Lucene search
+L

804 matches found

OSV
OSV
added 2022/02/04 11:15 p.m.8 views

DEBIAN-CVE-2021-40403

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker ca...

6.3CVSS7.3AI score0.01084EPSS
SaveExploits1References1
OSV
OSV
added 2022/02/04 11:15 p.m.19 views

CVE-2021-40403

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker ca...

6.3CVSS6.1AI score
SaveExploits0References3
Prion
Prion
added 2022/02/04 11:15 p.m.21 views

Information disclosure

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker ca...

4.3CVSS5.3AI score0.01084EPSS
SaveExploits1References3Affected Software3
UbuntuCve
UbuntuCve
added 2022/02/04 11:15 p.m.24 views

CVE-2021-40403

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker ca...

6.3CVSS6.9AI score0.01084EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/04 11:15 p.m.10 views

UBUNTU-CVE-2021-40403

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker ca...

6.3CVSS6.9AI score0.01084EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/02/04 12:00 a.m.35 views

CVE-2021-40403

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker ca...

5.8CVSS6.9AI score0.01084EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/02/04 12:00 a.m.10 views

PT-2022-11231 · Gerbv +3 · Gerbv +3

Name of the Vulnerable Software and Affected Versions: Gerbv versions 2.7.0 through 2.8.0 Gerbv dev commit b5f1eacd Description: An information disclosure issue exists in the pick-and-place rotation parsing functionality. A specially-crafted pick-and-place file can exploit the missing...

10CVSS7.2AI score0.03064EPSS
SaveExploits8References51
Debian CVE
Debian CVE
added 2022/02/04 12:00 a.m.50 views

CVE-2021-40403

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker ca...

6.3CVSS5.8AI score0.01084EPSS
SaveExploits1
Talos
Talos
added 2022/01/31 12:00 a.m.28 views

Gerbv pick-and-place rotation parsing use of uninitialized variable vulnerability

Summary An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An...

6.3CVSS5.7AI score0.01084EPSS
SaveExploits1
CNNVD
CNNVD
added 2022/01/31 12:00 a.m.13 views

Gerbv 安全漏洞

Gerbv is a Gerber file Rs-274X only viewer. It is used to view Rs-274X Gerber files, Excellon drill files, and Pick-N-Place files. A security vulnerability exists in Gerbv that stems from a faulty initialization of the product's pick-and-place rotation feature. An attacker could cause a memory le...

6.3CVSS7.4AI score0.01084EPSS
SaveExploits1References8
Openbugbounty
Openbugbounty
added 2022/01/12 9:48 a.m.11 views

dianathedanceplace.co.uk Cross Site Scripting vulnerability OBB-2331291

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNNVD
CNNVD
added 2021/12/06 12:00 a.m.12 views

Gerbv 缓冲区错误漏洞

Gerbv is a Gerber file Rs-274X only viewer. It is used to view Rs-274X Gerber files, Excellon drill files, and Pick-N-Place files. Gerbv suffers from a buffer error vulnerability that can be exploited by an attacker to execute code via a crafted gerber file...

10CVSS8.7AI score0.03064EPSS
SaveExploits1References10
Openbugbounty
Openbugbounty
added 2021/11/15 10:47 a.m.10 views

hanaya-place.com Cross Site Scripting vulnerability OBB-2272052

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
CVE
CVE
added 2021/10/13 8:31 a.m.57 views

CVE-2021-20833

The CVE-2021-20833 advisory concerns the SNKRDUNK Market Place App for iOS prior to version 2.2.0, which has improper server certificate verification. The underlying issue is certificate validation failure in the app, enabling a man-in-the-middle (MitM) attacker to eavesdrop on and potentially al...

7.4CVSS6.9AI score0.00486EPSS
SaveExploits0References2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/09/28 12:00 a.m.32 views

JVN#10168753: SNKRDUNK Market Place App for iOS vulnerable to improper server certificate verification

SNKRDUNK Market Place App for iOS provided SODA, Inc. is vulnerable to improper server certificate verification CWE-295. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on and/or alter the communication. Solution Update the application Update the application to the latest...

7.4CVSS7AI score0.00486EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/09/20 4:15 p.m.6 views

CVE-2021-39582

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swfGetPlaceObject located in swfobject.c. It allows an attacker to cause code Execution...

7.8CVSS7.1AI score0.01095EPSS
SaveExploits1References2
OSV
OSV
added 2021/09/20 4:15 p.m.27 views

UBUNTU-CVE-2021-39582

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swfGetPlaceObject located in swfobject.c. It allows an attacker to cause code Execution...

7.8CVSS5.8AI score0.01095EPSS
SaveExploits1References3
OSV
OSV
added 2021/08/18 6:15 p.m.7 views

CVE-2020-22122

A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...

7.5CVSS5.9AI score0.01254EPSS
SaveExploits1References1
NVD
NVD
added 2021/08/18 6:15 p.m.23 views

CVE-2020-22122

A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...

7.5CVSS0.01254EPSS
SaveExploits1References1
Prion
Prion
added 2021/08/18 6:15 p.m.21 views

Sql injection

A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...

5CVSS7.6AI score0.01254EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder