Lucene search
+L

17 matches found

SUSE CVE
SUSE CVE
•added 2024/07/03 4:55 a.m.•17 views

SUSE CVE-2020-28595

An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.8AI score0.01467EPSS
SaveExploits1References3
OSV
OSV
•added 2024/03/14 7:15 p.m.•15 views

CVE-2024-28425

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

7.5CVSS6.1AI score0.00566EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/14 7:15 p.m.•36 views

PYSEC-2024-276

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

7.5CVSS6.2AI score0.00566EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/14 7:15 p.m.•19 views

CVE-2024-28425

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

7.5CVSS7.8AI score0.00566EPSS
SaveExploits0References1
PyPA
PyPA
•added 2024/03/14 7:15 p.m.•31 views

PYSEC-2024-276

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

7.5CVSS6.2AI score0.00566EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/03/14 12:00 a.m.•17 views

Graykite Security Vulnerabilities

greykite is a software application. A flexible, intuitive and fast prediction library A security vulnerability exists in Greykite version v1.0.0, which stems from the loadobj function in /templates/pickleutils.py contains an arbitrary file upload vulnerability that allows an attacker to execute...

7.5CVSS7.7AI score0.00566EPSS
SaveExploits0References3
Mend
Mend
•added 2024/03/14 12:00 a.m.•2 views

CVE-2024-28425

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

7.7CVSS0.00566EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/14 12:00 a.m.•17 views

CVE-2024-28425

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

8.1AI score0.00566EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/14 12:00 a.m.•28 views

CVE-2024-28425

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

8AI score0.00566EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/14 12:00 a.m.•5 views

CVE-2024-28425: Unrestricted Upload of File with Dangerous Type

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

7.5CVSS6.5AI score0.00566EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/14 12:00 a.m.•81 views

CVE-2024-28425

greykite version v1.0.0 contains an arbitrary file upload vulnerability located in the load_obj function within the /templates/pickle_utils.py file. This flaw allows an attacker to execute arbitrary code by uploading a specially crafted file. To mitigate this risk, it is recommended to disable th...

7.5CVSS8.1AI score0.00566EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2021/02/10 10:15 p.m.•50 views

CVE-2020-28595

An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS0.01467EPSS
SaveExploits1References1
OSV
OSV
•added 2021/02/10 10:15 p.m.•73 views

DEBIAN-CVE-2020-28595

An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

7.8CVSS8AI score0.01467EPSS
SaveExploits1References1
Prion
Prion
•added 2021/02/10 10:15 p.m.•24 views

Cross site scripting

An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

6.8CVSS7.8AI score0.01467EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/02/10 9:51 p.m.•114 views

CVE-2020-28595

PrusaSlicer 2.2.0 and Master (commit 4b040b856) are affected by an out-of-bounds write in Obj.cpp load_obj() that can be triggered by a crafted .obj file, leading to code execution. The vulnerability arises during OBJ parsing in PrusaSlicer, where a loop over parsed faces and subsequent memory al...

8.8CVSS7.7AI score0.01467EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/02/10 9:51 p.m.•2 views

CVE-2020-28595

An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS0.01467EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/10 12:00 a.m.•5 views

CVE-2020-28595: Heap-based Buffer Overflow

An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS6.2AI score0.01467EPSS
SaveExploits1References3
Rows per page
Query Builder