digia records
9 published records for vendor digia.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 77.8%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-20 Improper Input Validation3
- CWE-189 Numeric Errors2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
The weakness classes this vendor ships most often: where to look.
CWEAll records
9 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2010-1766No exploit | Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCore in WebKit before r5webkit · webkit · CWE-189 | High7.5 | — | 2.3% | Jul 22, 2010 |
30Monitor | CVE-2015-1860No exploit | Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers tqt · qt · CWE-119 | Medium6.8 | — | 8.7% | May 12, 2015 |
29Monitor | CVE-2015-1858No exploit | Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers tqt · qt · CWE-119 | Medium6.8 | — | 7.2% | May 12, 2015 |
29Monitor | CVE-2015-1859No exploit | Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remqt · qt · CWE-119 | Medium6.8 | — | 7.1% | May 12, 2015 |
23Monitor | CVE-2010-2621Proof of concept | The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and earlier allows remote attackers toqt · qt · CWE-20 | Medium5.0 | — | 10.5% | Jul 2, 2010 |
22Monitor | CVE-2015-0295No exploit | The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote atfedoraproject · fedora · CWE-189 | Medium5.0 | — | 6.3% | Mar 25, 2015 |
21Monitor | CVE-2013-4549No exploit | QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity Expqt · qt · CWE-20 | Medium5.0 | — | 3.1% | Dec 23, 2013 |
18Monitor | CVE-2012-5624No exploit | The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force qt · qt · CWE-200 | Medium4.3 | — | 1.9% | Feb 24, 2013 |
17Monitor | CVE-2010-5076No exploit | QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might aqt · qt · CWE-20 | Medium4.3 | — | 1.4% | Jun 29, 2012 |
- CVE-2010-176631Monitor
Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCore in WebKit before r5
HighCVSS 7.5No exploitEPSS 2%webkit · webkitJul 22, 2010
- CVE-2015-186030Monitor
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers t
MediumCVSS 6.8No exploitEPSS 9%qt · qtMay 12, 2015
- CVE-2015-185829Monitor
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers t
MediumCVSS 6.8No exploitEPSS 7%qt · qtMay 12, 2015
- CVE-2015-185929Monitor
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow rem
MediumCVSS 6.8No exploitEPSS 7%qt · qtMay 12, 2015
- CVE-2010-262123Monitor
The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and earlier allows remote attackers to
MediumCVSS 5.0Proof of conceptEPSS 11%qt · qtJul 2, 2010
- CVE-2015-029522Monitor
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote at
MediumCVSS 5.0No exploitEPSS 6%fedoraproject · fedoraMar 25, 2015
- CVE-2013-454921Monitor
QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity Exp
MediumCVSS 5.0No exploitEPSS 3%qt · qtDec 23, 2013
- CVE-2012-562418Monitor
The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force
MediumCVSS 4.3No exploitEPSS 2%qt · qtFeb 24, 2013
- CVE-2010-507617Monitor
QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might a
MediumCVSS 4.3No exploitEPSS 1%qt · qtJun 29, 2012