Lucene search
K

23 matches found

OSV
OSV
added 2025/10/29 8:15 p.m.2 views

CVE-2025-11464

Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...

7.8CVSS6.2AI score
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-38392

Malicious code in bioql PyPI...

7.8CVSS7.7AI score0.00532EPSS
Exploits0References1
OSV
OSV
added 2024/05/03 2:15 a.m.1 views

CVE-2023-35709

Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS6.2AI score
Exploits0References1
NVD
NVD
added 2024/05/03 2:15 a.m.9 views

CVE-2023-34309

Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit ...

7.8CVSS8AI score0.00794EPSS
Exploits0References1
NVD
NVD
added 2024/05/03 2:15 a.m.9 views

CVE-2023-34311

Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit ...

7.8CVSS8AI score0.00532EPSS
Exploits0References1
NVD
NVD
added 2024/05/03 2:15 a.m.12 views

CVE-2023-35709

Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS8AI score0.00779EPSS
Exploits0References1
NVD
NVD
added 2024/05/03 2:15 a.m.9 views

CVE-2023-34302

Ashlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targ...

7.8CVSS8AI score0.01188EPSS
Exploits0References1
CVE
CVE
added 2024/05/03 1:57 a.m.50 views

CVE-2023-35710

Ashlar-Vellum Cobalt is affected. The vulnerability lies in parsing CO files, where insufficient validation of user-supplied data length enables a stack-based buffer overflow that can allow code execution in the current process. Exploitation requires user interaction (e.g., visiting a malicious p...

7.8CVSS8AI score0.01188EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/05/03 1:57 a.m.10 views

CVE-2023-35710 Ashlar-Vellum Cobalt Stack-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS8.3AI score0.01188EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 1:57 a.m.9 views

CVE-2023-35709 Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS8.1AI score0.00779EPSS
Exploits0References1
CVE
CVE
added 2024/05/03 1:57 a.m.49 views

CVE-2023-34311

The CVE-2023-34311 entry documents a vulnerability in Ashlar-Vellum Cobalt, where the untrusted pointer dereference occurs during parsing of CO files. The root cause is improper validation of a user-supplied value before dereferencing it as a pointer, enabling arbitrary code execution in the proc...

7.8CVSS8AI score0.00532EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/03 1:57 a.m.9 views

CVE-2023-34311 Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit ...

7.8CVSS8AI score0.00532EPSS
Exploits0References1
CVE
CVE
added 2024/05/03 1:57 a.m.53 views

CVE-2023-34310

CVE-2023-34310 affects Ashlar-Vellum Cobalt. The issue is an uninitialized memory access in the CO-file parser that can allow remote code execution. Exploitation requires user interaction (target must visit a malicious page or open a malicious file). The root cause is lack of proper memory initia...

7.8CVSS8AI score0.00794EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/05/03 1:57 a.m.17 views

CVE-2023-34311 Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit ...

7.8CVSS8.2AI score0.00532EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 1:57 a.m.15 views

CVE-2023-34309 Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit ...

7.8CVSS8AI score0.00794EPSS
Exploits0References1
CVE
CVE
added 2024/05/03 1:57 a.m.39 views

CVE-2023-34309

The CVE-2023-34309 issue affects Ashlar-Vellum Cobalt. A flaw in the CO file parser occurs from insufficient validation of a user-supplied value before it is dereferenced as a pointer, enabling arbitrary code execution in the current process. Exploitation requires user interaction (visiting a mal...

7.8CVSS8AI score0.00794EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/05/03 1:57 a.m.45 views

CVE-2023-34301

Ashlar-Vellum Cobalt is affected by a CO file parsing vulnerability described as an untrusted pointer dereference that enables remote code execution. The flaw arises from insufficient validation of a user-supplied value before it is dereferenced as a pointer, allowing code execution in the attack...

7.8CVSS8AI score0.00553EPSS
Exploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/06/15 12:0 a.m.21 views

(0Day) Ashlar-Vellum Cobalt Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.01188EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2023/06/15 12:0 a.m.21 views

(0Day) Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.00779EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2023/06/15 12:0 a.m.14 views

(0Day) Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.01188EPSS
Exploits0
Rows per page
Query Builder