Lucene search
+L

12081 matches found

CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•17 views

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. SAP 3D Visual Enterprise Viewer version 9.0 is...

6.5CVSS7.2AI score0.00988EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•2 views

CVE-2022-26107: Improper Input Validation

When a user opens a manipulated Jupiter Tesselation .jt, JTReader.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

6.5CVSS6.9AI score0.00988EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•2 views

CVE-2022-27654: Improper Input Validation

When a user opens a manipulated Photoshop Document .psd, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

6.5CVSS6.8AI score0.01121EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•11 views

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. SAP 3D Visual Enterprise Viewer version 9.0 is vulnerable to an input validation error that could be exploited to crash the application and temporarily disable users until the application is restarted. The application can be...

6.5CVSS7.2AI score0.00885EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•3 views

CVE-2022-26108: Improper Input Validation

When a user opens a manipulated Picture Exchange .pcx, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

6.5CVSS6.9AI score0.00885EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•17 views

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. SAP 3D Visual Enterprise Viewer version 9.0 is vulnerable to an input validation error that could be exploited to crash the application and temporarily disable the user until the application is restarted. The application can be...

6.5CVSS7.2AI score0.00988EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•15 views

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. SAP 3D Visual Enterprise Viewer - version 9.0 is vulnerable to an input validation error that could be exploited to crash the application and temporarily disable the user until the application is restarted. The application can ...

6.5CVSS7.1AI score0.00988EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•11 views

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. SAP 3D Visual Enterprise Viewer is vulnerable to ...

6.5CVSS7.2AI score0.01121EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•3 views

CVE-2022-26106: Improper Input Validation

When a user opens a manipulated Computer Graphics Metafile .cgm, CgmCore.dll received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

6.5CVSS6.9AI score0.00988EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2022/04/11 1:00 p.m.•7 views

log4j: Unsafe deserialization flaw in Chainsaw log viewer

A flaw was found in the log4j 1.x chainsaw component, where the contents of certain log entries are deserialized and possibly permit code execution. This flaw allows an attacker to send a malicious request with serialized data to the server to be deserialized when the chainsaw component is run...

9CVSS7.2AI score0.54411EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2022/04/11 12:59 p.m.•19 views

log4j: Unsafe deserialization flaw in Chainsaw log viewer

A flaw was found in the log4j 1.x chainsaw component, where the contents of certain log entries are deserialized and possibly permit code execution. This flaw allows an attacker to send a malicious request with serialized data to the server to be deserialized when the chainsaw component is run...

9CVSS7.2AI score0.54411EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2022/04/01 11:15 p.m.•11 views

CVE-2021-39908

In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 certain Unicode characters can be abused to commit malicious code into projects without being noticed in merge request or source code...

7.5CVSS7.1AI score0.0127EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/01 12:00 a.m.•16 views

The vulnerability of the tiff_expand_colormap() function in the MuPDf PDF viewer software, which allows a hacker to cause a service failure.

The vulnerability of the tiffexpandcolormap function in the MuPDf PDF viewer software is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to cause a service failure...

6.5CVSS6.9AI score0.01048EPSS
SaveExploits1References6Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/01 12:00 a.m.•3 views

CVE-2021-39908: Improper Control of Generation of Code

In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 certain Unicode characters can be abused to commit malicious code into projects without being noticed in merge request or source code...

7.5CVSS7.2AI score0.0127EPSS
SaveExploits0References2
OSV
OSV
•added 2022/03/28 9:15 p.m.•15 views

CVE-2017-20015

A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affects an unknown part of the component LAN Viewer. The manipulation with an unknown input leads to denial of service. Attacking locally is a requirement. The exploit has been...

5.5CVSS4.9AI score0.00262EPSS
SaveExploits0References3
Prion
Prion
•added 2022/03/28 9:15 p.m.•17 views

Design/Logic Flaw

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affects an unknown part of the component LAN Viewer. The manipulation with an unknown input leads to denial of service. Attacking locally is a requirement. T...

2.1CVSS5.5AI score0.00262EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2022/03/28 8:45 p.m.•64 views

CVE-2017-20015

CVE-2017-20015 affects WEKA INTEREST Security Scanner up to version 1.8, specifically the LAN Viewer component. A denial-of-service can be caused by manipulating an unknown input, with local access required. The vulnerability is exploitable via locally triggered input, and the exploit has been di...

5.5CVSS4.5AI score0.00262EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/03/28 8:45 p.m.•35 views

CVE-2017-20015 WEKA INTEREST Security Scanner LAN Viewer denial of service

A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affects an unknown part of the component LAN Viewer. The manipulation with an unknown input leads to denial of service. Attacking locally is a requirement. The exploit has been...

2.8CVSS5.5AI score0.00262EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/03/28 12:00 a.m.•15 views

The vulnerability of the plugin for viewing RAW images relates to improper handling of code generation, allowing a malicious actor to execute arbitrary code.

The vulnerability of the plugin for viewing RAW images is related to incorrect code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.02258EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2022/03/28 12:00 a.m.•13 views

PT-2022-7888 · Weka · Weka Interest Security Scanner

Name of the Vulnerable Software and Affected Versions: WEKA INTEREST Security Scanner versions up to 1.8 Description: A problematic vulnerability was found in the LAN Viewer component of the WEKA INTEREST Security Scanner, which can be exploited to cause a denial of service. The vulnerability...

5.5CVSS6.7AI score0.00262EPSS
SaveExploits0References6
Rows per page
Query Builder