CVE Vulnerability Catalog

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing AR files. It results from lack of validation of user-supplied data, leading to an out-of-bounds read. Requires user interaction (opening a malicious file or visiting a malicious page).

A vulnerability in Ashlar-Vellum Cobalt when parsing LI files is caused by a use-after-free condition. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing AR files. It results from lack of validation of user-supplied data, leading to an out-of-bounds read. Requires user interaction (opening a malicious file or visiting a malicious page).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing VC6 files. It results from lack of validation of user-supplied data, leading to an out-of-bounds read. Requires user interaction (opening a malicious file or visiting a malicious page).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing VC6 files. It results from lack of validation of user-supplied data, leading to an out-of-bounds write. Requires user interaction (opening a malicious file or visiting a malicious page).

An out-of-bounds read vulnerability in Ashlar-Vellum Cobalt during AR file parsing allows remote code execution. User interaction is required — the target must open a malicious file or visit a malicious page. The flaw stems from lack of validation of user-supplied data, resulting in a read past the end of an allocated data structure.

An out-of-bounds write vulnerability in Ashlar-Vellum Graphite during VC6 file parsing allows remote code execution. User interaction is required — the target must open a malicious file or visit a malicious page. The flaw stems from lack of validation of user-supplied data, resulting in a write past the end of an allocated buffer.

An out-of-bounds write vulnerability in Ashlar-Vellum Graphite during VC6 file parsing allows remote code execution. User interaction is required — the target must open a malicious file or visit a malicious page. The flaw stems from lack of validation of user-supplied data, resulting in a write past the end of an allocated buffer.

An out-of-bounds write vulnerability in Ashlar-Vellum Graphite during VC6 file parsing allows remote code execution. User interaction is required — the target must open a malicious file or visit a malicious page. The flaw stems from lack of validation of user-supplied data, resulting in a write past the end of an allocated buffer.

An integer overflow vulnerability in Ashlar-Vellum Cobalt during VC6 file parsing allows remote code execution. User interaction is required — the target must open a malicious file or visit a malicious page. The flaw stems from lack of validation of user-supplied data, resulting in an integer overflow before allocating a buffer.

A vulnerability in Ashlar-Vellum Cobalt when parsing AR files is caused by use of an uninitialized variable. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.

A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by a heap-based buffer overflow. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.

A vulnerability in Ashlar-Vellum Cobalt when parsing LI files is caused by an integer overflow. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.

A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by use of an uninitialized variable. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.

A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by an out-of-bounds write. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.

A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by a stack-based buffer overflow. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.

A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by use of an uninitialized variable. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.

A vulnerability in Ashlar-Vellum Cobalt when parsing LI files is caused by an out-of-bounds read. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.

A vulnerability in Wondershare Repairit allows remote attackers to bypass authentication due to incorrect permission assignment on an SAS token. Authentication is not required, and an attacker can launch a supply-chain attack and execute arbitrary code on customers' endpoints.

A vulnerability in Wondershare Repairit allows remote attackers to bypass authentication due to incorrect permission assignment on a storage account token. Exploitation does not require authentication.