CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 17/05/2021 |
| CVE-2020-21816 | ALTO8.8 | A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46. | 17/05/2021 |
| CVE-2020-21815 | MÉDIO6.5 | A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (application crash). | 17/05/2021 |
| CVE-2020-21814 | ALTO8.8 | A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97. | 17/05/2021 |
| CVE-2020-21813 | ALTO7.8 | A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114. | 17/05/2021 |
| CVE-2020-15807 | MÉDIO6.5 | GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files. | 17/07/2020 |
| CVE-2019-20915 | ALTO8.1 | An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bit_write_TF in bits.c. | 16/07/2020 |
| CVE-2019-20914 | CRÍTICO9.8 | An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_common_entity_handle_data in common_entity_handle_data.spec. | 16/07/2020 |
| CVE-2019-20913 | ALTO8.1 | An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwg_encode_entity in common_entity_data.spec. | 16/07/2020 |
| CVE-2019-20912 | ALTO8.8 | An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly related to bit_read_TF. | 16/07/2020 |
| CVE-2019-20911 | MÉDIO6.5 | An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bit_calc_CRC in bits.c, related to a for loop. | 16/07/2020 |
| CVE-2019-20910 | ALTO8.1 | An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decode_R13_R2000 in decode.c, a different vulnerability than CVE-2019-20011. | 16/07/2020 |
| CVE-2019-20909 | ALTO7.5 | An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_LWPOLYLINE in dwg.spec. | 16/07/2020 |
| CVE-2020-6615 | MÉDIO6.5 | GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl). | 08/01/2020 |
| CVE-2020-6614 | ALTO8.1 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c. | 08/01/2020 |
| CVE-2020-6613 | ALTO8.1 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c. | 08/01/2020 |
| CVE-2020-6612 | ALTO8.1 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c. | 08/01/2020 |