Lucene search
+L

1502 matches found

Talos
Talos
•added 2022/02/28 12:00 a.m.•47 views

Gerbv RS-274X aperture macro outline primitive out-of-bounds read vulnerability

Summary An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit d7f42a9a. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a...

9.3CVSS7.6AI score0.01288EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/02/16 12:00 a.m.•2 views

PT-2022-12685

Name of the Vulnerable Software and Affected Versions WAGO 750-8212 PFC200 G2 2ETH RS Firmware version 03.05.1017 Description The issue is related to improper handling of user cookies, which can lead to escalating privileges to the administrative account of the router. This is a privilege...

SaveExploits2References5
Tenable Nessus
Tenable Nessus
•added 2022/02/07 12:00 a.m.•34 views

Yokogawa iDefine, STARDOM, ASTPLANNER, and TriFellows Stack-Based Buffer Overflow (CVE-2018-0651)

Buffer overflow in the license management function of YOKOGAWA products iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier allows remote attackers to stop the license...

9.8CVSS7.4AI score0.03972EPSS
SaveExploits0References5
NVD
NVD
•added 2022/02/04 11:15 p.m.•20 views

CVE-2021-40401

A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev commit b5f1eacd and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

10CVSS0.01324EPSS
SaveExploits1References3
OSV
OSV
•added 2022/02/04 11:15 p.m.•6 views

DEBIAN-CVE-2021-40401

A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev commit b5f1eacd and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.6CVSS8.6AI score0.01324EPSS
SaveExploits1References1
Prion
Prion
•added 2022/02/04 11:15 p.m.•25 views

Design/Logic Flaw

A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev commit b5f1eacd and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

6.8CVSS9.4AI score0.01324EPSS
SaveExploits1References3Affected Software3
OSV
OSV
•added 2022/02/04 11:15 p.m.•15 views

UBUNTU-CVE-2021-40401

A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev commit b5f1eacd and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

10CVSS7.4AI score0.01324EPSS
SaveExploits1References4
Mend
Mend
•added 2022/02/04 12:00 a.m.•1 views

CVE-2021-40401

A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev commit b5f1eacd and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

10CVSS0.01324EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/04 12:00 a.m.•5 views

CVE-2021-40401: Unchecked Return Value

A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev commit b5f1eacd and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

10CVSS8.5AI score0.01324EPSS
SaveExploits1References3
CVE
CVE
•added 2022/02/04 12:00 a.m.•132 views

CVE-2021-40401

CVE-2021-40401 affects Gerbv (RS-274X aperture definition tokenization) with a use-after-free in 2.7.0 (and forks) that an attacker can trigger via a crafted Gerber file to achieve code execution. Connected advisories confirm additional related CVEs (CVE-2021-40403 etc.) and describe the same fam...

10CVSS8AI score0.01324EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2022/02/04 12:00 a.m.•52 views

CVE-2021-40401

A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev commit b5f1eacd and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

10CVSS9.4AI score0.01324EPSS
SaveExploits1References3
Talos
Talos
•added 2022/01/31 12:00 a.m.•44 views

Gerbv RS-274X aperture definition tokenization use-after-free vulnerability

Summary A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev commit b5f1eacd and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this...

10CVSS8.6AI score0.01324EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•38 views

Mageia: Security Advisory (MGASA-2014-0557)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS6.7AI score0.09189EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2022/01/26 12:00 a.m.•3 views

PT-2022-37420

Name of the Vulnerable Software and Affected Versions xml-rs affected versions not specified Description The issue concerns xml-rs, a XML parser, which has open issues related to parsing, including integer overflows and panics. These issues may pose a problem when handling untrusted data. The...

5.8AI score
SaveExploits0References7
OSV
OSV
•added 2022/01/17 12:00 p.m.•16 views

RUSTSEC-2022-0039 project abandoned

Alternatives: - odbc-api - rs-odbc...

7.2AI score
SaveExploits0References3
RustSec
RustSec
•added 2022/01/17 12:00 p.m.•26 views

`markdown` (1.0.0 and higher) is maintained

A new markdown crate has been brought over by a new maintainer replacing the old crate. The crate GitHub repository is now wooorm/markdown-rs This advisory has been withdraw since version 1.0.0 was released on 2025-04-23. markdown 0.3.0 and lower was unmaintained The old markdown crate was no...

7.2AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2022/01/17 12:00 a.m.•1 views

PT-2022-37418

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The issue provides alternatives, including odbc-api and rs-odbc. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

5.8AI score
SaveExploits0References4
Openbugbounty
Openbugbounty
•added 2022/01/07 10:01 a.m.•18 views

rs-gastronomieservice.de Cross Site Scripting vulnerability OBB-2326653

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2022/01/06 10:12 p.m.•36 views

Use of Uninitialized Resource in messagepack-rs.

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestringprimitive may read from uninitialized memory locations...

9.8CVSS1.7AI score0.01191EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2022/01/06 10:12 p.m.•27 views

GHSA-JQJJ-R4QP-X2GH Use of Uninitialized Resource in messagepack-rs.

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestringprimitive may read from uninitialized memory locations...

9.8CVSS9.2AI score0.01372EPSS
SaveExploits0References5
Rows per page
Query Builder