Lucene search
+L

85 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.21 views

Adobe Substance 3D Stager OBJ File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.00332EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.22 views

Adobe Dimension OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OBJ...

7.8CVSS7.7AI score0.0032EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.26 views

Adobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS5.3AI score0.00325EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.23 views

Adobe Dimension OBJ File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OBJ...

7.8CVSS7.7AI score0.00346EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.26 views

Adobe Dimension OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS5.7AI score0.00332EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.32 views

Adobe Dimension OBJ File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS4.9AI score0.00333EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.5 views

PT-2023-1035 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.6 and earlier Description: The issue is related to a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

5.5CVSS5.3AI score0.00333EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2022/10/11 12:0 a.m.40 views

CVE-2022-41166

Due to lack of proper memory management, when a victim opens manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

5.8AI score0.00248EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.9 views

SAP 3D Visual Enterprise Author 缓冲区错误漏洞

SAP 3D Visual Enterprise Author is a desktop application from SAP Germany for managing 2D, 3D, animation, video and audio assets. SAP 3D Visual Enterprise Author suffers from a buffer overflow vulnerability that stems from a lack of proper memory management and can be exploited by attackers to Th...

5.5CVSS7.1AI score0.00248EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/10/11 12:0 a.m.8 views

PT-2022-25710 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated Wavefront Object .obj file in SAP 3D Visual Enterprise Viewer, it can trigger a Remote Code Execution...

7.8CVSS7.8AI score0.00576EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2022/10/11 12:0 a.m.44 views

CVE-2022-39808

Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

8.2AI score0.00353EPSS
SaveExploits0References2
NVD
NVD
added 2022/07/15 11:15 p.m.30 views

CVE-2022-35902

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open an OBJ file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within...

3.3CVSS0.00205EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/15 11:15 p.m.11 views

CVE-2022-35902

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open an OBJ file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within...

3.3CVSS5.8AI score0.00205EPSS
SaveExploits0References2
Prion
Prion
added 2022/07/15 11:15 p.m.23 views

Out-of-bounds

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open an OBJ file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within...

1.9CVSS4.1AI score0.00205EPSS
SaveExploits0References1Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2022/04/12 12:0 a.m.28 views

Bentley MicroStation CONNECT OBJ File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.6AI score0.00904EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/18 8:15 p.m.22 views

CVE-2021-46596

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

5.5CVSS0.01699EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/02/18 7:45 p.m.28 views

CVE-2021-46596

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

3.3CVSS5.4AI score0.01699EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:0 a.m.46 views

Bentley MicroStation CONNECT OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

3.3CVSS2.6AI score0.01699EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/13 10:15 p.m.9 views

CVE-2021-34985

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley ContextCapture 10.18.0.232. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

5.5CVSS5AI score0.01699EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/13 10:15 p.m.22 views

CVE-2021-34985

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley ContextCapture 10.18.0.232. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

5.5CVSS0.01699EPSS
SaveExploits0References2
Rows per page
Query Builder