Lucene search
+L

3603 matches found

CNNVD
CNNVD
•added 2024/02/15 12:00 a.m.•25 views

Adobe Substance 3D Designer buffer error vulnerability

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance 3D Designer 13.1.0 and earlier versions, which can be exploited by an attacker to execute arbitrary code on a system with the privileges of th...

7.8CVSS7.5AI score0.00339EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/15 12:00 a.m.•5 views

CVE-2024-20750: Out-of-bounds Read

Substance3D - Designer versions 13.1.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curre...

7.8CVSS6.1AI score0.00339EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/02/13 12:00 a.m.•16 views

Adobe Substance 3D Designer Buffer Overflow Information Disclosure

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.1AI score0.00341EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/13 12:00 a.m.•19 views

Adaptive Substance 3D Designer Buffer Overflow Information Disclosure

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.1AI score0.00319EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/13 12:00 a.m.•19 views

Adobe Substance 3D Designer Buffer Overflow

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.8AI score0.00329EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/13 12:00 a.m.•16 views

Adobe Substance 3D Designer Buffer Overflow Information Disclosure

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.1AI score0.0032EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/02/13 12:00 a.m.•16 views

PT-2024-1756 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Substance3D - Designer versions 13.1.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker...

7.8CVSS6.9AI score0.00339EPSS
SaveExploits0References8
Adobe
Adobe
•added 2024/02/13 12:00 a.m.•55 views

APSB24-13 : Security update available for Adobe Substance 3D Designer

Adobe has released an update for Adobe Substance 3D Designer. This update addresses a critical vulnerability in Substance 3D Designer. Successful exploitation could lead to arbitrary code execution in the context of the current user...

7.8CVSS8.1AI score0.00339EPSS
SaveExploits0Affected Software1
Veracode
Veracode
•added 2024/02/12 10:04 a.m.•37 views

Missing Authorization

Apache Solr is vulnerable to Missing Authorization. The vulnerability is caused due to lack of authentication checks within the Schema Designer, allowing an attacker to load configSets without proper authentication, resulting in arbitrary code execution...

7.5CVSS7.4AI score0.03024EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2024/02/09 6:31 p.m.•20 views

GHSA-4WXW-42WX-2WFX Apache Solr Schema Designer blindly "trusts" all configsets

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configur...

7.5CVSS6.9AI score0.03024EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2024/02/09 6:31 p.m.•46 views

Apache Solr Schema Designer blindly "trusts" all configsets

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configur...

7.5CVSS7.6AI score0.03024EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2024/02/09 6:15 p.m.•47 views

CVE-2023-50292

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

7.5CVSS8AI score0.03024EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2024/02/09 6:15 p.m.•9 views

DEBIAN-CVE-2023-50292

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

7.5CVSS7AI score0.03024EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/02/09 6:15 p.m.•19 views

UBUNTU-CVE-2023-50292

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

7.5CVSS7AI score0.03024EPSS
SaveExploits0References4
Prion
Prion
•added 2024/02/09 6:15 p.m.•50 views

Design/Logic Flaw

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

5CVSS7.5AI score0.03024EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2024/02/09 6:15 p.m.•50 views

CVE-2023-50292

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

7.5CVSS6.9AI score0.03024EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/02/09 5:29 p.m.•60 views

CVE-2023-50292 Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

7.5CVSS7.1AI score
SaveExploits0References4
Mend
Mend
•added 2024/02/09 5:29 p.m.•8 views

CVE-2023-50292

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

8.7CVSS0.03024EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2024/02/09 5:29 p.m.•70 views

CVE-2023-50292 Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

8AI score0.03024EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/09 12:00 a.m.•7 views

CVE-2023-50292: Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

7.5CVSS6AI score0.03024EPSS
SaveExploits0References2
Rows per page
Query Builder