Lucene search
+L

621 matches found

Cvelist
Cvelist
added 2022/10/14 7:50 p.m.33 views

CVE-2022-38445 Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS8AI score0.00405EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/10/14 7:50 p.m.31 views

CVE-2022-38440 Adobe Dimension SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation...

7.8CVSS7.7AI score0.00472EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/10/14 12:00 a.m.30 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.2AI score0.00518EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/10/14 12:00 a.m.29 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.2AI score0.00518EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/10/14 12:00 a.m.31 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.2AI score0.00405EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/10/14 12:00 a.m.26 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.2AI score0.00405EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/10/14 12:00 a.m.25 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.2AI score0.00405EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/10/14 12:00 a.m.30 views

Adobe Dimension SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.8AI score0.00472EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/10/14 12:00 a.m.23 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.2AI score0.00405EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/13 3:15 a.m.27 views

CVE-2022-42899

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues when opening crafted SKP files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58 for MicroStation and...

7.8CVSS0.00677EPSS
SaveExploits2References1
Prion
Prion
added 2022/10/13 3:15 a.m.25 views

Stack overflow

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues when opening crafted SKP files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58 for MicroStation and...

4.4CVSS7.6AI score0.00677EPSS
SaveExploits2References1Affected Software2
Cvelist
Cvelist
added 2022/10/13 12:00 a.m.40 views

CVE-2022-42899

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues when opening crafted SKP files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58 for MicroStation and...

7.8CVSS7.9AI score0.00677EPSS
SaveExploits2References1
CVE
CVE
added 2022/10/13 12:00 a.m.71 views

CVE-2022-42899

Bentley MicroStation and Bentley View are affected by out-of-bounds read and stack overflow when opening crafted SKP files. The issue could lead to information disclosure and code execution. Fixed versions are MicroStation 10.17.01.58* and Bentley View 10.17.01.19*. Multiple sources in connected ...

7.8CVSS7.7AI score0.00677EPSS
SaveExploits2References1Affected Software2
Positive Technologies
Positive Technologies
added 2022/10/11 12:00 a.m.11 views

PT-2022-5418 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension version 3.4.5 Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. This vulnerability is associated with the analysis of SKP file...

7.8CVSS7.9AI score0.00518EPSS
SaveExploits0References4
OSV
OSV
added 2022/09/15 4:15 p.m.7 views

CVE-2022-40639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS6.2AI score0.00576EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/15 4:15 p.m.20 views

CVE-2022-40639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS0.00576EPSS
SaveExploits0References1
CVE
CVE
added 2022/09/15 3:26 p.m.59 views

CVE-2022-40639

CVE-2022-40639 affects Ansys SpaceClaim 2022 R1. The vulnerability is a use-after-free in the SKP file parsing path caused by not validating object existence before operations, enabling remote code execution when a user visits a malicious page or opens a malicious file. Exploitation requires user...

7.8CVSS7.8AI score0.00576EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/09/15 3:26 p.m.26 views

CVE-2022-40639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS8AI score0.00576EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/09/14 12:00 a.m.6 views

PT-2022-25435 · Ansys · Ansys Spaceclaim

Name of the Vulnerable Software and Affected Versions: Ansys SpaceClaim version 2022 R1 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

7.8CVSS7.8AI score0.00576EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2022/09/14 12:00 a.m.33 views

(0Day) Ansys SpaceClaim SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SK...

7.8CVSS4.8AI score0.00576EPSS
SaveExploits0
Rows per page
Query Builder