Lucene search
+L

97 matches found

Positive Technologies
Positive Technologies
added 2025/05/26 12:00 a.m.13 views

PT-2025-22932 · Assimp +1 · Assimp +1

Name of the Vulnerable Software and Affected Versions: Open Asset Import Library Assimp version 5.4.3 Description: A vulnerability was found in Open Asset Import Library Assimp. It has been declared as problematic. Affected by this vulnerability is the function HL1MDLLoader::validate header of th...

7.8CVSS3.7AI score0.0027EPSS
SaveExploits1References19
Positive Technologies
Positive Technologies
added 2025/05/26 12:00 a.m.11 views

PT-2025-22884 · Assimp +1 · Assimp +1

Name of the Vulnerable Software and Affected Versions: Assimp version 5.4.3 Description: A vulnerability was found in the Open Asset Import Library Assimp. It has been rated as problematic. The issue affects the function MDLImporter::ImportUVCoordinate 3DGS MDL345 of the file...

5.5CVSS3.6AI score0.00249EPSS
SaveExploits1References19
CNNVD
CNNVD
added 2025/05/26 12:00 a.m.11 views

Assimp 缓冲区错误漏洞

Assimp is an Assimp open source library. It is used to import and export various 3D model formats. A buffer error vulnerability exists in Assimp version 5.4.3 that stems from causing out-of-bounds reads...

5.5CVSS4.4AI score0.00249EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/05/26 12:00 a.m.12 views

Assimp 缓冲区错误漏洞

Assimp is an Assimp open source library. It is used to import and export various 3D model formats. A buffer error vulnerability exists in Assimp version 5.4.3, which stems from an out-of-bounds read due to the parameter pcVerts operation...

5.5CVSS4.4AI score0.00249EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2025/05/23 8:24 a.m.19 views

CVE-2024-49294

Cross-Site Request Forgery CSRF vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Cross Site Request Forgery.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through = 5.4.3...

4.3CVSS7.2AI score0.00183EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/26 6:10 a.m.13 views

CVE-2025-29287

An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...

9.8CVSS7.8AI score0.00725EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/24 12:15 p.m.21 views

CVE-2025-27820

A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release...

7.5CVSS0.00891EPSS
SaveExploits0References5
OSV
OSV
added 2025/04/24 12:15 p.m.13 views

UBUNTU-CVE-2025-27820

A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release...

7.5CVSS7.1AI score0.00891EPSS
SaveExploits0References6
OSV
OSV
added 2025/04/21 3:31 p.m.14 views

GHSA-3922-2R6R-R4FV MCMS allows arbitrary file uploads in the ueditor component

An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...

9.8CVSS7.7AI score0.00725EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/04/21 12:00 a.m.8 views

CVE-2025-29287

An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...

9.6AI score0.00725EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/04/21 12:00 a.m.13 views

PT-2025-17439

Name of the Vulnerable Software and Affected Versions MCMS version 5.4.3 Description An arbitrary file upload vulnerability in the ueditor component of MCMS allows attackers to execute arbitrary code via uploading a crafted file. Recommendations For MCMS version 5.4.3, consider disabling the...

9.8CVSS6.3AI score0.00725EPSS
SaveExploits1References19
PyPA
PyPA
added 2025/04/14 3:15 a.m.17 views

PYSEC-2025-171

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateSurfaceHeaderOffsets of the file code/AssetLib/MD3/MD3Loader.cpp of the component File Handler. The manipulation leads to heap-based buffer...

5.3CVSS5.9AI score0.00281EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/04/14 12:00 a.m.11 views

Open Asset Import Library 安全漏洞

Open Asset Import Library assimp is a library of Open Asset Import Library open source. A security vulnerability exists in Open Asset Import Library version 5.4.3 and earlier, which originates from a heap buffer overflow in function aiString::Set in file include/assimp/types.h. The vulnerability ...

5.3CVSS5.8AI score0.00282EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2025/04/05 2:39 p.m.21 views

CVE-2025-3158

A flaw has been found in the Open Asset Import Library assimp. In affected versions, a malformed LWO file may trigger a heap-based buffer overflow, which may lead to an application crash or other undefined behavior...

5.3CVSS5.3AI score0.0033EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2025/04/03 12:00 a.m.7 views

PT-2025-14724

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3 Description A critical issue has been found in the Open Asset Import Library Assimp, affecting the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup in the file...

8.8CVSS5.9AI score0.00727EPSS
SaveExploits3References42
Positive Technologies
Positive Technologies
added 2025/04/03 12:00 a.m.9 views

PT-2025-14762

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3 Description A vulnerability has been found in the Open Asset Import Library Assimp, affecting the function Assimp::SceneCombiner::AddNodeHashes of the file code/Common/SceneCombiner.cpp of the...

8.8CVSS5.6AI score0.00623EPSS
SaveExploits4References45
CNNVD
CNNVD
added 2025/03/31 12:00 a.m.10 views

Open Asset Import Library(assimp) 安全漏洞

Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A security vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from an out-of-bounds read in the ASE File Handler component...

8.8CVSS6.3AI score0.00504EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/27 3:16 p.m.16 views

AZL-59297 CVE-2025-31176 affecting package gnuplot 5.4.3-1

A flaw was found in gnuplot. The plot3dpoints function may lead to a segmentation fault and cause a system crash...

6.2CVSS6.5AI score0.00195EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/25 9:15 a.m.12 views

UBUNTU-CVE-2025-2754

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as critical. Affected by this vulnerability is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the...

8.8CVSS6AI score0.0054EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/03/25 12:00 a.m.13 views

Open Asset Import Library(assimp) 缓冲区错误漏洞

Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A buffer error vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from the fact that incorrect manipulation of the parameter na can lead to out-of-bounds reads...

8.8CVSS4.9AI score0.0068EPSS
SaveExploits1References7
Rows per page
Query Builder