Pixar records

22 published records for vendor pixar.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 4.5%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

22 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2021-33575No exploit	The Pixar ruby-jss gem before 1.6.0 allows remote attackers to execute arbitrary code because of the Plist gem's documented behavior of usinpixar · ruby-jss pre-auth RCE	Critical9.8	—	2.6%	May 25, 2021
36Monitor	CVE-2020-13531No exploit	A use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files.pixar · openusd · CWE-416 pre-auth RCE Memory safety	High8.8	—	2.7%	Dec 3, 2020
32Monitor	CVE-2020-6155No exploit	A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files.pixar · openusd · CWE-122 RCE Memory safety	High7.8	—	2.6%	Nov 13, 2020
32Monitor	CVE-2020-13520No exploit	An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files.pixar · openusd · CWE-119 RCE Memory safety	High7.8	—	2.1%	Dec 11, 2020
31Monitor	CVE-2020-6147No exploit	A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files.pixar · openusd · CWE-122 Memory safety	High7.8	—	1.4%	Nov 13, 2020
31Monitor	CVE-2020-13493No exploit	A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files.pixar · openusd · CWE-122 Memory safety	High7.8	—	1.3%	Dec 2, 2020
31Monitor	CVE-2020-6156No exploit	A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files.pixar · openusd · CWE-122 Memory safety	High7.8	—	1.3%	Nov 13, 2020
31Monitor	CVE-2020-6150No exploit	A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompression heap overflow.pixar · openusd · CWE-122 Memory safety	High7.8	—	1.3%	Nov 13, 2020
31Monitor	CVE-2020-6149No exploit	A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files.pixar · openusd · CWE-122 Memory safety	High7.8	—	1.3%	Nov 13, 2020
31Monitor	CVE-2020-6148No exploit	A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files.pixar · openusd · CWE-122 Memory safety	High7.8	—	1.3%	Nov 13, 2020
31Monitor	CVE-2019-5015No exploit	A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool.pixar · renderman · CWE-749 Local privilege escalation	High7.8	—	0.8%	Mar 8, 2019
31Monitor	CVE-2018-4054No exploit	A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0.pixar · renderman · CWE-20 Local privilege escalation	High7.8	—	0.6%	Mar 8, 2019
30Monitor	CVE-2018-3841No exploit	A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x69).pixar · renderman · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	1.6%	Jun 26, 2018
30Monitor	CVE-2018-3840No exploit	A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67).pixar · renderman · CWE-20 Pre-auth Denial of service	High7.5	—	1.6%	Jun 26, 2018
27Monitor	CVE-2020-13496No exploit	An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types.pixar · openusd · CWE-119 Pre-auth Memory safety	Medium6.5	—	1.7%	Dec 2, 2020
22Monitor	CVE-2020-13497No exploit	An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types.pixar · openusd · CWE-119 Memory safety	Medium5.5	—	1.2%	Dec 2, 2020
22Monitor	CVE-2020-13494No exploit	A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files.pixar · openusd · CWE-122 Memory safety	Medium5.5	—	1.1%	Dec 2, 2020
22Monitor	CVE-2020-13498No exploit	An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types.pixar · openusd · CWE-125 Memory safety	Medium5.5	—	0.8%	Dec 2, 2020
22Monitor	CVE-2020-13524No exploit	An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files.pixar · openusd · CWE-119 Memory safety Denial of service	Medium5.5	—	0.8%	Dec 3, 2020
22Monitor	CVE-2020-13495No exploit	An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files.pixar · openusd · CWE-119 Memory safety	Medium5.5	—	0.6%	Apr 18, 2022
22Monitor	CVE-2018-4055No exploit	A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0.pixar · renderman · CWE-20 Local privilege escalation	Medium5.5	—	0.5%	Mar 8, 2019
21Monitor	CVE-2018-5411No exploit	Pixar's Tractor software, versions 2.2 and earlier, contains a stored cross-site scripting vulnerabilitypixar · tractor · CWE-79 XSS	Medium5.4	—	0.7%	Dec 13, 2018

CVE-2021-33575
40Plan
The Pixar ruby-jss gem before 1.6.0 allows remote attackers to execute arbitrary code because of the Plist gem's documented behavior of usin
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
pixar · ruby-jssMay 25, 2021
CVE-2020-13531
36Monitor
A use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files.
HighCVSS 8.8No exploitEPSS 2%
- pre-auth RCE
- Memory safety
pixar · openusdDec 3, 2020
CVE-2020-6155
32Monitor
A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files.
HighCVSS 7.8No exploitEPSS 2%
- RCE
- Memory safety
pixar · openusdNov 13, 2020
CVE-2020-13520
32Monitor
An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files.
HighCVSS 7.8No exploitEPSS 2%
- RCE
- Memory safety
pixar · openusdDec 11, 2020
CVE-2020-6147
31Monitor
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files.
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
pixar · openusdNov 13, 2020
CVE-2020-13493
31Monitor
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files.
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
pixar · openusdDec 2, 2020
CVE-2020-6156
31Monitor
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files.
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
pixar · openusdNov 13, 2020
CVE-2020-6150
31Monitor
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompression heap overflow.
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
pixar · openusdNov 13, 2020
CVE-2020-6149
31Monitor
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files.
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
pixar · openusdNov 13, 2020
CVE-2020-6148
31Monitor
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files.
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
pixar · openusdNov 13, 2020
CVE-2019-5015
31Monitor
A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
pixar · rendermanMar 8, 2019
CVE-2018-4054
31Monitor
A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
pixar · rendermanMar 8, 2019
CVE-2018-3841
30Monitor
A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x69).
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
pixar · rendermanJun 26, 2018
CVE-2018-3840
30Monitor
A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67).
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
pixar · rendermanJun 26, 2018
CVE-2020-13496
27Monitor
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types.
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
- Memory safety
pixar · openusdDec 2, 2020
CVE-2020-13497
22Monitor
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types.
MediumCVSS 5.5No exploitEPSS 1%
- Memory safety
pixar · openusdDec 2, 2020
CVE-2020-13494
22Monitor
A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files.
MediumCVSS 5.5No exploitEPSS 1%
- Memory safety
pixar · openusdDec 2, 2020
CVE-2020-13498
22Monitor
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types.
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
pixar · openusdDec 2, 2020
CVE-2020-13524
22Monitor
An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files.
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
- Denial of service
pixar · openusdDec 3, 2020
CVE-2020-13495
22Monitor
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files.
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
pixar · openusdApr 18, 2022
CVE-2018-4055
22Monitor
A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0.
MediumCVSS 5.5No exploitEPSS 0%
- Local privilege escalation
pixar · rendermanMar 8, 2019
CVE-2018-5411
21Monitor
Pixar's Tractor software, versions 2.2 and earlier, contains a stored cross-site scripting vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- XSS
pixar · tractorDec 13, 2018