Out-of-bounds

A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerability which may result in code execution...

Remote code execution

A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which may result in code execution...

CVE-2023-27906

A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerability which may result in code execution...

CVE-2023-27906

A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerability which may result in code execution...

CVE-2023-27906

A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerability which may result in code execution...

CVE-2023-25010

A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which may result in code execution...

CVE-2023-27907

The CVE-2023-27907 entry concerns Autodesk Maya USD Plugin prior to 0.23.0. The vulnerability is triggered by opening a malicious USD file and involves an out-of-bounds write that may lead to code execution. The affected component is the Maya USD Plugin (Autodesk Maya); other related advisories r...

CVE-2023-27907

A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerability which may result in code execution...

CVE-2023-27907

A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerability which may result in code execution...

CVE-2023-25010

CVE-2023-25010 affects Autodesk Maya USD Plugin (prior to 0.23.0). The root cause is an uninitialized variable when handling a malicious USD file, which may allow code execution. Reported in multiple sources (e.g., Autodesk security advisory ADSK-SA-2023-0003; Nessus plugin notes) with a CVSSv3.1...

CVE-2023-27906

CVE-2023-27906 affects Autodesk Maya USD Plugin prior to 0.23.0. The vulnerability is an out-of-bounds read in the USD file handling that may lead to code execution when a victim opens a malicious USD file. Connected sources (Nessus ADSK-SA-2023-0003) corroborate multiple vulnerabilities in the a...

CVE-2023-25010

A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which may result in code execution...

CVE-2023-27914

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the...

The vulnerability of the Vector Packet Processor (VPP) platform, a microprogramming-based software solution for data packet transmission gateways in Cisco Packet Data Networks, allows a hacker to trigger a service failure.

The vulnerability of the Vector Packet Processor VPP platform, a microprogramming-based software for packet transmission networks like the Cisco Packet Data Network Gateway PGW, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to caus...

Important: python38

Issue Overview: An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA RFC 3490 decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service...

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the redirection of URLs to an unreliable website, allowing a hacker to redirect users to any given URL address.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability could allow a malicious actor to redirect users to any given URL address...

Weblate: Testing flow includes a DeepSource secret

The testing workflow for the WeblateOrg/wlc repository included a DeepSource secret, which could have allowed a malicious actor to access parts of the repository and report artifacts to DeepSource. The recommended usage would have been to create a GitHub action environment secret and call it at...

Reth griefing

Lines of code Vulnerability details Impact The maximum slippage when buying rETH from the Uniswap V3 pool is calculated in Reth derivative contract by taking the current price in the Uniswap V3 pool at runtime, without taking into account the price at which the user sent the transaction to the...

The vulnerability of the Slapi-nis package for 389 Directory Server allows a hacker to trigger a service failure.

The vulnerability of the Slapi-nis package for 389 Directory Server is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Ubuntu 16.04 ESM : Git vulnerability (USN-5686-4)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5686-4 advisory. USN-5686-1 fixed several vulnerabilities in Git. This update provides the corresponding fix for CVE-2022-39253 on Ubuntu 16.04 ESM. Tenable has extracted the...