CyberSecBulletin

Ashlar vulnerabilities

We track 35 vulnerabilities in Ashlar products across 5 products. 35 are rated high or critical, and none are known to be exploited. The most recent was published on May 3, 2024.

35vulnerabilities
0critical
35high
0exploited
8.0average CVSS score

Latest Ashlar vulnerabilities

  • 8.8 High severity

    Lithium: Uncontrolled Search Path Element

    CVE-2023-44440Ashlar-Vellum

    Ashlar-Vellum Lithium Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Lithium. User interaction is required to exploit this vu

  • 8.8 High severity

    Xenon: Uncontrolled Search Path Element

    CVE-2023-44439Ashlar-Vellum

    Ashlar-Vellum Xenon Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Xenon. User interaction is required to exploit this vulner

  • 8.8 High severity

    Argon: Uncontrolled Search Path Element

    CVE-2023-44438Ashlar-Vellum

    Ashlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Argon. User interaction is required to exploit this vulner

  • 7.8 High severity

    Cobalt: Uncontrolled Search Path Element

    CVE-2023-44437Ashlar-Vellum

    Ashlar-Vellum Cobalt Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vuln

  • 7.8 High severity

    Cobalt: Use After Free

    CVE-2023-42104Ashlar-Vellum

    Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulner

  • 7.8 High severity

    Cobalt: Use After Free

    CVE-2023-42103Ashlar-Vellum

    Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulner

  • 7.8 High severity

    Cobalt: Access of Resource Using Incompatible Type

    CVE-2023-42102Ashlar-Vellum

    Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulner

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2023-42101Ashlar-Vellum

    Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vu

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2023-35716Ashlar-Vellum

    Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vu

  • 7.8 High severity

    Cobalt: Access of Uninitialized Pointer

    CVE-2023-35715Ashlar-Vellum

    Ashlar-Vellum Cobalt AR File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2023-35714Ashlar-Vellum

    Ashlar-Vellum Cobalt IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this v

  • 7.8 High severity

    Cobalt: Access of Uninitialized Pointer

    CVE-2023-35713Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this

  • 7.8 High severity

    Cobalt: Access of Uninitialized Pointer

    CVE-2023-35712Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this

  • 7.8 High severity

    Cobalt: Stack-based Buffer Overflow

    CVE-2023-35710Ashlar-Vellum

    Ashlar-Vellum Cobalt Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerabi

  • 7.8 High severity

    Cobalt: Untrusted Pointer Dereference

    CVE-2023-34311Ashlar-Vellum

    Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnera

  • 7.8 High severity

    Cobalt: Use of Uninitialized Variable

    CVE-2023-34310Ashlar-Vellum

    Ashlar-Vellum Cobalt Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in

  • 7.8 High severity

    Cobalt: Untrusted Pointer Dereference

    CVE-2023-34309Ashlar-Vellum

    Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnera

  • 8.8 High severity

    Graphite: Out-of-bounds Write

    CVE-2023-34308Ashlar-Vellum

    Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit t

  • 8.8 High severity

    Graphite: Out-of-bounds Write

    CVE-2023-34307Ashlar-Vellum

    Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit t

  • 8.8 High severity

    Graphite: Out-of-bounds Write

    CVE-2023-34306Ashlar-Vellum

    Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to e

  • 7.0 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-34305Ashlar-Vellum

    Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-34304Ashlar-Vellum

    Ashlar-Vellum Cobalt Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in

  • 7.8 High severity

    Cobalt: Out-of-bounds Read

    CVE-2023-34303Ashlar-Vellum

    Ashlar-Vellum Cobalt Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in t

  • 7.8 High severity

    Cobalt: Stack-based Buffer Overflow

    CVE-2023-34302Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploi

  • 7.8 High severity

    Cobalt: Untrusted Pointer Dereference

    CVE-2023-34300Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to expl

  • 7.8 High severity

    Cobalt: Heap-based Buffer Overflow

    CVE-2023-34299Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit

  • 8.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-34293Ashlar-Vellum

    Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-34292Ashlar-Vellum

    Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-34291Ashlar-Vellum

    Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-34290Ashlar-Vellum

    Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in

  • 7.8 High severity

    Cobalt: Heap-based Buffer Overflow

    CVE-2023-34289Ashlar-Vellum

    Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerabil

  • 7.8 High severity

    Cobalt: Access of Uninitialized Pointer

    CVE-2023-34288Ashlar-Vellum

    Ashlar-Vellum Cobalt XE File Parsing Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this

  • 7.8 High severity

    Cobalt: Stack-based Buffer Overflow

    CVE-2023-34287Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploi

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-34286Ashlar-Vellum

    Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this v

  • 7.8 High severity

    Cobalt: Out-of-bounds Write

    CVE-2023-39427Ashlar-Vellum

    In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build (1204.77), the affected applications lack proper validation of user-supplied data when parsing XE files. This could lead to an out-of-bounds write. An attacker could leverage this v