Lucene search
+L

33375 matches found

NVD
NVD
•added 2020/12/02 6:15 p.m.•44 views

CVE-2020-13494

A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files. A specially crafted malformed file can trigger a heap overflow which can result in out of bounds memory access which could lead to information disclosure. This vulnerability...

5.5CVSS4.7AI score0.01179EPSS
SaveExploits1References1
Prion
Prion
•added 2020/12/02 6:15 p.m.•30 views

Heap overflow

A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files. A specially crafted malformed file can trigger a heap overflow which can result in out of bounds memory access which could lead to information disclosure. This vulnerability...

4.3CVSS5.3AI score0.01179EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2020/12/02 6:15 p.m.•38 views

Heap overflow

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. A specially crafted USDC file format path jumps decompression heap overflow in a way path jumps are processed. To trigger this vulnerability, the victim needs to open an...

6.8CVSS7.6AI score0.01347EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/12/02 5:25 p.m.•60 views

CVE-2020-13493

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. A specially crafted USDC file format path jumps decompression heap overflow in a way path jumps are processed. To trigger this vulnerability, the victim needs to open an...

8.8CVSS7.7AI score0.01347EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2020/12/02 4:36 p.m.•18 views

golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

A flaw was found in the Go encoding/binary package. Certain invalid inputs to the ReadUvarint or the ReadVarint causes those functions to read an unlimited number of bytes from the ByteReader argument before returning an error. This flaw possibly leads to processing more input than expected. The...

7.5CVSS6.7AI score0.04861EPSS
SaveExploits0References5
Gitee
Gitee
•added 2020/12/02 11:16 a.m.•111 views

Exploit for Race Condition in Canonical Ubuntu_Linux

This is a PoC exploit for CVE-2016-5195, also known as the Dirty Cow vulnerability. The exploit targets Linux systems and uses the Dirty Cow vulnerability to gain root access. The vulnerability allows an attacker to write to a read-only page in memory, which can be used to execute arbitrary code...

7.2CVSS7.5AI score0.83524EPSS
SaveExploits92
Positive Technologies
Positive Technologies
•added 2020/12/02 12:00 a.m.•20 views

PT-2020-13571 · Pixar · Pixar Openusd

Name of the Vulnerable Software and Affected Versions: Pixar OpenUSD version 20.05 Description: A heap overflow issue exists when the software parses compressed sections in binary USD files. This occurs due to the way path jumps are processed in specially crafted USDC file formats, leading to a...

8.8CVSS8.2AI score0.01347EPSS
SaveExploits1References4
CNVD
CNVD
•added 2020/12/02 12:00 a.m.•8 views

Binary Vulnerability in CenturyStar Configuration Software

Beijing Century Changqiu Technology Co., Ltd. is a high-tech enterprise engaged in industrial automation software research and development, providing software development, sales, service and industrial automation system integration and other complete set of services and so on. Century Star...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/12/02 12:00 a.m.•16 views

Middleware Configuration Detection (Linux / Unix)

Binary data middlewareconfignixinstalled.nbin...

7.3AI score
SaveExploits0
CNVD
CNVD
•added 2020/12/02 12:00 a.m.•6 views

Binary Vulnerability in ZTE UC TP220 Upper PC Screen Setting Tool

Shenzhen Zhongda U-control Technology Co., Ltd. is an industrial visual touch control products - human-machine interface, text display, programmable logic controller PLC core technology research and development and overcome, professional development, sales as one of the high-tech enterprises. A...

7AI score
SaveExploits0
CNVD
CNVD
•added 2020/12/02 12:00 a.m.•8 views

Binary Vulnerability in ZTE UC TP220 Upper PC Screen Setting Tool (CNVD-2020-70592)

Shenzhen Zhongda U-control Technology Co., Ltd. is an industrial visual touch control products - human-machine interface, text display, programmable logic controller PLC core technology research and development and overcome, professional development, sales as one of the high-tech enterprises. A...

7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/02 12:00 a.m.•2 views

CVE-2020-13493: Heap-based Buffer Overflow

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. A specially crafted USDC file format path jumps decompression heap overflow in a way path jumps are processed. To trigger this vulnerability, the victim needs to open an...

8.8CVSS5.9AI score0.01347EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/02 12:00 a.m.•2 views

CVE-2020-13494: Heap-based Buffer Overflow

A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files. A specially crafted malformed file can trigger a heap overflow which can result in out of bounds memory access which could lead to information disclosure. This vulnerability...

5.5CVSS6AI score0.01179EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2020/12/02 12:00 a.m.•21 views

PT-2020-13572 · Pixar · Pixar Openusd

Name of the Vulnerable Software and Affected Versions: Pixar OpenUSD version 20.05 Description: A heap overflow issue exists in the parsing of compressed string tokens in binary USD files. This can be triggered by a specially crafted malformed file, leading to out of bounds memory access and...

5.5CVSS4.7AI score0.01179EPSS
SaveExploits1References4
CNVD
CNVD
•added 2020/12/01 12:00 a.m.•25 views

Binary Vulnerability in Zhongda UC YKBuilder V5.1

YKBuilder is a software for constructing embedded integrated development software. A binary vulnerability exists in ZTE YKBuilder V5.1. An attacker can exploit this vulnerability to construct malformed files that could cause the program to crash...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/12/01 12:00 a.m.•15 views

Cisco DNA Spaces Connector Web Detection.

Binary data ciscodnaspacesconnectorwebdetect.nbin...

7.3AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2020/11/30 3:06 p.m.•13 views

golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

A flaw was found in the Go encoding/binary package. Certain invalid inputs to the ReadUvarint or the ReadVarint causes those functions to read an unlimited number of bytes from the ByteReader argument before returning an error. This flaw possibly leads to processing more input than expected. The...

7.5CVSS6.7AI score0.04861EPSS
SaveExploits0References5
CNVD
CNVD
•added 2020/11/27 12:00 a.m.•8 views

Binary Vulnerability in Kermel Computer Activity Monitor

Kermel Computer Activity Monitor is a software that tracks all Internet activity, including browsing history, pages visited, access times and usernames. Features include monitoring an unlimited number of computers at the same time, performing stealth monitoring in a completely hidden manner, taki...

7AI score
SaveExploits0
zdt
zdt
•added 2020/11/26 12:00 a.m.•56 views

Razer Chroma SDK Server 3.16.02 - Race Condition Remote File Execution Exploit

Exploit Title: Razer Chroma SDK Server 3.16.02 - Race Condition Remote File Execution Exploit Author: Loke Hui Yi Vendor Homepage: https://razerid.razer.com Software Link: http://rzr.to/synapse-3-pc-download Version: , and create an exe file with the same application's name in that folder. The Ap...

8.1CVSS8.2AI score0.05989EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
•added 2020/11/25 12:00 a.m.•18 views

IBM WebSphere Application Server Installed (Linux)

Binary data ibmwebsphereapplicationservernixinstalled.nbin...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder