Adobe Substance3D Modeler Buffer Overflow Vulnerability

Adobe Substance3D Modeler is a 3D modeling software from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance3D Modeler 1.22.3 and prior versions, which can be exploited by an attacker to cause code execution in the current user environment...

CVE-2025-54276 Substance3D - Modeler | Out-of-bounds Read (CWE-125)

Substance3D - Modeler versions 1.22.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curren...

CVE-2025-54276 Substance3D - Modeler | Out-of-bounds Read (CWE-125)

Substance3D - Modeler versions 1.22.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curren...

Adobe Substance3D Modeler 缓冲区错误漏洞

Adobe Substance3D Modeler is a 3D modeling software from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance3D Modeler 1.22.3 and prior versions, which can be exploited by an attacker to cause code execution in the current user environment...

PT-2025-42176

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler versions 1.22.3 and earlier Description The software is susceptible to an out-of-bounds read issue when processing a specially designed file. This could allow an attacker to read data beyond the intended memory boundaries...

EUVD-2022-0102

Malicious code in bioql PyPI...

CVE-2022-2589

Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...

WordPress plugin Shipping with Venipak for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2024-24788 affecting package golang for versions less than 1.22.3

CVE-2024-24788 affecting package golang for versions less than 1.22.3. A patched version of the package is available...

CVE-2024-3727 affecting package cri-o for versions less than 1.22.3-3

CVE-2024-3727 affecting package cri-o for versions less than 1.22.3-3. A patched version of the package is available...

CVE-2024-3154 affecting package cri-o for versions less than 1.22.3-2

CVE-2024-3154 affecting package cri-o for versions less than 1.22.3-2. A patched version of the package is available...

CVE-2024-24788 affecting package msft-golang for versions less than 1.22.3

CVE-2024-24788 affecting package msft-golang for versions less than 1.22.3. A patched version of the package is available...

Golang 1.22.x < 1.22.3 DoS

The version of Golang running on the remote host is 1.22.x prior to 1.22.2. It is, therefore, affected by a denial of service DoS vulnerability. A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop. Note that Nessus has not tested for thes...

Infinite loop

Overview std/net is a Go standard library package std/net Affected versions of this package are vulnerable to Infinite loop. Go Vulnerability Report:A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop. Remediation Upgrade std/net to versi...

PT-2023-19784 · Unknown · Appium-Desktop

Name of the Vulnerable Software and Affected Versions: appium-desktop versions prior to 1.22.3-4 Description: The issue is an OS Command Injection, which affects the GitHub repository appium/appium-desktop. Recommendations: For versions prior to 1.22.3-4, update to version 1.22.3-4 or later to...

CVE-2022-2589

Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...

PYSEC-2022-246

Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...

UBUNTU-CVE-2022-2589

Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...

CVE-2022-2589 Cross-site Scripting (XSS) - Reflected in beancount/fava

Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...

Security fix for the ALT Linux 10 package cri-o version 1.22.3-alt2

1.22.3-alt2 built March 24, 2022 Mikhail Gordeev in task 296969 March 21, 2022 Mikhail Gordeev - Add cve fix to changelog - Fixes: CVE-2022-0811...