Lucene search
+L

7996 matches found

Positive Technologies
Positive Technologies
added 2025/01/27 12:00 a.m.8 views

PT-2025-5287 · Apple · Macos Sonoma +2

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.3 macOS Sonoma versions prior to 14.7.3 Description: The issue is related to parsing a file, which may lead to an unexpected app termination. It is also associated with unlimited resource allocation,...

5.5CVSS6.8AI score0.00262EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2025/01/22 12:00 a.m.19 views

Debian dla-3113 : libraw-bin - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3113 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3113-1 [email protected]...

5.5CVSS5.8AI score0.00377EPSS
SaveExploits2References10
Zero Day Initiative
Zero Day Initiative
added 2025/01/22 12:00 a.m.12 views

Siemens Tecnomatix Plant Simulation WRL File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00179EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/01/22 12:00 a.m.18 views

Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00179EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/01/22 12:00 a.m.17 views

Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00254EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/01/20 12:00 a.m.16 views

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validati...

6.5CVSS6.8AI score0.00951EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/01/20 12:00 a.m.12 views

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validati...

6.5CVSS6.8AI score0.00951EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/01/20 12:00 a.m.13 views

Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper...

7.5CVSS6.8AI score0.01007EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/01/20 12:00 a.m.16 views

Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper...

7.5CVSS6.8AI score0.01007EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/01/20 12:00 a.m.14 views

Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of a...

5.3CVSS6.7AI score0.01862EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/01/20 12:00 a.m.13 views

Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of a...

4.3CVSS6.7AI score0.01603EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/01/15 12:00 a.m.12 views

Microsoft Office Word RTF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

7.8CVSS6.9AI score0.80912EPSS
SaveExploits6References1
Vulnrichment
Vulnrichment
added 2025/01/13 3:20 a.m.12 views

CVE-2025-0412 Luxion KeyShot Viewer KSP File Parsing Memory Corruption Remote Code Execution Vulnerability

Luxion KeyShot Viewer KSP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot Viewer. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS7.6AI score0.00367EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/13 3:20 a.m.86 views

CVE-2025-0412

Luxion KeyShot Viewer vulnerable via KSP file parsing due to improper validation of user-supplied data, causing memory corruption and remote code execution. Impact is actionable when a user opens a malicious KSP file or visits a crafted page; the attacker can execute code in the process context. ...

7.8CVSS8.1AI score0.00367EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.2 views

PT-2025-53816

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge due to improper validation when parsing SFD files. This can lead to a use-after-free condition, potentially allowing a remote attacker to execute arbitrary code...

8.8CVSS8.8AI score0.00565EPSS
SaveExploits0References52
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.3 views

PT-2025-39345

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description An integer overflow exists in the FF file parsing functionality of GIMP. This issue could allow for remote code execution. Recommendations At the moment, there is no information about a newer...

7.8CVSS8.2AI score0.02814EPSS
SaveExploits0References48
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.6 views

PT-2025-39346

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description The GIMP software contains a stack-based buffer overflow in the ILBM file parsing functionality. This issue could allow for remote code execution. Recommendations At the moment, there is no...

7.8CVSS8.3AI score0.02814EPSS
SaveExploits0References43
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.3 views

PT-2025-15289

Name of the Vulnerable Software and Affected Versions: GIMP affected versions not specified Description: The issue is related to out-of-bounds write remote code execution in GIMP's FLI file parsing. This could potentially allow for remote code execution. Recommendations: At the moment, there is n...

8.8CVSS9AI score0.12653EPSS
SaveExploits0References50
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.11 views

PT-2025-41203

Name of the Vulnerable Software and Affected Versions 7-Zip versions prior to 25.01 7-Zip versions 21.02 through 25.00 Description 7-Zip contains a flaw in how it handles symbolic links within ZIP files. This issue allows attackers to perform directory traversal, potentially writing files to...

7.8CVSS7.6AI score0.26999EPSS
SaveExploits11References188
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.10 views

PT-2025-34644 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 3.9.0 and Master Branch 35a819fa Description: A stack-based buffer overflow vulnerability exists in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. The vulnerability...

9.8CVSS7.2AI score0.00682EPSS
SaveExploits1References9
Rows per page
Query Builder