Lucene search
+L

778 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/06/22 12:00 a.m.35 views

Autodesk Design Review TGA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.7AI score0.01708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/22 12:00 a.m.34 views

Autodesk Design Review TGA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.7AI score0.01708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/22 12:00 a.m.31 views

Autodesk Design Review TGA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.7AI score0.01708EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/06/15 12:00 a.m.47 views

CentOS: Security Advisory for qt5-qtimageformats (CESA-2021:2328)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.9AI score0.02662EPSS
SaveExploits0References2
Cent OS
Cent OS
added 2021/06/14 6:46 p.m.101 views

qt5 security update

CentOS Errata and Security Advisory CESA-2021:2328 An update for qt5-qtimageformats is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

9.8CVSS7.1AI score0.02662EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2021/06/08 10:42 p.m.55 views

Important: Red Hat Security Advisory: qt5-qtimageformats security update

An update for qt5-qtimageformats is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS7.1AI score0.02662EPSS
SaveExploits0References5
OSV
OSV
added 2021/05/26 10:15 p.m.4 views

DEBIAN-CVE-2021-30498

A flaw was found in libcaca. A heap buffer overflow in export.c in function exporttga might lead to memory corruption and other potential consequences...

7.8CVSS7.2AI score0.01346EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2021/04/30 12:00 a.m.4 views

PT-2021-7364

Name of the Vulnerable Software and Affected Versions LibGD versions through 2.3.2 Description The issue is related to the read header tga function in the gd tga.c component of the LibGD graphics library. It involves reading beyond the valid boundaries of a data buffer. This can be exploited by a...

8.1CVSS7.2AI score0.03435EPSS
SaveExploits3References47
Positive Technologies
Positive Technologies
added 2021/04/12 12:00 a.m.7 views

PT-2021-4791 · Libcaca +6 · Libcaca +6

Name of the Vulnerable Software and Affected Versions: libcaca affected versions not specified Description: A flaw was found in the libcaca library, specifically a heap buffer overflow in the export tga function within the export.c file. This issue may lead to memory corruption and other potentia...

10CVSS7.5AI score0.02389EPSS
SaveExploits9References90
ArchLinux
ArchLinux
added 2021/03/25 12:00 a.m.191 views

[ASA-202103-26] godot: arbitrary code execution

Arch Linux Security Advisory ASA-202103-26 ========================================== Severity: Medium Date : 2021-03-25 CVE-ID : CVE-2021-26825 CVE-2021-26826 Package : godot Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1544 Summary ======= The package...

7.8CVSS0.9AI score0.01531EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2021/02/24 12:00 a.m.34 views

Siemens JT2Go TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TGA...

7.8CVSS4.3AI score0.00706EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/09 5:15 p.m.10 views

CVE-2020-27005

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of TGA files. This could result in an out of bounds write past the end of an allocated structure. A...

7.8CVSS7.2AI score0.00706EPSS
SaveExploits0References2
NVD
NVD
added 2021/02/09 5:15 p.m.39 views

CVE-2020-27005

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of TGA files. This could result in an out of bounds write past the end of an allocated structure. A...

7.8CVSS0.00706EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/02/09 3:38 p.m.34 views

CVE-2020-27005

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of TGA files. This could result in an out of bounds write past the end of an allocated structure. A...

8AI score0.00706EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/02/09 12:00 a.m.44 views

Godot Buffer Overflow Vulnerability

Godot is a 2D and 3D cross-platform compatible game engine and is open source software released under the MIT license. A buffer overflow vulnerability exists in Godot 3.2 and earlier versions. The vulnerability stems from improper boundary checking when loading .TGA image files. An attacker could...

7.8CVSS7.3AI score0.01531EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/08 3:15 p.m.6 views

DEBIAN-CVE-2021-26825

An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...

7.8CVSS8.1AI score0.01531EPSS
SaveExploits0References1
NVD
NVD
added 2021/02/08 3:15 p.m.25 views

CVE-2021-26826

A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash...

7.8CVSS0.01531EPSS
SaveExploits0References2
OSV
OSV
added 2021/02/08 3:15 p.m.4 views

DEBIAN-CVE-2021-26826

A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash...

7.8CVSS7.8AI score0.01531EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/08 3:15 p.m.25 views

CVE-2021-26826

A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash...

7.8CVSS7.5AI score
SaveExploits0References2
NVD
NVD
added 2021/02/08 3:15 p.m.23 views

CVE-2021-26825

An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...

7.8CVSS0.01531EPSS
SaveExploits0References2
Rows per page
Query Builder