Lucene search
K

5838 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/06/15 12:0 a.m.59 views

OpenText Brava! Desktop BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01811EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/15 12:0 a.m.62 views

OpenText Brava! Desktop DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01811EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/15 12:0 a.m.62 views

OpenText Brava! Desktop TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.7AI score0.01811EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/15 12:0 a.m.46 views

OpenText Brava! Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.5AI score0.01811EPSS
Exploits0
CNNVD
CNNVD
added 2021/06/15 12:0 a.m.3 views

Opentext OpenText Brava! 缓冲区错误漏洞

OpenText Brava! Desktop is a browser-based universal document viewer from OpenText Opentext Canada. The product supports viewing, annotating and editing many types of documents. A security vulnerability exists in OpenText Brava! Desktop that stems from the program's lack of proper validation of...

7.8CVSS5.8AI score0.01811EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2021/06/14 12:0 a.m.61 views

Microsoft Paint 3D STL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Paint 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS5.4AI score0.02938EPSS
Exploits0References1
NVD
NVD
added 2021/06/11 4:15 p.m.15 views

CVE-2021-22756

A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of user-supplied data validation, when a malicious CGF file is imported to IGSS Definition...

7.8CVSS0.01265EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/06/11 3:40 p.m.15 views

CVE-2021-22756

A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of user-supplied data validation, when a malicious CGF file is imported to IGSS Definition...

7.9AI score0.01265EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.56 views

Microsoft Paint 3D GLB File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Paint 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS5.5AI score0.02938EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.54 views

(0Day) D-Link DAP-1330 lighttpd http_parse_request Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the HNAPAUTH HTTP header. The issue results from the...

8.8CVSS3.1AI score0.02333EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.43 views

Microsoft Paint 3D GLB File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Paint 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS5.5AI score0.02284EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.56 views

Microsoft Print 3D PLY File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS5.3AI score0.02146EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.34 views

Schneider Electric IGSS WSP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS3.8AI score0.01172EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.44 views

Adobe Animate FLA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Animate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS2.9AI score0.02059EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.39 views

Adobe Acrobat Reader DC Path Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS4.1AI score0.46031EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.36 views

Schneider Electric IGSS CGF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS3.8AI score0.01172EPSS
Exploits0References1
CNVD
CNVD
added 2021/06/09 12:0 a.m.4 views

Accela Civic Platform Cross-Site Scripting Vulnerability

Accela Civic Platform is Accela's application software cloud-based solution to modernize city systems for land management and code enforcement, increased civic engagement and mobile information access. Accela Civic Platform cross-site scripting vulnerability that stems from Accela Platform's lack...

6.1CVSS6.1AI score0.10053EPSS
Exploits5References1
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:0 a.m.4 views

The vulnerability of the Apache Thrift application programming library at Aurora Center, related to insufficient input data validation, allows attackers to trigger service failures.

The vulnerability of the Apache Thrift application programming interface at Aurora Center is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS6.9AI score0.06793EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:0 a.m.5 views

The vulnerability of the kind-of application software library “Aurora Center” is related to insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the kind-of application software library Aurora Center is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.4AI score0.02278EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2021/06/09 12:0 a.m.3 views

Open Design Alliance Drawings SDK 代码问题漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The SDK provides access to .dwg and .dgn data through a convenient, object-oriented API, a C++ API, support for repairing files, and support for . A code issue...

7.8CVSS5.9AI score0.02801EPSS
Exploits0References15
Rows per page
Query Builder