CVE-2025-7988

all versions

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote

7.8HIGH

CVE-2025-7987

all versions

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote

7.8HIGH

CVE-2025-7986

all versions

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote

7.8HIGH

CVE-2025-7983

all versions

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows

7.8HIGH

CVE-2025-7981

all versions

Ashlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remo

7.8HIGH

CVE-2025-7980

all versions

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote

7.8HIGH

CVE-2025-7979

all versions

Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows

7.8HIGH

CVE-2025-7978

all versions

Ashlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remo

7.8HIGH

CVE-2024-13051

all versions

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows

7.8HIGH

CVE-2024-13050

all versions

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows

7.8HIGH

CVE-2023-34308

all versions

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote

8.8HIGH

CVE-2023-34307

all versions

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote

8.8HIGH

CVE-2023-34306

all versions

Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows

8.8HIGH

CVE-2023-39936

<= 13.0.48

In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsing VC6 files.

7.8HIGH

CVE-2023-39427

<= 13.0.48

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build (1204.77), the affected applications lack proper va

7.8HIGH

CVE-2022-4730

all versions

A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component

3.5LOW

CVE-2022-4729

all versions

A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the compone

3.5LOW

CVE-2022-4728

all versions

A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the compo

3.5LOW

CVE-2017-18638

<= 1.1.5

send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF

7.5HIGH

CVE-2013-5943

<= 0.9.10

Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web scrip

CVE-2013-5942

all versions

Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via

CVE-2013-5093

all versions

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module uns