CVE-2025-10883

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-10883

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from an out-of-bounds read when parsing a specially crafted CATPRODUCT file, which could result in a crash, read sensitive data, or execute arbitrary code...

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from an out-of-bounds read when parsing a specially crafted CATPRODUCT file, which could result in a crash, read sensitive data, or execute arbitrary code in th...

CVE-2025-64012

InvoicePlane commit debb446c is vulnerable to Incorrect Access Control. The invoices/view handler fails to verify ownership before returning invoice data...

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from an out-of-bounds read when parsing a specially crafted PRT file, which could result in a crash, read sensitive data, or execute arbitrary code...

PT-2025-51735

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional Core Libraries allows Sniffing Network Traffic.This issue affects Connext Professional: from 7.4.0 before 7., from 7.2.0 before 7.3.1...

PT-2025-51433

Name of the Vulnerable Software and Affected Versions SendPulse Email Marketing Newsletter versions n/a through 2.2.1 Description A flaw exists in SendPulse Email Marketing Newsletter that could allow unauthorized retrieval of sensitive data. The issue involves the exposure of sensitive system...

PT-2025-51350

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 5.15 Description Weblate, a web-based localization tool, had a broken authorization issue in its REST API that allowed for systematic user and project enumeration. Specifically, it was possible to retrieve user...

CVE-2025-10883 CATPRODUCT File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-10883

Autodesk AutoCAD CATPRODUCT parsing vulnerability (CVE-2025-10883) arises from an out-of-bounds read when processing CATPRODUCT files. The issue is triggered by a malicious CATPRODUCT file parsed by affected Autodesk products, enabling an attacker to crash, read sensitive data, or execute arbitra...

CVE-2025-9460 SLDPRT File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-9459

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-9459

CVE-2025-9459 affects Autodesk AutoCAD and related components used to parse SLDPRT files. The vulnerability results from an out-of-bounds read when parsing SLDPRT content, which can cause a crash, expose sensitive data, or allow arbitrary code execution in the context of the affected process. Sev...

CVE-2025-9454

CVE-2025-9454 describes an Out-of-Bounds Read when parsing a specially crafted PRT file in Autodesk products. Connected sources indicate the issue affects Autodesk Shared Components versions older than 2026.5, and is triggered by parsing PRT files—potentially allowing a local attacker to crash th...

CVE-2025-9453 PRT File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-9453

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-14593 CATPART File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-14593

Autodesk CATPART parsing vulnerability CVE-2025-14593: A malicious CATPART file can trigger an Out-of-Bounds Read in certain Autodesk products, potentially crashing the process, exposing data, or allowing arbitrary code execution. Root cause is the parsing of CATPART files; impact includes crash,...

CVE-2025-66402 misskey.js's export data contains private post data

Misskey is an open source, federated social media platform. Starting in version 13.0.0-beta.16 and prior to version 2025.12.0, an actor who does not have permission to view favorites or clips can can export the posts and view the contents. Version 2025.12.0 fixes the issue...