Lucene search
+L

339 matches found

Cvelist
Cvelist
added 2025/01/05 5:31 a.m.33 views

CVE-2025-0219 Trimble SPS851 Receiver Status Identity Tab cross site scripting

A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site scripting. The attack may be launched...

5.1CVSS0.00303EPSS
Exploits0References3
CVE
CVE
added 2025/01/05 5:31 a.m.65 views

CVE-2025-0219

CVE-2025-0219 affects Trimble SPS851, version 488.01, specifically the Receiver Status Identity Tab. The vulnerability arises from improper handling of the System Name parameter, allowing cross-site scripting (XSS). The issue is exploitable remotely, and the public disclosure has occurred per the...

5.1CVSS3.4AI score0.00303EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/01/05 12:0 a.m.10 views

PT-2025-3790 · Trimble · Trimble Sps851

Name of the Vulnerable Software and Affected Versions: Trimble SPS851 version 488.01 Description: A problematic issue was found in the Ethernet Configuration Menu component of the affected software. The manipulation of the Hostname argument leads to cross-site scripting. It is possible to initiat...

5.1CVSS6.5AI score0.00406EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/01/05 12:0 a.m.6 views

Trimble SPS851 代码注入漏洞

The Trimble SPS851 is a modular GPS receiver from Trimble. A code injection vulnerability exists in the Trimble SPS851 version 488.01, which stems from the fact that incorrect manipulation of the parameter System Name can lead to cross-site scripting attacks...

5.1CVSS4.1AI score0.00303EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/01/05 12:0 a.m.6 views

Trimble SPS851 代码注入漏洞

The Trimble SPS851 is a modular GPS receiver from Trimble. A code injection vulnerability exists in the Trimble SPS851 version 488.01, which stems from the parameter Hostname of the component Ethernet Configuration Menu that leads to cross-site scripting...

5.1CVSS4.2AI score0.00406EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/01/05 12:0 a.m.4 views

PT-2025-3789 · Trimble · Trimble Sps851

Name of the Vulnerable Software and Affected Versions: Trimble SPS851 version 488.01 Description: A problematic issue has been found in the Receiver Status Identity Tab component of the software, affecting some unknown functionality. The manipulation of the System Name argument leads to cross-sit...

5.1CVSS6.5AI score0.00303EPSS
Exploits0References8
NVD
NVD
added 2024/11/22 10:15 p.m.17 views

CVE-2024-7509

Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS0.00417EPSS
Exploits0References1
NVD
NVD
added 2024/11/22 10:15 p.m.12 views

CVE-2024-7511

Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this vulnerability in that the...

5.5CVSS0.00398EPSS
Exploits0References1
NVD
NVD
added 2024/11/22 10:15 p.m.14 views

CVE-2024-7508

Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that th...

7.8CVSS0.00417EPSS
Exploits0References1
NVD
NVD
added 2024/11/22 10:15 p.m.14 views

CVE-2024-7510

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS0.00472EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/22 9:32 p.m.10 views

CVE-2024-7511 Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this vulnerability in that the...

3.3CVSS6.1AI score0.00398EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/22 9:32 p.m.30 views

CVE-2024-7511 Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this vulnerability in that the...

3.3CVSS0.00398EPSS
Exploits0References1
CVE
CVE
added 2024/11/22 9:32 p.m.49 views

CVE-2024-7511

CVE-2024-7511 affects Trimble SketchUp Pro SKP files. The issue is an out-of-bounds read during PSD data parsing embedded in SKP files, caused by inadequate validation of user-supplied data. This can allow information disclosure and, per the sources, could be leveraged with other vulnerabilities ...

5.5CVSS3.3AI score0.00398EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/22 9:32 p.m.11 views

CVE-2024-7510 Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS8AI score0.00472EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/22 9:32 p.m.25 views

CVE-2024-7510 Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS0.00472EPSS
Exploits0References1
CVE
CVE
added 2024/11/22 9:32 p.m.52 views

CVE-2024-7510

CVE-2024-7510 pertains to Trimble SketchUp SKP file parsing and a Use-After-Free condition that enables remote code execution. The flaw arises from not validating the existence of an object before performing operations during SKP file parsing, allowing code execution in the attacker’s context. Ex...

7.8CVSS8AI score0.00472EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/22 9:31 p.m.14 views

CVE-2024-7509 Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS8.1AI score0.00417EPSS
Exploits0References1
CVE
CVE
added 2024/11/22 9:31 p.m.63 views

CVE-2024-7509

CVE-2024-7509 concerns Trimble SketchUp SKP file parsing that results in a stack-based buffer overflow, enabling Remote Code Execution . The flaw arises from insufficient validation of the length of user-supplied data before copying to a stack buffer. Exploitation requires user interaction (targe...

7.8CVSS8AI score0.00417EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/22 9:31 p.m.33 views

CVE-2024-7509 Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS0.00417EPSS
Exploits0References1
CVE
CVE
added 2024/11/22 9:31 p.m.62 views

CVE-2024-7508

CVE-2024-7508 : In Trimble SketchUp Viewer, SKP file parsing is vulnerable to a heap-based buffer overflow due to unsafe validation of the length of user-supplied data before copying to a fixed-size heap buffer. This allows arbitrary code execution in the context of the current process and requir...

7.8CVSS8AI score0.00417EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder