Lucene search
K

13 matches found

SUSE CVE
SUSE CVE
added 2024/07/03 4:55 a.m.5 views

SUSE CVE-2020-28595

An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.8AI score0.00387EPSS
Exploits1References3
NVD
NVD
added 2024/03/14 7:15 p.m.5 views

CVE-2024-28425

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

7.5CVSS7.8AI score0.00101EPSS
Exploits0References1
PyPA
PyPA
added 2024/03/14 7:15 p.m.7 views

PYSEC-2024-276

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

7.5CVSS6.2AI score0.00101EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/03/14 7:15 p.m.1 views

CVE-2024-28425

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

7.5CVSS6.1AI score
Exploits0References1
OSV
OSV
added 2024/03/14 7:15 p.m.3 views

PYSEC-2024-276

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

7.5CVSS6.2AI score0.00101EPSS
Exploits0References1
CVE
CVE
added 2024/03/14 12:0 a.m.46 views

CVE-2024-28425

CVE-2024-28425 affects greykite v1.0.0, with an arbitrary file upload vulnerability in load_obj at /templates/pickle_utils.py that allows arbitrary code execution. CVSSv3.1: 7.5 (Network, High impact, high complexity, user interaction required). Documents indicate the issue could be mitigated by ...

7.5CVSS8.1AI score0.00101EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/14 12:0 a.m.7 views

CVE-2024-28425

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

8.1AI score0.00101EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/14 12:0 a.m.10 views

CVE-2024-28425

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

8AI score0.00101EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/03/14 12:0 a.m.2 views

Graykite Security Vulnerabilities

greykite is a software application. A flexible, intuitive and fast prediction library A security vulnerability exists in Greykite version v1.0.0, which stems from the loadobj function in /templates/pickleutils.py contains an arbitrary file upload vulnerability that allows an attacker to execute...

7.5CVSS7.7AI score0.00101EPSS
Exploits0References3
NVD
NVD
added 2021/02/10 10:15 p.m.10 views

CVE-2020-28595

An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS0.00387EPSS
Exploits1References1
OSV
OSV
added 2021/02/10 10:15 p.m.1 views

DEBIAN-CVE-2020-28595

An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

7.8CVSS8AI score0.00387EPSS
Exploits1References1
Prion
Prion
added 2021/02/10 10:15 p.m.10 views

Cross site scripting

An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

6.8CVSS7.8AI score0.00387EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/02/10 9:51 p.m.68 views

CVE-2020-28595

PrusaSlicer 2.2.0 and Master (commit 4b040b856) are affected by an out-of-bounds write in Obj.cpp load_obj() that can be triggered by a crafted .obj file, leading to code execution. The vulnerability arises during OBJ parsing in PrusaSlicer, where a loop over parsed faces and subsequent memory al...

8.8CVSS7.7AI score0.00387EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder