Lucene search
+L

1211 matches found

OSS-Fuzz
OSS-Fuzz
•added 2021/03/19 4:21 p.m.•6 views

libredwg:llvmfuzz: Heap-buffer-overflow in cquote

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5111463900479488 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/03/16 2:40 p.m.•33 views

libredwg:llvmfuzz: Dynamic-stack-buffer-overflow in dxf_fixup_string

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4570910741889024 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 15 Crash Addres...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/03/03 3:52 p.m.•9 views

libredwg:llvmfuzz: Dynamic-stack-buffer-overflow in dxf_fixup_string

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4527176918630400 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 15 Crash Addres...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/02/26 11:51 a.m.•7 views

libredwg:llvmfuzz: Heap-buffer-overflow in strtol

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5292726317875200 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash Address:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/02/26 9:51 a.m.•7 views

libredwg:llvmfuzz: Heap-buffer-overflow in cquote

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6480199345635328 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

5.9AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•59 views

Siemens JT2Go DXF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF...

7.8CVSS5.2AI score0.02662EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•36 views

Siemens JT2Go DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF...

7.8CVSS4.2AI score0.02662EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•44 views

Siemens JT2Go DXF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF...

7.8CVSS5.2AI score0.02662EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•43 views

Siemens JT2Go DXF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF...

7.8CVSS5.2AI score0.02662EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•65 views

Siemens JT2Go DXF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF...

7.8CVSS5.2AI score0.02314EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•35 views

Siemens JT2Go DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF...

7.8CVSS4.2AI score0.02662EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•34 views

Siemens JT2Go DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF...

7.8CVSS4.2AI score0.02662EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•42 views

Siemens JT2Go DXF and DWG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF a...

7.8CVSS5.7AI score0.0337EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•43 views

Siemens JT2Go DXF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF...

7.8CVSS5.2AI score0.02314EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•46 views

Siemens JT2Go DXF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF...

7.8CVSS5.2AI score0.02314EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/01/19 12:00 a.m.•51 views

Open Design Alliance Drawings SDK Stack Buffer Overflow Vulnerability

Drawings is a development platform for desktop, mobile and web applications targeting .dwg and .dgn data.Drawings SDK is the Drawings Software Development Kit. A stack buffer overflow vulnerability exists in Open Design Alliance Drawings SDK versions prior to 2021.11. An attacker can exploit this...

7.8CVSS7.8AI score0.0337EPSS
SaveExploits0References1
NVD
NVD
•added 2021/01/18 8:15 a.m.•39 views

CVE-2021-25177

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack Crash, Exit, or Restart...

7.8CVSS7.5AI score0.02314EPSS
SaveExploits0References4
NVD
NVD
•added 2021/01/18 8:15 a.m.•30 views

CVE-2021-25178

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. This can allow attackers to cause a crash potentially enabling a denial of service attack Crash,...

7.8CVSS7.9AI score0.0337EPSS
SaveExploits0References6
NVD
NVD
•added 2021/01/18 8:15 a.m.•43 views

CVE-2021-25176

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack Crash, Exit, or Restart...

7.8CVSS7.5AI score0.02314EPSS
SaveExploits0References5
NVD
NVD
•added 2021/01/18 8:15 a.m.•51 views

CVE-2021-25175

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack Crash, Exit, or Restart...

7.8CVSS7.5AI score0.02662EPSS
SaveExploits0References9
Rows per page
Query Builder