Lucene search
+L

455 matches found

NVD
NVD
•added 2022/02/24 7:15 p.m.•35 views

CVE-2022-0545

An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is...

7.8CVSS0.01164EPSS
SaveExploits0References3
OSV
OSV
•added 2022/02/24 7:15 p.m.•12 views

DEBIAN-CVE-2022-0545

An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is...

7.8CVSS7.8AI score0.01164EPSS
SaveExploits0References1
Prion
Prion
•added 2022/02/24 7:15 p.m.•190 views

Integer overflow

An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is...

5.1CVSS7.6AI score0.01164EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
•added 2022/02/24 7:15 p.m.•53 views

CVE-2022-0545

An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is...

7.8CVSS7.1AI score0.01164EPSS
SaveExploits0References1
OSV
OSV
•added 2022/02/24 7:15 p.m.•19 views

UBUNTU-CVE-2022-0545

An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is...

7.8CVSS6.2AI score0.01164EPSS
SaveExploits0References2
Mend
Mend
•added 2022/02/24 6:27 p.m.•5 views

CVE-2022-0545

An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is...

8.5CVSS0.01164EPSS
SaveExploits0References9
OSV
OSV
•added 2022/02/24 6:27 p.m.•33 views

CVE-2022-0545

An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is...

6.9AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/24 12:00 a.m.•7 views

CVE-2022-0545: Integer Overflow or Wraparound

An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is...

7.8CVSS7.4AI score0.01164EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/01/04 12:00 a.m.•15 views

PT-2022-4823

Name of the Vulnerable Software and Affected Versions Blender versions prior to 2.83.19 Blender versions prior to 2.93.8 Blender versions prior to 3.1 Description An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read...

7.8CVSS7.1AI score0.01174EPSS
SaveExploits0References33
ICS
ICS
•added 2021/12/16 12:00 a.m.•84 views

Siemens Healthineers syngo fastView (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Healthineers, a subsidiary of Siemens Equipment: syngo fastView --------- Begin Update A Part 1 of 2 -------- Vulnerabilities: Out-of-bounds Write, Write-what-where Condition --------- End Update A Part 1 of 2...

7.8CVSS8.1AI score0.00323EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/12/14 12:00 a.m.•17 views

PT-2021-7803 · Siemens · Syngo Fastview

Name of the Vulnerable Software and Affected Versions: syngo fastView All versions Description: A vulnerability has been identified in the affected application, which lacks proper validation of user-supplied data when parsing BMP files. This could result in a write-what-where condition, allowing ...

7.8CVSS7.5AI score0.00323EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2021/11/11 12:00 a.m.•20 views

Eclipse Cyclone DDS 代码问题漏洞

Eclipse Cyclone DDS is a very high performance and robust open source DDS implementation from the Eclipse Foundation. A code issue vulnerability exists in Eclipse Cyclone DDS that stems from the product's failure to properly handle write-what-where logic. The vulnerability allows an attacker to...

9.8CVSS8.4AI score0.02146EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/22 12:00 a.m.•8 views

CVE-2021-38449: Write-what-where Condition

Some API functions permit by-design writing or copying data into a given buffer. Since the client controls these parameters, an attacker could rewrite the memory in any location of the affected product...

9.8CVSS5.9AI score0.0125EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/22 12:00 a.m.•8 views

CVE-2021-42540: Write-what-where Condition

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality...

8.8CVSS5.8AI score0.01028EPSS
SaveExploits0References2
ICS
ICS
•added 2021/10/05 12:00 a.m.•117 views

Emerson WirelessHART Gateway

1. EXECUTIVE SUMMARY CVSS v3 8.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Emerson Equipment: WirelessHART Gateway Vulnerabilities: Missing Authentication for Critical Function, Improper Input Validation, Improper Limitation of a Pathname to a Restricted Directory,...

8.8CVSS8.7AI score0.0148EPSS
SaveExploits0References5
NVD
NVD
•added 2021/09/01 3:15 p.m.•30 views

CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

4CVSS0.0062EPSS
SaveExploits0References3
OSV
OSV
•added 2021/09/01 3:15 p.m.•35 views

CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

3.3CVSS6.2AI score
SaveExploits0References3
OSV
OSV
•added 2021/09/01 3:15 p.m.•9 views

DEBIAN-CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

3.3CVSS6.5AI score0.0062EPSS
SaveExploits0References1
OSV
OSV
•added 2021/09/01 3:15 p.m.•15 views

UBUNTU-CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

4CVSS6.7AI score0.0062EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2021/09/01 3:15 p.m.•42 views

CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

4CVSS6.7AI score0.0062EPSS
SaveExploits0References3
Rows per page
Query Builder