Skip to content
Noroxi

dia records

6 published records for vendor dia.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
83.3%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    6 records
    • CVE-2006-1550
      31Monitor

      Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to ha

      HighCVSS 7.6No exploitEPSS 2%

      dia · diaMar 30, 2006

    • CVE-2006-2453
      31Monitor

      Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-200

      HighCVSS 7.5No exploitEPSS 2%

      dia · diaMay 28, 2006

    • CVE-2007-3408
      30Monitor

      Multiple unspecified vulnerabilities in Dia before 0.96.1-6 have unspecified attack vectors and impact, probably involving the use of vulner

      HighCVSS 7.5No exploitEPSS 1%

      dia · diaJun 26, 2007

    • CVE-2008-5984
      27Monitor

      Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary

      MediumCVSS 6.9No exploitEPSS 0%

      dia · diaJan 28, 2009

    • CVE-2006-2480
      22Monitor

      Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary c

      MediumCVSS 5.1Proof of conceptEPSS 8%

      dia · diaMay 19, 2006

    • CVE-2005-2966
      21Monitor

      The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a

      MediumCVSS 5.1No exploitEPSS 3%

      dia · diaOct 5, 2005