Lucene search
+L

1381 matches found

osv_pysec
osv_pysec
•added 2025/05/26 4:15 a.m.•26 views

PYSEC-2025-173

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to...

5.5CVSS4.6AI score0.00264EPSS
SaveExploits1References6
osv_debian
osv_debian
•added 2025/05/26 4:15 a.m.•24 views

DEBIAN-CVE-2025-5166

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to...

5.5CVSS3.7AI score0.00264EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2025/05/26 4:15 a.m.•20 views

UBUNTU-CVE-2025-5166

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to...

5.5CVSS4.8AI score0.00264EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2025/05/26 3:00 a.m.•51 views

CVE-2025-5166 Open Asset Import Library Assimp MDC File Parser MDCLoader.cpp InternReadFile out-of-bounds

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to...

4.8CVSS0.00264EPSS
SaveExploits1References6
CVE
CVE
•added 2025/05/26 3:00 a.m.•131 views

CVE-2025-5166

Open Asset Import Library Assimp 5.4.3 contains CVE-2025-5166 affecting MDCImporter::InternReadFile in MDCLoader.cpp (MDC File Parser). The manipulation of the argument pcVerts leads to an out-of-bounds read and local access may be exploited. Public disclosure of the exploit is noted. Connected O...

5.5CVSS4.1AI score0.00264EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/26 3:00 a.m.•22 views

CVE-2025-5166 Open Asset Import Library Assimp MDC File Parser MDCLoader.cpp InternReadFile out-of-bounds

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to...

4.8CVSS3.9AI score0.00264EPSS
SaveExploits1References6
Mend
Mend
•added 2025/05/26 3:00 a.m.•11 views

CVE-2025-5166

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to...

5.5CVSS0.00264EPSS
SaveExploits1References9
osv_cve
osv_cve
•added 2025/05/26 3:00 a.m.•16 views

CVE-2025-5166 Open Asset Import Library Assimp MDC File Parser MDCLoader.cpp InternReadFile out-of-bounds

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to...

4.8CVSS4.7AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/26 12:00 a.m.•5 views

CVE-2025-5166: Out-of-bounds Read

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to...

5.5CVSS4.8AI score0.00264EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/26 12:00 a.m.•11 views

PT-2025-22882

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3 Description A vulnerability was found in the Open Asset Import Library Assimp. It has been classified as problematic and affects the function MDCImporter::InternReadFile of the component MDC File...

5.5CVSS3.5AI score0.00264EPSS
SaveExploits2References33
RedhatCVE
RedhatCVE
•added 2025/05/22 12:16 p.m.•18 views

CVE-2012-1440

The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified identsize field. NOTE: this may later be SPLIT into...

4.3CVSS6.8AI score0.77737EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:03 a.m.•25 views

CVE-2012-1430

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway formerly Webwasher 2010.1C, nProtect Anti-Virus 2011-01-17.01, Sophos Anti-Virus 4.61.0, and Rising Antivirus 22.83.00.03...

4.3CVSS6.8AI score0.95998EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/05/21 6:33 p.m.•22 views

Ackites KillWxapkg vulnerable to OS Command Injection

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been declared as critical. This vulnerability affects the function processFile of the file internal/unpack/unpack.go of the component wxapkg File Parser. The manipulation leads to os command injection. The attack can be initiated...

8.1CVSS7.6AI score0.02369EPSS
SaveExploits1References6Affected Software1
Snyk
Snyk
•added 2025/05/21 6:33 p.m.•4 views

Arbitrary Command Injection

Overview Affected versions of this package are vulnerable to Arbitrary Command Injection via the processFile function in the wxapkg File Parser component. An attacker can execute arbitrary system commands by providing crafted input to this function. Remediation There is no fixed version for...

8.1CVSS8AI score0.02369EPSS
SaveExploits1References2
osv_ghsa
osv_ghsa
•added 2025/05/21 6:33 p.m.•26 views

GHSA-W6P4-84VC-QC2W Ackites KillWxapkg vulnerable to OS Command Injection

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been declared as critical. This vulnerability affects the function processFile of the file internal/unpack/unpack.go of the component wxapkg File Parser. The manipulation leads to os command injection. The attack can be initiated...

5CVSS7.6AI score0.02369EPSS
SaveExploits1References6
Mend
Mend
•added 2025/05/21 4:31 p.m.•8 views

CVE-2025-5030

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been declared as critical. This vulnerability affects the function processFile of the file internal/unpack/unpack.go of the component wxapkg File Parser. The manipulation leads to os command injection. The attack can be initiated...

8.1CVSS0.02369EPSS
SaveExploits1References9
Vulnrichment
Vulnrichment
•added 2025/05/21 4:31 p.m.•7 views

CVE-2025-5030 Ackites KillWxapkg wxapkg File Parser unpack.go processFile os command injection

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been declared as critical. This vulnerability affects the function processFile of the file internal/unpack/unpack.go of the component wxapkg File Parser. The manipulation leads to os command injection. The attack can be initiated...

5.1CVSS5.6AI score0.02369EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/21 4:31 p.m.•88 views

CVE-2025-5030

CVE-2025-5030 affects Ackites KillWxapkg up to 2.4.1. The vulnerability resides in the function processFile of the file internal/unpack/unpack.go in the wxapkg file parser, enabling OS command injection . Multiple connected sources corroborate remote exploitation with high attack complexity and d...

8.1CVSS5.6AI score0.02369EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/05/21 4:31 p.m.•41 views

CVE-2025-5030 Ackites KillWxapkg wxapkg File Parser unpack.go processFile os command injection

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been declared as critical. This vulnerability affects the function processFile of the file internal/unpack/unpack.go of the component wxapkg File Parser. The manipulation leads to os command injection. The attack can be initiated...

5.1CVSS0.02369EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/21 12:00 a.m.•2 views

CVE-2025-5030: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been declared as critical. This vulnerability affects the function processFile of the file internal/unpack/unpack.go of the component wxapkg File Parser. The manipulation leads to os command injection. The attack can be initiated...

8.1CVSS4.9AI score0.02369EPSS
SaveExploits1References1
Rows per page
Query Builder