Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Hexagon Clear all filters
TI-2023-26779 CVE-2023-49114 · GHSA-m3q9-44rg-xw34

Local Privilege Escalation via DLL Hijacking

Priority HIGH 65

A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DL…

CVSS 3.1MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00359 Published 2024-02-26 No fix listed CWE-427
TI-2013-03043 CVE-2013-3483 · GHSA-fx3g-848j-q8hr

Stack-based buffer overflow in ermapper_u.dll in Intergraph ERDAS ER Viewer before…

Priority MEDIUM 46

Stack-based buffer overflow in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ERS file.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03498 Published 2014-01-19 No fix listed CWE-119
TI-2013-03042 CVE-2013-3482 · GHSA-pc7m-prxv-fcc8

Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in…

Priority MEDIUM 64

Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application c…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.31514 Published 2014-01-19 No fix listed CWE-119
TI-2013-00611 CVE-2013-0726 · GHSA-rccm-79v5-7248

Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in…

Priority MEDIUM 63

Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attackers to execute arbitrary code via a crafted pathname in an ERS file.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.27975 Published 2013-05-05 No fix listed CWE-119
TI-2013-00613 CVE-2013-0728 · GHSA-f7jv-3vr2-rm58

Multiple stack-based buffer overflows in NCSAddOn.dll in the ERDAS APOLLO ECWP plugin…

Priority MEDIUM 50

Multiple stack-based buffer overflows in NCSAddOn.dll in the ERDAS APOLLO ECWP plugin before 13.00.0001 for Internet Explorer, Firefox, and Chrome allow remote attackers to execute arbitrary code via a long property valu…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04403 Published 2013-04-25 No fix listed CWE-119