Lucene search
K

5836 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.27 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.7AI score0.00226EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.25 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.8AI score0.00226EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.24 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.7AI score0.00226EPSS
Exploits0References1
CNVD
CNVD
added 2023/02/24 12:0 a.m.12 views

SeaCMS Code Execution Vulnerability (CNVD-2023-61759)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A code execution vulnerability exists in SeaCMS version 11.6. The vulnerability stems from the program's lack of validation of the data insert...

9.8CVSS7.9AI score0.00978EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.17 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.7AI score0.00226EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.25 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.7AI score0.00226EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.29 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.8AI score0.00226EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.24 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.8AI score0.00226EPSS
Exploits0References1
OSV
OSV
added 2023/02/21 7:15 p.m.15 views

CVE-2022-48282

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

7.2CVSS7AI score
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/02/20 12:0 a.m.3 views

The vulnerability of the implementation of the AMD Secure Processor (ASP) microprogramming software for AMD processors allows a perpetrator to influence the integrity of the protected information.

The vulnerability of the AMD Secure Processor ASP microprogramming software for AMD processors lies in insufficient data validation during the translation of input/output addresses. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

6.2CVSS6.3AI score0.00275EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/02/20 12:0 a.m.4 views

The vulnerability of BIOS microprogramming software in Dell laptops and workstations arises from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the BIOS software on Dell laptops and workstations exists due to insufficient testing of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00204EPSS
Exploits0References3Affected Software10
SUSE CVE
SUSE CVE
added 2023/02/15 4:50 a.m.2 views

SUSE CVE-2017-5123

Insufficient data validation in waitid allowed an user to escape sandboxes on Linux...

7.8CVSS8.3AI score0.03714EPSS
Exploits10References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:31 a.m.2 views

SUSE CVE-2018-6034

Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

8.1CVSS8.5AI score0.01908EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:31 a.m.1 views

SUSE CVE-2018-6036

Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user data via a crafted HTML page...

6.5CVSS8.5AI score0.01615EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:31 a.m.2 views

SUSE CVE-2018-6043

Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially execute arbitrary programs on user machine via a crafted HTML page...

8.8CVSS8.8AI score0.01735EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:31 a.m.3 views

SUSE CVE-2018-6046

Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension...

6.1CVSS8.6AI score0.01175EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:16 a.m.3 views

SUSE CVE-2019-5819

Insufficient data validation in developer tools in Google Chrome on OS X prior to 74.0.3729.108 allowed a local attacker to execute arbitrary code via a crafted string copied to clipboard...

7.8CVSS7.7AI score0.0039EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 4:16 a.m.2 views

SUSE CVE-2019-5839

Excessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote attacker who convinced a user to input a URL to bypass website URL validation via a crafted URL...

4.3CVSS6.2AI score0.01275EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 4:13 a.m.3 views

SUSE CVE-2019-10895

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation...

5.3CVSS7.6AI score0.05803EPSS
Exploits1References11
SUSE CVE
SUSE CVE
added 2023/02/15 4:10 a.m.1 views

SUSE CVE-2019-13670

Insufficient data validation in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.5CVSS7.3AI score0.0093EPSS
Exploits0References8
Rows per page
Query Builder