Lucene search
K

5836 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.21 views

Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2...

7.8CVSS6.8AI score0.00345EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.24 views

Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS5.9AI score0.00327EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.16 views

Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D...

7.8CVSS6.7AI score0.00345EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.17 views

Kofax Power PDF PNG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNG...

7.8CVSS6.8AI score0.00267EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.13 views

Kofax Power PDF PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCX...

7.8CVSS6.8AI score0.00267EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.15 views

Kofax Power PDF TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF...

7.8CVSS6.8AI score0.00345EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.20 views

Kofax Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS5.9AI score0.00327EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.17 views

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

7.8CVSS6.8AI score0.00262EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.19 views

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

7.8CVSS6.8AI score0.00345EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/12 12:0 a.m.22 views

Dassault Systèmes SolidWorks DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes SolidWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00329EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2023/06/29 12:0 a.m.30 views

CVE-2023-2860

An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This fla...

4.4CVSS6.6AI score0.00353EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/06/28 12:0 a.m.6 views

多款Cisco产品 跨站脚本漏洞

Cisco AsyncOS and Cisco Secure Email are both products of Cisco, Inc.Cisco AsyncOS is an operating system for Cisco devices.Cisco Secure Email is the Cisco Secure Email formerly known as Email Security provides the best protection for your email from network threats. A cross-site scripting...

6.1CVSS6.1AI score0.00508EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/06/19 12:0 a.m.3 views

The vulnerability of the Microsoft PostScript printer driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft PostScript printer driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created data...

7.8CVSS7.8AI score0.00497EPSS
Exploits0References3
Redos
Redos
added 2023/06/16 12:0 a.m.18 views

ROS-20230616-06

Nextcloud Mail application vulnerability is related to insufficient validation of user-entered data in the Mail app on the avatar endpoint. data in the Mail application on the avatar endpoint. Exploitation of the vulnerability could allow an attacker, acting remotely to access sensitive data...

5.3CVSS5.4AI score0.00529EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2023/06/15 12:0 a.m.15 views

(0Day) Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7CVSS6.8AI score0.00319EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2023/06/15 12:0 a.m.19 views

(0Day) Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS6.8AI score0.00889EPSS
Exploits0
OSV
OSV
added 2023/06/09 11:42 a.m.8 views

OPENSUSE-SU-2023:0124-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 114.0.5735.106 boo1212044: CVE-2023-3079: Type Confusion in V8 - Chromium 114.0.5735.90 boo1211843: CSS text-wrap: balance is available Cookies partitioned by top level site CHIPS New Popover API - Security fixes: CVE-2023-2929: Out ...

8.8CVSS9.5AI score0.31658EPSS
Exploits4References17
Code423n4
Code423n4
added 2023/06/09 12:0 a.m.9 views

Oracle data is not sufficiently validated

Lines of code Vulnerability details Impact The retrieved price from the oracle can be stale value or outdated and used anyways as a valid data. The usage of such data can impact on how the further logics of that price are implemented. Proof of Concept File: StaderOracle.sol function getPORFeedDat...

6.7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2023/06/08 12:0 a.m.18 views

Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7CVSS6.8AI score0.00763EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2023/06/08 12:0 a.m.19 views

Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS6.8AI score0.00916EPSS
Exploits0
Rows per page
Query Builder