Lucene search
+L

6059 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:00 a.m.•27 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00433EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:00 a.m.•21 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00433EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:00 a.m.•20 views

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00452EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:00 a.m.•23 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00446EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:00 a.m.•28 views

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

his vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of P...

7.8CVSS6.7AI score0.00446EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/09/08 12:00 a.m.•12 views

PT-2023-28241 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

5.5CVSS7.2AI score0.00436EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:00 a.m.•27 views

PDF-XChange Editor JPC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.0043EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:00 a.m.•24 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00446EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:00 a.m.•26 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00446EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:00 a.m.•30 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00436EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2023/09/07 12:00 a.m.•35 views

Google Chrome Security Update (stable-channel-update-for-desktop_26-2021-04) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS6.2AI score0.01601EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2023/09/07 12:00 a.m.•36 views

Google Chrome Security Update (stable-channel-update-for-desktop_26-2021-04) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS6.2AI score0.01601EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2023/09/06 12:00 a.m.•27 views

Hitachi Energy RTU500 series Stack-Based Buffer Overflow (CVE-2022-2502)

A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-5 and the CMU contains the license feature Advanced security' which must b...

7.5CVSS7.3AI score0.00645EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/09/04 12:00 a.m.•15 views

The vulnerability of the Zoom video conferencing service, which stems from insufficient validation of input data, allows attackers to access protected information.

The vulnerability of the Zoom video conferencing service exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

7.8CVSS6.5AI score0.00962EPSS
SaveExploits0References3Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/31 12:00 a.m.•28 views

Delta Electronics DOPSoft DPA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00241EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/08/29 12:00 a.m.•9 views

The vulnerability of the WinRAR file archiver, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the WinRAR file archiver is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7.9AI score0.99815EPSS
SaveExploits49References7Affected Software1
OSV
OSV
•added 2023/08/27 2:00 p.m.•76 views

OSV-2023-745 Heap-buffer-overflow in pcpp::SomeIpSdLayer::isDataValid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61774 Crash type: Heap-buffer-overflow READ 4 Crash state: pcpp::SomeIpSdLayer::isDataValid pcpp::SomeIpLayer::parseSomeIpLayer pcpp::UdpLayer::parseNextLayer...

7.2AI score
SaveExploits0References1
NVD
NVD
•added 2023/08/25 3:15 p.m.•29 views

CVE-2022-4452

Insufficient data validation in crosvm in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.5AI score0.00382EPSS
SaveExploits0References2
Prion
Prion
•added 2023/08/25 3:15 p.m.•28 views

Input validation

Insufficient data validation in crosvm in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

6.8CVSS8.4AI score0.00382EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2023/08/25 2:44 p.m.•179 views

CVE-2022-4452

CVE-2022-4452 affects Google Chrome’s crosvm component. Prior to 107.0.5304.62, insufficient data validation could enable a remote attacker to cause object corruption via a crafted HTML page. Impact is described as High (remote, no user privileges, high confidentiality/integrity/availability impa...

8.8CVSS8.3AI score0.00382EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder