Lucene search
+L

829 matches found

Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.10 views

PT-2022-26384 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

5.5CVSS7AI score0.00341EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.7 views

PT-2022-26385 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

5.5CVSS7AI score0.00366EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.17 views

PT-2022-25678 · Tracker Software Products · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.4AI score0.00382EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.8 views

PT-2022-26396 · Tracker Software Products · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.4AI score0.00381EPSS
SaveExploits0References3
OSV
OSV
added 2022/09/16 10:11 p.m.10 views

GHSA-WXJJ-CGCX-R3VQ TensorFlow vulnerable to `CHECK` failures in `AvgPool3DGrad`

Impact The implementation of AvgPool3DGradOp does not fully validate the input originputshape. This results in an overflow that results in a CHECK failure which can be used to trigger a denial of service attack: python import tensorflow as tf ksize = 1, 1, 1, 1, 1 strides = 1, 1, 1, 1, 1 padding ...

5.9CVSS5.8AI score0.00398EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/09/13 12:0 a.m.4 views

PT-2022-5114 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 22.5.8 and earlier Adobe Photoshop versions 23.4.2 and earlier Description: The issue is related to an out-of-bounds write that could result in arbitrary code execution in the context of the current user. Exploitation...

7.8CVSS7.7AI score0.00338EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.12 views

The vulnerability of the microprogramming software of the Cognex 3D-A1000 Dimensioning System lies in the lack of authentication for the password change function, which allows unauthorized users to escalate their privileges.

The vulnerability of the microprogramming software of the Cognex 3D-A1000 Dimensioning System lies in the lack of authentication for the password change function. Exploiting this vulnerability could allow an attacker to gain increased privileges from a remote location...

10CVSS7.8AI score0.00807EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.13 views

The vulnerability of the microprogramming software of the Cognex 3D-A1000 Dimensioning System, related to the implementation of security functions at the client-side, allows attackers to exploit their privileges.

The vulnerability of the microprogramming software of the Cognex 3D-A1000 Dimensioning System is related to the implementation of security functions at the client side. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

10CVSS7.7AI score0.00694EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/09/06 12:0 a.m.5 views

Open Asset Import Library 缓冲区错误漏洞

Open Asset Import Library is a library for importing and exporting various 3d model formats, including scene post-processing to generate missing render data. A security vulnerability exists in Open Asset Import Library assimp that stems from the library containing a segmentation violation...

6.5CVSS6.4AI score0.00648EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/09/06 12:0 a.m.6 views

Cognex 3D-A1000 Dimensioning System 安全漏洞

The Cognex 3D-A1000 Dimensioning System is a compact industrial smart camera capable of capturing moving objects in 3D and 2D from Cognex Corporation. A security vulnerability exists in Cognex 3D-A1000 Dimensioning System version 1.0.3 3354 and prior versions, which is caused by invalid log outpu...

5.3CVSS5.8AI score0.00478EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/09/06 12:0 a.m.6 views

Cognex 3D-A1000 Dimensioning System 安全漏洞

The Cognex 3D-A1000 Dimensioning System is a compact industrial smart camera from Cognex capable of capturing moving objects in 3D and 2D. A security vulnerability exists in Cognex 3D-A1000 Dimensioning System version 1.0.3 3354 and prior versions. An attacker could exploit the vulnerability to...

9.1CVSS8.3AI score0.00694EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/08/01 12:0 a.m.9 views

The vulnerability of the APDFL library used by the 3D JT JT2Go viewer and the Teamcenter Visualization lifecycle management system allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of the APDFL viewer tool for 3D JT and JT2Go, as well as the Teamcenter Visualization lifecycle management system, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow attackers to execute arbitrary code or cause service...

7.8CVSS8AI score0.00425EPSS
SaveExploits0References5Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/07/15 11:15 p.m.5 views

CVE-2022-35903

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open a 3DS file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within...

3.3CVSS5.8AI score0.00205EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.8 views

The vulnerability of the CGM_NIST_Loader.dll library, a tool for 3D JT and JT2Go viewing, as well as the Teamcenter Visualization lifecycle management system, allows attackers to trigger a service failure.

The vulnerability of the CGMNISTLoader.dll library, used by the 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, is related to errors in pointer assignment during CGM file syntax analysis. Exploiting this vulnerability can allow attackers t...

3.3CVSS5.9AI score0.00508EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.7 views

The vulnerability of the CGM_NIST_Loader.dll library, a tool for 3D JT and JT2Go viewing, as well as the Teamcenter Visualization lifecycle management system, allows attackers to trigger a service failure.

The vulnerability of the CGMNISTLoader.dll library, used by the 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, is related to errors in pointer assignment during CGM file syntax analysis. Exploiting this vulnerability can allow attackers t...

3.3CVSS5.9AI score0.00508EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.9 views

The vulnerability of the CGM_NIST_Loader.dll library, a tool for 3D JT and JT2Go viewing, as well as the Teamcenter Visualization lifecycle management system, allows attackers to execute arbitrary code.

The vulnerability of the CGMNISTLoader.dll library, used by the 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, is related to the re-release of memory during syntax analysis of CGM files. Exploiting this vulnerability could allow attackers...

7.8CVSS7.6AI score0.00742EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.8 views

The vulnerability of the Tiff_Loader.dll library, a tool for 3D JT JT2Go viewing and Teamcenter Visualization lifecycle management system, allows a hacker to trigger a service failure.

The vulnerability of the TiffLoader.dll library, used by 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, stems from a cycle that requires an unavailable exit condition during syntax analysis of TIFF files. Exploiting this vulnerability can...

3.3CVSS5.9AI score0.00508EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/06/22 12:0 a.m.9 views

The vulnerability of the U3D components of PDF viewing and editing programs such as Adobe Reader and Adobe Acrobat allows a perpetrator to execute arbitrary code.

The vulnerability of the U3D components in PDF viewing and editing programs such as Adobe Reader and Adobe Acrobat is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS8.8AI score0.86319EPSS
SaveExploits11References3Affected Software2
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 9:13 p.m.6 views

Malicious code in taf-three-dimensional-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3019ee1a4da6ba81d0721c4cccfd580bc1f3a9f6aeba72ec8270c591dbfc6a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 9:13 p.m.9 views

MAL-2022-6412 Malicious code in taf-three-dimensional-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3019ee1a4da6ba81d0721c4cccfd580bc1f3a9f6aeba72ec8270c591dbfc6a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder