Lucene search
+L

831 matches found

CNNVD
CNNVD
added 2021/12/08 12:0 a.m.7 views

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by an out-of-range read when parsing 3DS files. An attacker could exploit this vulnerability to obtain sensitive information...

4.3CVSS5.6AI score0.01804EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/12/08 12:0 a.m.11 views

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, U.S.A. Bentley View is vulnerable to a buffer error vulnerability that stems from a boundary error when processing JT files. An attacker could exploit this vulnerability to execute code in the context of the current process...

7.8CVSS6.2AI score0.02041EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.8 views

The vulnerability of the 3D viewer software, related to errors in code generation, allows a hacker to execute arbitrary code.

The vulnerability of the 3D viewer software is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...

8.8CVSS7.8AI score0.03821EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.8 views

The vulnerability of the 3D viewer, which involves a lack of input data verification, allows a perpetrator to execute arbitrary code.

The vulnerability of the 3D viewer software is related to the lack of checks on input data during the processing of 3MF files. Exploiting this vulnerability can allow attackers to execute arbitrary code using a specially created malicious file or a specially created malicious link...

7.8CVSS7.8AI score0.04938EPSS
SaveExploits0References6
OSV
OSV
added 2021/11/14 9:15 p.m.7 views

CVE-2021-43277

An out-of-bounds read vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...

7.8CVSS5.6AI score0.00814EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/11/14 9:15 p.m.5 views

CVE-2021-43277

An out-of-bounds read vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...

7.8CVSS6AI score0.00814EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/10 1:19 a.m.1 views

CVE-2021-43208

3D Viewer Remote Code Execution Vulnerability...

7.8CVSS7.4AI score0.03821EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/11/10 1:19 a.m.3 views

CVE-2021-43209

3D Viewer Remote Code Execution Vulnerability...

7.8CVSS7.3AI score0.04938EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2021/11/10 12:47 a.m.7 views

CVE-2021-43209 3D Viewer Remote Code Execution Vulnerability

...

7.8CVSS7.2AI score0.04938EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.7 views

ODAViewer 缓冲区错误漏洞

Open Design Alliance OdaViewer is a viewer from Open Design Alliance, USA. It is used for visualization of all Oda supported file formats and other visualization related functions. A security vulnerability exists in ODAViewer, which stems from the fact that carefully crafted data in a U3D file ca...

7.8CVSS7.5AI score0.00814EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.8 views

ODAViewer 缓冲区错误漏洞

Open Design Alliance OdaViewer is a viewer from Open Design Alliance, USA. It is used for visualization of all Oda supported file formats and other visualization related functions. A security vulnerability exists in ODAViewer that stems from the fact that carefully crafted data in a U3D file can...

7.8CVSS7.5AI score0.01293EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.7 views

The vulnerability of the function import_stl() in the import_stl.cc component of the OpenSCAD automated design system, related to writing outside the buffer boundaries, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the importstl function in the importstl.cc component of the OpenSCAD automated design system is related to writing outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even caus...

8.8CVSS7.5AI score0.01274EPSS
SaveExploits1References4Affected Software2
CNNVD
CNNVD
added 2021/09/09 12:0 a.m.6 views

WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin 3D Cover Carousel 1.0 and earlier versions, which...

6.1CVSS5.9AI score0.00895EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2021/08/24 12:0 a.m.6 views

PT-2021-18923 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15 iPadOS versions prior to 15 Description: The issue allows a 3D model constructed to look like the enrolled user to authenticate via Face ID. This is due to inadequate anti-spoofing models. The estimated number of...

6.8CVSS6.4AI score0.0027EPSS
SaveExploits0References3
OSV
OSV
added 2021/08/17 8:15 p.m.3 views

DEBIAN-CVE-2020-28594

A use-after-free vulnerability exists in the 3MFImporter::handleendmodel functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

7.8CVSS8AI score0.01342EPSS
SaveExploits1References1
OSV
OSV
added 2021/08/17 8:15 p.m.6 views

UBUNTU-CVE-2020-28594

A use-after-free vulnerability exists in the 3MFImporter::handleendmodel functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.2AI score0.01342EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/07/13 12:0 a.m.8 views

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces.SAP 3D Visual Enterprise Viewer version 9.0 contai...

6.5CVSS5.6AI score0.00761EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.7 views

The vulnerability of the application for 3D modeling and Paint 3D printing relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the application for 3D modeling and Paint 3D printing is related to the execution of operations beyond the buffer in memory during PLY file syntax analysis. Exploiting this vulnerability allows a attacker to execute arbitrary code using a specially created malware file or a...

6.6CVSS7.7AI score0.02146EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.9 views

The vulnerability of the application for 3D modeling and Paint 3D printing relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the application for 3D modeling and Paint 3D printing is related to the execution of operations beyond the buffer in memory during the syntactic analysis of GLB and STL files. Exploiting this vulnerability allows a attacker to execute arbitrary code using a specially created...

6.6CVSS7.6AI score0.02938EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.7 views

The vulnerability of the application for 3D modeling and Paint 3D printing relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the application for 3D modeling and Paint 3D printing is related to the execution of operations beyond the buffer in memory during the syntactic analysis of GLB files. Exploiting this vulnerability allows a attacker to execute arbitrary code using a specially created malware...

6.6CVSS7.7AI score0.02284EPSS
SaveExploits0References6
Rows per page
Query Builder