Lucene search
+L

369 matches found

OSV
OSV
added 2022/08/22 7:15 p.m.4 views

DEBIAN-CVE-2022-25972

An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

7.8CVSS7.5AI score0.00611EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/22 7:15 p.m.8 views

UBUNTU-CVE-2022-26061

A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

7.8CVSS7.5AI score0.00641EPSS
SaveExploits1References3
OSV
OSV
added 2022/08/22 7:15 p.m.7 views

UBUNTU-CVE-2022-25942

An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

7.8CVSS5.9AI score0.00598EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/08/22 12:0 a.m.3 views

PT-2022-4360 · Libhdf5 +3 · Libhdf5 +3

Name of the Vulnerable Software and Affected Versions: libhdf5 version 1.10.4 Description: The issue is related to an out-of-bounds read vulnerability in the gif2h5 functionality of the libhdf5 library. This vulnerability can be exploited by a remote attacker who provides a specially-crafted GIF...

10CVSS7.8AI score0.00598EPSS
SaveExploits1References20
BDU FSTEC
BDU FSTEC
added 2022/07/04 12:0 a.m.14 views

The vulnerability of the Microsoft Office suite, related to pointer offsets, allows a perpetrator to execute arbitrary code or gain full control over the application.

The vulnerability of the Microsoft Office package is related to a pointer offset issue during the processing of the cbHdrData element in the FEATHEADER field of BIFF format files. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain full control over the application...

9.6CVSS6.4AI score0.85731EPSS
SaveExploits11References15
Fedora
Fedora
added 2022/05/07 4:50 a.m.40 views

[SECURITY] Fedora 36 Update: usd-22.03-8.fc36

Universal Scene Description USD is a time-sampled scene description for interchange between graphics applications...

6.5CVSS2.2AI score0.02078EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2022/05/02 12:0 a.m.11 views

Fedora: Security Advisory for usd (FEDORA-2022-61f6ee6353)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.8AI score0.02078EPSS
SaveExploits1References2
Fedora
Fedora
added 2022/05/01 7:39 p.m.41 views

[SECURITY] Fedora 35 Update: usd-21.11-11.fc35

Universal Scene Description USD is a time-sampled scene description for interchange between graphics applications...

6.5CVSS2.2AI score0.02078EPSS
SaveExploits1
Fedora
Fedora
added 2022/04/29 6:56 a.m.42 views

[SECURITY] Fedora 34 Update: usd-21.08-19.fc34

Universal Scene Description USD is a time-sampled scene description for interchange between graphics applications...

7.8CVSS2.2AI score0.02078EPSS
SaveExploits3
NVD
NVD
added 2022/03/28 1:15 a.m.32 views

CVE-2021-44210

OX App Suite through 7.10.5 allows XSS via NIFF Notation Interchange File Format data...

6.1CVSS0.00898EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/03/28 1:15 a.m.3 views

CVE-2021-44210

OX App Suite through 7.10.5 allows XSS via NIFF Notation Interchange File Format data...

6.1CVSS6.3AI score0.00898EPSS
SaveExploits1References3
Prion
Prion
added 2022/03/28 1:15 a.m.21 views

Format string

OX App Suite through 7.10.5 allows XSS via NIFF Notation Interchange File Format data...

4.3CVSS5.9AI score0.00898EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2022/03/28 12:59 a.m.91 views

CVE-2021-44210

OX App Suite (Open-Xchange) up to version 7.10.5 is affected by a Cross-Site Scripting flaw in the frontend triggered via NIFF data. Publicly documented details indicate the vulnerable version is 7.10.5 with a fix in 7.10.5-rev26. Impact involves executing script in the victim’s context through N...

6.1CVSS5.9AI score0.00898EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.7 views

The vulnerability of Adobe Dimension’s 3D design software lies in its inability to handle data writing beyond the buffer limit, allowing attackers to execute arbitrary code.

The vulnerability of Adobe Dimension’s 3D design software relates to the issue of data writing beyond the buffer during the processing of GIF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.03144EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.9 views

The vulnerability of Adobe Dimension’s 3D design software lies in its inability to handle data writing beyond the buffer limit, allowing attackers to execute arbitrary code.

The vulnerability of Adobe Dimension’s 3D design software relates to the issue of data writing beyond the buffer during the processing of GIF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.03144EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/12/14 4:15 p.m.5 views

CVE-2021-42068

When a user opens a manipulated GIF .gif file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

4.3CVSS6.6AI score0.00545EPSS
SaveExploits0References3Affected Software1
Fedora
Fedora
added 2021/10/31 1:10 a.m.42 views

[SECURITY] Fedora 35 Update: usd-21.08-17.fc35

Universal Scene Description USD is a time-sampled scene description for interchange between graphics applications...

7.8CVSS2.2AI score0.0136EPSS
SaveExploits2
CNNVD
CNNVD
added 2021/06/18 12:0 a.m.6 views

Cleo LexiCom 路径遍历漏洞

Cleo LexiCom is an integrated platform from Cleo, Inc. Accelerate EDI automation, speed trade partner on-boarding and easily resolve EDI issues. A path traversal vulnerability exists in Cleo LexiCom 5.5.0.0, which originates in an AS2 message where the sender can specify a filename that can conta...

9.8CVSS8.4AI score0.01549EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/06/17 12:0 a.m.8 views

PT-2021-19994 · Unknown · Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Drawings SDK versions prior to 2022.4 Description: An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK, resulting from the lack of proper validation of user-supplied data. This can result in a read past the...

7.1CVSS6.6AI score0.0205EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.9 views

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer 9, which can be exploited by an attacker to cause an application crash with the help of a specially crafted IFF file...

5.5CVSS5.6AI score0.00561EPSS
SaveExploits0References3
Rows per page
Query Builder