Lucene search
K

5836 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/09/29 12:0 a.m.20 views

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00406EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2023/09/28 12:0 a.m.26 views

CVE-2023-40476

GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

8.8CVSS7.1AI score0.02009EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2023/09/28 12:0 a.m.24 views

CVE-2023-40474

GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary dependi...

8.8CVSS7.2AI score0.01871EPSS
Exploits0References6
Cisco
Cisco
added 2023/09/27 4:0 p.m.36 views

Cisco Catalyst SD-WAN Manager Web UI HTML Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to inject HTML content. This vulnerability is due to improper validation of user-supplied data in element fields. An attacker could...

4.3CVSS4.8AI score0.00352EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.3 views

Microsoft Edge browser’s vulnerability, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.5CVSS7AI score0.00938EPSS
Exploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/09/21 12:0 a.m.19 views

(0Day) Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.7AI score0.00486EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2023/09/19 12:0 a.m.23 views

Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.4AI score0.00991EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/09/19 12:0 a.m.2 views

The vulnerability of the Zoom video conferencing service, related to insufficient validation of entered data, allows attackers to escalate their privileges.

The vulnerability of the Zoom video conferencing service is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

9CVSS7.7AI score0.00868EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.3 views

The vulnerability of the Microsoft Visual Studio software development tool, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software development tool is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.01441EPSS
Exploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.1 views

The vulnerability of the Microsoft Visual Studio software development tool, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software development tool is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.01441EPSS
Exploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.3 views

The vulnerability of the Microsoft .NET Framework software, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software platform is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.01207EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.2 views

The vulnerability of the Microsoft Visual Studio software development tool, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software development tool is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.01441EPSS
Exploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.1 views

The vulnerability of the Microsoft Office software package, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office package is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.01084EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.3 views

The vulnerability of the CMPappBP component in CODESYS software products allows a hacker to trigger a service failure.

The vulnerability of the CMPappBP component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.8CVSS6.5AI score0.00519EPSS
Exploits0References4Affected Software16
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.3 views

The vulnerability of the Microsoft Office software package, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office package is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.01074EPSS
Exploits0References4
Zero Day Initiative
Zero Day Initiative
added 2023/09/12 12:0 a.m.28 views

Foxit PDF Reader XFA Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00437EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/08 12:0 a.m.20 views

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

his vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of P...

7.8CVSS6.7AI score0.00406EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/08 12:0 a.m.15 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00406EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/08 12:0 a.m.16 views

PDF-XChange Editor JPC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00391EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/08 12:0 a.m.16 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00406EPSS
Exploits0References1
Rows per page
Query Builder