Lucene search
K

1102 matches found

ATTACKERKB
ATTACKERKB
added 2025/03/13 5:15 p.m.0 views

CVE-2025-1427

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.4AI score0.0024EPSS
Exploits0References4Affected Software9
OSV
OSV
added 2025/03/13 5:15 p.m.2 views

CVE-2025-1427

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS6.1AI score0.0024EPSS
Exploits0References3
NVD
NVD
added 2025/03/13 5:15 p.m.17 views

CVE-2025-1427

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.0024EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/03/13 4:51 p.m.9 views

CVE-2025-1650 CATPRODUCT File Parsing Uninitialized Variable Vulnerability

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.7AI score0.00224EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/03/13 4:51 p.m.28 views

CVE-2025-1650 CATPRODUCT File Parsing Uninitialized Variable Vulnerability

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00224EPSS
Exploits0References3
CVE
CVE
added 2025/03/13 4:51 p.m.66 views

CVE-2025-1650

Autodesk AutoCAD is affected by CVE-2025-1650 due to parsing a malicious CATPRODUCT file, which can trigger an Uninitialized Variable condition. The vulnerability allows a local attacker to cause a crash, read sensitive data, or execute arbitrary code in the current process context. Root cause de...

7.8CVSS7.7AI score0.00224EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/13 4:51 p.m.6 views

CVE-2025-1649 CATPRODUCT File Parsing Uninitialized Variable Vulnerability

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.7AI score0.00224EPSS
Exploits0References3
CVE
CVE
added 2025/03/13 4:51 p.m.70 views

CVE-2025-1649

CVE-2025-1649 concerns Autodesk AutoCAD and the CATPRODUCT file type. A maliciously crafted CATPRODUCT file may be parsed in AutoCAD to trigger an Uninitialized Variable condition, potentially allowing a crash, data exposure, or arbitrary code execution in the current process. Affected behavior i...

7.8CVSS7.7AI score0.00224EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/03/13 4:51 p.m.8 views

CVE-2025-1649 CATPRODUCT File Parsing Uninitialized Variable Vulnerability

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00224EPSS
Exploits0References3
CVE
CVE
added 2025/03/13 4:46 p.m.85 views

CVE-2025-1427

Autodesk AutoCAD is affected by CVE-2025-1427 due to an Uninitialized Variable vulnerability when parsing a malicious CATPRODUCT file. Root cause: uninitialized variable in CATPRODUCT parsing. Impact: crash, read sensitive data, or execute arbitrary code in the current process. Exploitation is lo...

7.8CVSS7.7AI score0.0024EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/03/13 4:46 p.m.12 views

CVE-2025-1427 CATPRODUCT File Parsing Uninitialized Variable Vulnerability

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.0024EPSS
Exploits0References3
Zero Day Initiative
Zero Day Initiative
added 2025/03/13 12:0 a.m.10 views

Adobe Acrobat Reader DC AcroForm Use of Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.7AI score0.00314EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/13 12:0 a.m.1 views

Autodesk AutoCAD 安全漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from Autodesk, Inc. A security vulnerability exists in Autodesk AutoCAD that originates from an uninitialized variable vulnerability when parsing a specially crafted CATPRODUCT file, which could lead to a crash, read sensitive data, ...

7.8CVSS6.8AI score0.0024EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.3 views

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the use of an uninitialized variable, which allows a hacker to execute arbitrary code.

The vulnerability of Cobalt Ashlar-Vellum software for parametric automated design and 3D modeling is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a attacker to execute arbitrary code within the context of the current process...

7.8CVSS7.6AI score0.00275EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2025/03/11 9:15 p.m.5 views

CVE-2025-2014

Ashlar-Vellum Cobalt VS File Parsing Use of Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the...

7.8CVSS0.00275EPSS
Exploits0References1
CVE
CVE
added 2025/03/11 8:42 p.m.48 views

CVE-2025-2014

Ashlar-Vellum Cobalt is affected by CVE-2025-2014, a vulnerability in the parsing of VS files due to an uninitialized memory access. The flaw can enable arbitrary code execution in the context of the current process when a user visits a malicious page or opens a malicious file, requiring user int...

7.8CVSS8.1AI score0.00275EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/11 8:42 p.m.6 views

CVE-2025-2014 Ashlar-Vellum Cobalt VS File Parsing Use of Uninitialized Variable Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt VS File Parsing Use of Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the...

7.8CVSS8.1AI score0.00275EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/11 8:42 p.m.14 views

CVE-2025-2014 Ashlar-Vellum Cobalt VS File Parsing Use of Uninitialized Variable Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt VS File Parsing Use of Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the...

7.8CVSS0.00275EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/03/10 12:0 a.m.7 views

(0Day) Ashlar-Vellum Cobalt VS File Parsing Use of Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.9AI score0.00275EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/03/09 8:26 p.m.9 views

CVE-2025-2024

Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS7.7AI score0.00241EPSS
Exploits0References3
Rows per page
Query Builder