Lucene search
+L

12842 matches found

Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.2 views

PT-2023-1052 · Microsoft · 3D Builder

Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue is related to insufficient input validation in the 3D Builder program, which can be exploited by opening a specially crafted malicious file, allowing an attacker to execute...

7.8CVSS9.3AI score0.00929EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.3 views

PT-2023-1051 · Microsoft · 3D Builder

Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue is related to insufficient input validation in the 3D Builder program, which can be exploited by opening a specially crafted malicious file, allowing an attacker to execute...

7.8CVSS8.2AI score0.00929EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.3 views

PT-2023-1047 · Microsoft · 3D Builder

Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue is related to insufficient input validation in the 3D Builder program, which can be exploited by opening a specially crafted malicious file, allowing an attacker to execute...

7.8CVSS9.3AI score0.00939EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.2 views

PT-2023-1048 · Microsoft · 3D Builder

Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue is related to insufficient input validation in the 3D Builder program, which can allow an attacker to execute arbitrary code by opening a specially crafted malicious file. This...

7.8CVSS9.6AI score0.00939EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.4 views

PT-2023-1252 · Microsoft · 3D Builder

Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue exists due to insufficient input validation in the 3D Builder program, which can allow an attacker to execute arbitrary code on the target system by opening a specially crafted...

7.8CVSS9.5AI score0.00929EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.3 views

PT-2023-1256 · Microsoft · 3D Builder

Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue is related to insufficient input validation in the 3D Builder program, which can be exploited to execute arbitrary code using a specially crafted file. Recommendations: At the...

7.8CVSS9.3AI score0.00929EPSS
SaveExploits0References18
OSV
OSV
added 2022/12/27 10:15 p.m.37 views

CVE-2021-4235

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

5.5CVSS6AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.15 views

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

5.5CVSS6AI score0.00456EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.13 views

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

5.5CVSS6AI score0.00456EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.9 views

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

5.5CVSS5.7AI score0.00473EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/12/23 12:0 a.m.12 views

The vulnerability of the Microsoft OneNote note-taking software, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft OneNote note-taking software relates to insufficient validation of entered data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.8AI score0.00893EPSS
SaveExploits0References2
OSV
OSV
added 2022/12/22 10:15 p.m.2 views

DEBIAN-CVE-2022-38143

A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this...

9.8CVSS8.9AI score0.01423EPSS
SaveExploits1References1
Prion
Prion
added 2022/12/22 10:15 p.m.30 views

Heap overflow

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger...

6.4CVSS8.8AI score0.0147EPSS
SaveExploits1References4Affected Software2
OSV
OSV
added 2022/12/22 10:15 p.m.7 views

UBUNTU-CVE-2022-41649

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger...

9.1CVSS7.2AI score0.0147EPSS
SaveExploits1References3
OSV
OSV
added 2022/12/22 10:15 p.m.9 views

UBUNTU-CVE-2022-38143

A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this...

9.8CVSS7.5AI score0.01423EPSS
SaveExploits1References3
OSV
OSV
added 2022/12/22 10:15 p.m.11 views

UBUNTU-CVE-2022-41684

A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can provide a...

7.5CVSS7.4AI score0.00765EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/12/22 12:0 a.m.7 views

OpenImageIO 缓冲区错误漏洞

OpenImageIO is an image read and write library that also provides several tools and applications. a code execution vulnerability exists in the OpenImageIO DDS scanline parsing feature. An attacker could exploit the vulnerability to cause a heap buffer overflow via a specially crafted .dds...

9.8CVSS7.8AI score0.01813EPSS
SaveExploits1References8
OSV
OSV
added 2022/12/21 9:15 a.m.7 views

CVE-2022-46282

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

7.8CVSS6.1AI score0.00237EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/21 9:15 a.m.22 views

CVE-2022-46282

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

7.8CVSS0.00237EPSS
SaveExploits0References1
Prion
Prion
added 2022/12/21 9:15 a.m.21 views

Design/Logic Flaw

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

4.4CVSS8AI score0.00237EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder