Lucene search
K

5836 matches found

Positive Technologies
Positive Technologies
added 2023/12/20 12:0 a.m.2 views

PT-2023-31851 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...

3.3CVSS5.5AI score0.00397EPSS
Exploits0References7
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:0 a.m.28 views

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

3.3CVSS6.3AI score0.0041EPSS
Exploits0References1
Code423n4
Code423n4
added 2023/12/19 12:0 a.m.12 views

Lack of input validation for ClosePositionParams.amountSwap results in theft of fund (premium + protocol fee))

Lines of code Vulnerability details Impact Lack of input validation for ClosePositionParams.amountSwap results in theft of fund Proof of Concept ParticlePositionManager.sol hold two part of fund 1. the contract hold premium added by borrower 2. the contract hold protocol fee before protocol...

7.4AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2023/12/14 12:0 a.m.13 views

Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS6.3AI score0.00424EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/14 12:0 a.m.20 views

Adobe Illustrator JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J...

7.8CVSS7.1AI score0.00421EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/12/14 12:0 a.m.3 views

The vulnerability of the Internet Connection Sharing (ICS) function of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the Internet Connection Sharing ICS function in the Windows operating system is related to insufficient checking of data entered by users. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8.2AI score0.0722EPSS
Exploits0References3
Zero Day Initiative
Zero Day Initiative
added 2023/12/13 12:0 a.m.17 views

Microsoft Skype Cross-Site Scripting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Skype. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

8.8CVSS7.4AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/12/12 12:0 a.m.21 views

Ubuntu 20.04 ESM : Pydantic vulnerability (USN-6553-1)

The remote Ubuntu 20.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-6553-1 advisory. Nina Jensen discovered that Pydantic incorrectly handled user input in the date and datetime fields. An attacker could possibly use this issue to cause a denial o...

7.5CVSS7.3AI score0.00967EPSS
Exploits0References2
CNVD
CNVD
added 2023/12/11 12:0 a.m.9 views

Tenda AX9 /goform/setMacFilterCfg Interface Buffer Overflow Vulnerability

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX9 version V22.03.01.46, which is caused by the "deviceList" parameter of /goform/setMacFilterCfg not properly validating the length of the input data. could be exploited by a remote attacker to execu...

9.8CVSS8.3AI score0.00925EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/12/09 12:0 a.m.7 views

PT-2024-5220 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.62 Description: The issue is related to insufficient data validation in the Updater component of Google Chrome, allowing a remote attacker to perform OS-level privilege escalation via a malicious fil...

10CVSS7AI score0.99739EPSS
Exploits128References1058
Veracode
Veracode
added 2023/12/05 7:52 a.m.14 views

Cross-Site Scripting(XSS)

Ajax.NET Professional is vulnerable to Cross Site Scripting XSS. The vulnerability is due to the missing data validation in the parse function of core.js. This could allow an attacker to execute arbitrary Javascript...

6.3CVSS6.9AI score0.00628EPSS
Exploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/12/05 12:0 a.m.10 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.1AI score0.04907EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/12/05 12:0 a.m.7 views

PT-2023-9261 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.62 Description: The issue is related to insufficient data validation in the Extensions component of Google Chrome, allowing a remote attacker to perform privilege escalation via a crafted Chrome...

9.8CVSS6.9AI score0.99739EPSS
Exploits128References1059
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:0 a.m.18 views

Fuji Electric Tellus Lite V-Simulator V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00335EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:0 a.m.15 views

Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00335EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:0 a.m.17 views

Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00295EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:0 a.m.23 views

Fuji Electric Tellus Lite V-Simulator V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00335EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:0 a.m.14 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.7AI score0.04907EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:0 a.m.20 views

Fuji Electric Tellus Lite V-Simulator V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00335EPSS
Exploits0References1
Redos
Redos
added 2023/11/21 12:0 a.m.50 views

ROS-20231115-04

Visual Studio Coden source code editor vulnerability related to improper control of code generation. code generation. Exploitation of the vulnerability may allow an attacker to execute arbitrary code Visual Studio Code source code editor vulnerability is related to insufficient protection of...

7.8CVSS7.8AI score0.67469EPSS
Exploits3
Rows per page
Query Builder