401EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/02/22 3:18 a.m.18 views

CVE-2024-23128 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted MODEL file, when parsed in libodxdll.dll and ASMDATAX229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of t...

7.8CVSS7.8AI score0.00515EPSS
SaveExploits0References3
Prion
Prion
added 2024/02/22 3:15 a.m.20 views

Heap overflow

A maliciously crafted MODEL, SLDPRT or SLDASM file when parsed VCRUNTIME140.dll through Autodesk AutoCAD can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current...

7.6AI score0.00515EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/22 2:25 a.m.33 views

CVE-2024-23126 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.2AI score0.00418EPSS
SaveExploits0References2
Rows per page
Query Builder