Skip to main content
CVE-2023-25886 Mar 28, 20:15 HIGH PATCH This Week

Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Buffer Overflow Information Disclosure Adobe Dimension
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2023-25885 Mar 28, 20:15 HIGH PATCH This Week

Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Adobe Dimension
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2023-25884 Mar 28, 20:15 HIGH PATCH This Week

Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Buffer Overflow Information Disclosure Adobe Dimension
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2023-25883 Mar 28, 20:15 HIGH PATCH This Week

Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Adobe Dimension
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2023-25882 Mar 28, 20:15 HIGH PATCH This Week

Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Adobe Dimension
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2023-25881 Mar 28, 20:15 HIGH PATCH This Week

Adobe Dimension versions 3.4.7 (and earlier) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Adobe Dimension
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2023-25880 Mar 28, 20:15 HIGH PATCH This Week

Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Memory Corruption Adobe Dimension
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2023-25879 Mar 28, 20:15 HIGH PATCH This Week

Adobe Dimension versions 3.4.7 (and earlier) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Adobe Dimension
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2023-28626 Mar 28, 21:15 HIGH PATCH This Week

comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Comrak Comrak Project
NVD GitHub
CVSS 3.1
7.5
EPSS
1.1%
CVE-2023-28375 Mar 28, 21:15 HIGH This Week

Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Path Traversal Osprey Pump Controller Firmware Propumpservice
NVD
CVSS 3.1
7.5
EPSS
1.5%
CVE-2023-1518 Mar 28, 21:15 HIGH This Week

CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to sensitive credentials being leaked because they are insufficiently protected. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Kvms Pro Cpplusworld
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2023-28395 Mar 28, 20:15 HIGH This Week

Osprey Pump Controller version 1.01 is vulnerable to a weak session token generation algorithm that can be predicted and can aid in authentication and authorization bypass. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Osprey Pump Controller Firmware Propumpservice
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2023-26071 Mar 28, 20:15 HIGH This Week

An issue was discovered in MCUBO ICT through 10.12.4 (aka 6.0.2). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Mcuboict
NVD VulDB
CVSS 3.1
7.5
EPSS
0.7%
CVE-2023-23330 Mar 28, 01:15 HIGH This Week

amano Xparc parking solutions 7.1.3879 was discovered to be vulnerable to local file inclusion. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Path Traversal Xoffice
NVD
CVSS 3.1
7.5
EPSS
0.8%
Prev Page 2 of 2

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy