Lucene search
+L

97 matches found

CVE
CVE
added 2025/03/11 8:43 p.m.64 views

CVE-2025-2020

Ashlar-Vellum Cobalt VC6 file parsing vulnerability (CVE-2025-2020) stems from improper validation in VC6 file parsing, allowing a write past the end of an allocated buffer. This leads to remote code execution in the context of the affected process. Exploitation requires user interaction (target ...

7.8CVSS8AI score0.0026EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/11 8:42 p.m.8 views

CVE-2025-2016 Ashlar-Vellum Cobalt VC6 File Parsing Type Confusion Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt VC6 File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS8AI score0.0026EPSS
Exploits0References1
CVE
CVE
added 2025/03/11 8:42 p.m.53 views

CVE-2025-2016

CVE-2025-2016 concerns Ashlar-Vellum Cobalt VC6, where the vulnerability lies in VC6 file parsing. The issue is a type-confusion in parsing VC6 files caused by insufficient validation of user-supplied data, allowing an attacker to execute code in the context of the current process. Exploitation r...

7.8CVSS8AI score0.0026EPSS
Exploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2025/03/10 12:0 a.m.10 views

(0Day) Ashlar-Vellum Cobalt VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.00264EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2025/03/10 12:0 a.m.12 views

(0Day) Ashlar-Vellum Cobalt VC6 File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.9AI score0.0026EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2025/03/10 12:0 a.m.14 views

(0Day) Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.9AI score0.0026EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2024/12/30 8:16 p.m.12 views

CVE-2024-13051 Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the...

7.8CVSS7.5AI score0.00294EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/30 8:16 p.m.11 views

CVE-2024-13050 Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the...

7.8CVSS7.5AI score0.00294EPSS
Exploits0References1
CVE
CVE
added 2024/12/30 8:16 p.m.66 views

CVE-2024-13050

CVE-2024-13050 affects Ashlar-Vellum Graphite. The root cause is a failure to validate the length of user-supplied data while parsing VC6 files, causing a heap-based buffer overflow that can lead to remote code execution. The vulnerability requires user interaction (the target must open a malicio...

7.8CVSS8.1AI score0.00294EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/12/30 8:16 p.m.32 views

CVE-2024-13050 Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the...

7.8CVSS0.00294EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/12/30 12:0 a.m.14 views

(0Day) Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS7.2AI score0.00294EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2024/12/30 12:0 a.m.11 views

(0Day) Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS7.2AI score0.00294EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2024/08/24 12:0 a.m.8 views

PT-2024-17908 · Ashlar Vellum · Ashlar-Vellum Graphite

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Graphite affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this issue, where th...

7.8CVSS7.2AI score0.00294EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.5 views

CVE-2023-34308

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target...

8.8CVSS6.2AI score0.00916EPSS
Exploits0References2
NVD
NVD
added 2024/05/03 2:15 a.m.13 views

CVE-2023-34308

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target...

8.8CVSS8AI score0.00916EPSS
Exploits0References1
OSV
OSV
added 2024/05/03 2:15 a.m.5 views

CVE-2023-34308

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target...

8.8CVSS6.2AI score0.00916EPSS
Exploits0References1
NVD
NVD
added 2024/05/03 2:15 a.m.17 views

CVE-2023-34307

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target...

8.8CVSS8AI score0.00889EPSS
Exploits0References1
NVD
NVD
added 2024/05/03 2:15 a.m.20 views

CVE-2023-34303

Ashlar-Vellum Cobalt Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS8AI score0.00401EPSS
Exploits0References1
NVD
NVD
added 2024/05/03 2:15 a.m.13 views

CVE-2023-34306

Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the...

8.8CVSS8AI score0.00897EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/03 1:57 a.m.19 views

CVE-2023-34308 Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS8.2AI score0.00916EPSS
Exploits0References1
Rows per page
Query Builder