Lucene search
+L

718 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/09/10 12:0 a.m.39 views

SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.7AI score0.01623EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/09 1:15 p.m.25 views

CVE-2020-6340

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS0.01623EPSS
SaveExploits0References3
OSV
OSV
added 2020/09/09 1:15 p.m.3 views

CVE-2020-6340

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS5.8AI score0.01623EPSS
SaveExploits0References3
OSV
OSV
added 2020/09/09 1:15 p.m.4 views

CVE-2020-6336

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS5.8AI score0.01623EPSS
SaveExploits0References3
NVD
NVD
added 2020/09/09 1:15 p.m.18 views

CVE-2020-6336

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS0.01623EPSS
SaveExploits0References3
Prion
Prion
added 2020/09/09 1:15 p.m.20 views

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS4.5AI score0.01623EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2020/09/09 12:45 p.m.49 views

CVE-2020-6340

SAP 3D Visual Enterprise Viewer 9 is affected by a PCX file parsing vulnerability. The issue is an out-of-bounds write during PCX parsing that allows remote code execution; exploitation requires user interaction (e.g., opening a malicious file). This is documented by ZDI-20-1154 and corroborated ...

4.3CVSS4.5AI score0.01623EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2020/09/09 12:45 p.m.27 views

CVE-2020-6340

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS4.6AI score0.01623EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2020/09/09 12:40 p.m.27 views

CVE-2020-6336

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS4.6AI score0.01623EPSS
SaveExploits0References3
CVE
CVE
added 2020/09/09 12:40 p.m.48 views

CVE-2020-6336

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2020-6336 via the PCX file parser. The vulnerability is an out-of-bounds write during PCX parsing, allowing remote code execution when a user opens a malicious PCX file. User interaction is required to exploit. No vendor patch details are provi...

4.3CVSS4.5AI score0.01623EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/09/08 12:0 a.m.31 views

EulerOS Virtualization for ARM 64 3.0.2.0 : python-pillow (EulerOS-SA-2020-1966)

According to the versions of the python-pillow package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where...

5.5CVSS7AI score0.01468EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2020/09/08 12:0 a.m.25 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-1966)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.7AI score0.01468EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/09/07 12:0 a.m.33 views

NewStart CGSL MAIN 4.05 : python-imaging Vulnerability (NS-SA-2020-0045)

The remote NewStart CGSL host, running version MAIN 4.05, has python-imaging packages installed that are affected by a vulnerability: - libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. CVE-2020-5312 Note that Nessus has not tested for this issue but has instead reli...

9.8CVSS6.8AI score0.0369EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/08/14 12:0 a.m.4 views

Artifex Software Ghostscript Buffer Overflow Vulnerability (CNVD-2020-46257)

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

5.5CVSS8.1AI score0.02252EPSS
SaveExploits1References1
OSV
OSV
added 2020/08/13 3:15 a.m.3 views

ALPINE-CVE-2020-16305

A buffer overflow vulnerability in pcxwriterle in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

5.5CVSS7AI score0.02252EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2020/07/01 12:20 p.m.28 views

CVE-2020-10378

A flaw was found in python-pillow. In libImaging/PcxDecode.c, an out-of-bounds read occurs when reading PCX files where state-shuffle is instructed to read beyond state-buffer...

4.3CVSS2.9AI score0.01105EPSS
SaveExploits0References3
NVD
NVD
added 2020/06/25 7:15 p.m.12 views

CVE-2020-10378

In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state-shuffle is instructed to read beyond state-buffer...

5.5CVSS0.01105EPSS
SaveExploits0References8
OSV
OSV
added 2020/06/25 7:15 p.m.1 views

DEBIAN-CVE-2020-10378

In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state-shuffle is instructed to read beyond state-buffer...

5.5CVSS6.8AI score0.01105EPSS
SaveExploits0References1
OSV
OSV
added 2020/06/25 7:15 p.m.20 views

CVE-2020-10378

In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state-shuffle is instructed to read beyond state-buffer...

5.5CVSS6.5AI score
SaveExploits0References8
OSV
OSV
added 2020/06/25 7:15 p.m.14 views

PYSEC-2020-77

In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state-shuffle is instructed to read beyond state-buffer...

5.5CVSS3AI score0.01105EPSS
SaveExploits0References9
Rows per page
Query Builder