Lucene search
+L

2003 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/05/12 12:0 a.m.13 views

Adobe Substance 3D Stager SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/12 12:0 a.m.11 views

Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/12 12:0 a.m.18 views

Adobe Substance 3D Stager SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/12 12:0 a.m.12 views

Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/04/27 12:0 a.m.9 views

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.8AI score0.00345EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2023/04/16 12:0 a.m.9 views

Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability (CNVD-2023-37608)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to read beyond the end of an allocated memory structure...

5.5CVSS6.5AI score0.00315EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/04/16 12:0 a.m.47 views

Adobe Substance 3D Stager Resource Management Error Vulnerability

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A resource management error vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.5AI score0.00379EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/04/16 12:0 a.m.10 views

Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability (CNVD-2023-37607)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.4AI score0.00345EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/04/16 12:0 a.m.9 views

Adobe Substance 3D Stager Buffer Overflow Vulnerability (CNVD-2023-37602)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.8AI score0.00412EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/04/16 12:0 a.m.45 views

Adobe Substance 3D Stager Uninitialized Pointer Access Vulnerability

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An uninitialized pointer access vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to cause a sensitive memory disclosure and bypass mitigations...

5.5CVSS6.6AI score0.00325EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/04/16 12:0 a.m.37 views

Adobe Substance 3D Stager Buffer Overflow Vulnerability (CNVD-2023-41868)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to cause a sensitive memory disclosure...

5.5CVSS7AI score0.00325EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/04/16 12:0 a.m.22 views

Adobe Substance 3D Stager Resource Management Error Vulnerability (CNVD-2023-41871)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A resource management error vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.5AI score0.00379EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/04/16 12:0 a.m.6 views

Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to read beyond the end of an allocated memory structure...

5.5CVSS6.5AI score0.00325EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/04/14 12:0 a.m.11 views

Adobe Substance 3D Stager Heap Buffer Overflow Vulnerability

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A heap buffer overflow vulnerability exists in Adobe Substance 3D Stager in versions 2.0.1 and earlier. The vulnerability stems from a failure to perform security checksums on parameters in a user's context,...

7.8CVSS7.1AI score0.00412EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/04/13 12:0 a.m.6 views

The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.00379EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/13 12:0 a.m.6 views

The vulnerability of the Substance 3D Stager software lies in its susceptibility to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.9AI score0.00412EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/13 12:0 a.m.11 views

The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.7AI score0.00302EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/13 12:0 a.m.9 views

The vulnerability of the Substance 3D Stager software lies in its susceptibility to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.9AI score0.00412EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/04/12 10:15 p.m.20 views

CVE-2023-26402

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curre...

7.8CVSS7.5AI score0.00345EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/12 10:15 p.m.6 views

CVE-2023-26403

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that ...

5.5CVSS5.6AI score0.00325EPSS
SaveExploits0References1
Rows per page
Query Builder