Lucene search
+L

10566 matches found

CVE
CVE
added 2025/10/14 7:7 p.m.18 views

CVE-2025-54280

Substance3D - Viewer ≤ 0.25.2 is affected by an out-of-bounds write (CWE-787) that could lead to arbitrary code execution in the current user’s context. Exploitation requires user interaction: a victim must open a malicious file. The CVE is confirmed across multiple feeds (CVE-2025-54280; Red Hat...

7.8CVSS7.5AI score0.0018EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/10/14 7:7 p.m.14 views

CVE-2025-54280 Substance3D - Viewer | Out-of-bounds Write (CWE-787)

Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.0018EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/14 7:7 p.m.2 views

CVE-2025-54280 Substance3D - Viewer | Out-of-bounds Write (CWE-787)

Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.5AI score0.0018EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.6 views

Adobe Substance3D Viewer 缓冲区错误漏洞

Adobe Substance3D Viewer is a standalone desktop application for viewing and editing 3D files from Adobe. A buffer error vulnerability exists in Adobe Substance3D Viewer 0.25.2 and prior versions, which stems from the presence of an out-of-bounds write that could lead to the execution of arbitrar...

7.8CVSS7.5AI score0.0018EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.12 views

PT-2025-42168

Name of the Vulnerable Software and Affected Versions Substance3D - Viewer versions 0.25.2 and earlier Description The software contains a flaw due to an out-of-bounds write. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User interaction i...

7.8CVSS7.1AI score0.0018EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.5 views

Adobe Substance3D Viewer 安全漏洞

Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. A security vulnerability exists in Adobe Substance3D Viewer 0.25.2 and earlier versions, which can be exploited by an attacker to cause arbitrary code execution in the current us...

7.8CVSS7.6AI score0.00226EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.13 views

Adobe Substance3D Viewer 缓冲区错误漏洞

Adobe Substance3D Viewer is a standalone desktop application for viewing and editing 3D files from Adobe. A buffer error vulnerability exists in Adobe Substance3D Viewer 0.25.2 and prior versions, which stems from the presence of an out-of-bounds write that could lead to the execution of arbitrar...

7.8CVSS7.5AI score0.0018EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.6 views

PT-2025-42170

Name of the Vulnerable Software and Affected Versions Substance3D - Viewer versions 0.25.2 and earlier Description The software contains an out-of-bounds write issue that may result in a denial-of-service condition. An attacker can exploit this to crash the application or make it unavailable...

5.5CVSS6.5AI score0.00147EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.8 views

PT-2025-42171

Name of the Vulnerable Software and Affected Versions Substance3D - Viewer versions 0.25.2 and earlier Description An out-of-bounds write vulnerability exists in Substance3D - Viewer versions 0.25.2 and earlier. Successful exploitation of this issue could allow an attacker to execute arbitrary co...

7.8CVSS7.2AI score0.0018EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.6 views

Adobe Substance3D Viewer 缓冲区错误漏洞

Adobe Substance3D Viewer is a standalone desktop application for viewing and editing 3D files from Adobe USA. A buffer error vulnerability exists in Adobe Substance3D Viewer 0.25.2 and earlier versions, which stems from an out-of-bounds write vulnerability that could lead to a denial of service o...

5.5CVSS6.9AI score0.00147EPSS
SaveExploits0References1
Adobe
Adobe
added 2025/10/14 12:0 a.m.20 views

APSB25-99 : Security update available for Adobe Substance 3D Viewer

Adobe has released an update for Adobe Substance 3D Viewer. This update addresses critical and important vulnerabilities in Adobe Substance 3D Viewer. Successful exploitation could lead to arbitrary code execution and application denial-of-service...

7.9AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.12 views

PT-2025-42169

Name of the Vulnerable Software and Affected Versions Substance3D - Viewer versions 0.25.2 and earlier Description The software contains a Stack-based Buffer Overflow issue that may allow for arbitrary code execution with the privileges of the current user. A user must open a specially crafted fi...

7.8CVSS7.3AI score0.00226EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/10/13 6:49 a.m.9 views

WordPress Error Log Viewer by BestWebSoft plugin <= 1.1.6 - Authenticated (Administrator+) Arbitrary File Read vulnerability

Authenticated Administrator+ Arbitrary File Read vulnerability discovered by Duc Manh in WordPress Plugin Error Log Viewer by BestWebSoft versions = 1.1.6...

4.9CVSS6.8AI score0.00671EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/12 10:5 a.m.15 views

CVE-2025-9950

The Error Log Viewer by BestWebSoft plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.6 via the rrrlgvwrgetfile function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of...

4.9CVSS5.9AI score0.00671EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/11 12:30 p.m.9 views

EUVD-2025-33846

The Error Log Viewer by BestWebSoft plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.6 via the rrrlgvwrgetfile function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of...

4.9CVSS5.4AI score0.00671EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/11 10:15 a.m.8 views

CVE-2025-9950

The Error Log Viewer by BestWebSoft plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.6 via the rrrlgvwrgetfile function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of...

4.9CVSS0.00671EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/11 9:28 a.m.11 views

CVE-2025-9950 Error Log Viewer by BestWebSoft <= 1.1.6 - Authenticated (Administrator+) Arbitrary File Read

The Error Log Viewer by BestWebSoft plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.6 via the rrrlgvwrgetfile function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of...

4.9CVSS0.00671EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/11 9:28 a.m.4 views

CVE-2025-9950 Error Log Viewer by BestWebSoft <= 1.1.6 - Authenticated (Administrator+) Arbitrary File Read

The Error Log Viewer by BestWebSoft plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.6 via the rrrlgvwrgetfile function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of...

4.9CVSS5.5AI score0.00671EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/11 9:28 a.m.28 views

CVE-2025-9950

The CVE-2025-9950 issue affects the Error Log Viewer by BestWebSoft for WordPress. It is a directory traversal vulnerability exploitable by authenticated administrators (and above) to read arbitrary files via the rrrlgvwr_get_file function. The vulnerability affects versions up to 1.1.6. The issu...

4.9CVSS5.5AI score0.00671EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/11 12:0 a.m.9 views

PT-2025-41683

Name of the Vulnerable Software and Affected Versions Error Log Viewer by BestWebSoft plugin for WordPress versions up to and including 1.1.6 Description The Error Log Viewer by BestWebSoft plugin for WordPress is susceptible to Directory Traversal. This allows authenticated attackers with...

4.9CVSS6AI score0.00671EPSS
SaveExploits0References5
Rows per page
Query Builder