Lucene search
+L

706 matches found

Zero Day Initiative
Zero Day Initiative
•added 2024/10/11 12:00 a.m.•22 views

Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.9AI score0.00286EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/10/11 12:00 a.m.•21 views

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.9AI score0.00301EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/10/11 12:00 a.m.•20 views

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.9AI score0.003EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/10/08 12:00 a.m.•15 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.8AI score0.0036EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/10/08 12:00 a.m.•20 views

Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00352EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/14 3:03 p.m.•31 views

CVE-2024-39388 ZDI-CAN-24055: Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Substance3D - Stager versions 3.0.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.0044EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/14 3:03 p.m.•25 views

CVE-2024-39388 ZDI-CAN-24055: Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Substance3D - Stager versions 3.0.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.6AI score0.0044EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/14 2:55 p.m.•24 views

CVE-2024-20789 ZDI-CAN-24030: Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Dimension versions 3.4.11 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.6AI score0.00386EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/14 2:55 p.m.•45 views

CVE-2024-20789 ZDI-CAN-24030: Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Dimension versions 3.4.11 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00386EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/14 2:55 p.m.•44 views

CVE-2024-34124 ZDI-CAN-24031: Adobe Dimension SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Dimension versions 3.4.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00307EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/14 2:55 p.m.•36 views

CVE-2024-34124 ZDI-CAN-24031: Adobe Dimension SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Dimension versions 3.4.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.6AI score0.00307EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/08/13 12:00 a.m.•18 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.8AI score0.00386EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/08/13 12:00 a.m.•20 views

Adobe Dimension SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.8AI score0.00307EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/08/13 12:00 a.m.•15 views

Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.0044EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/05 12:00 a.m.•13 views

PT-2024-38398 · Trimble · Trimble Sketchup

Name of the Vulnerable Software and Affected Versions: Trimble SketchUp affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this issue, where the target mus...

7.8CVSS7.2AI score0.00469EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2024/08/05 12:00 a.m.•16 views

Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SK...

7.8CVSS6.9AI score0.00415EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/08/05 12:00 a.m.•17 views

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SK...

7.8CVSS6.9AI score0.00469EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/08/05 12:00 a.m.•17 views

Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.9AI score0.00415EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/07/25 12:00 a.m.•19 views

The vulnerability of the SKP File Parser component in the 3D design software Substance 3D Stager allows a hacker to execute arbitrary code.

The vulnerability of the SKP File Parser component in the 3D design software Substance 3D Stager relates to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.0043EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2024/06/13 11:25 a.m.•53 views

CVE-2024-34115 ZDI-CAN-24054: Adobe Substance 3D Stager SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Substance3D - Stager versions 2.1.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.0043EPSS
SaveExploits0References1
Rows per page
Query Builder