Lucene search
K

7649 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.41 views

Siemens Solid Edge Viewer JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5AI score0.01564EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.29 views

Adobe Dimension OBJ File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS4.9AI score0.00333EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/01/18 12:0 a.m.18 views

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current sudo Vulnerability (SSA:2023-018-01)

The version of git installed on the remote host is prior to 2.30.7 / 2.35.6 / 2.39.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-018-01 advisory. - In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user- provide...

7.8CVSS8.3AI score0.55367EPSS
Exploits20References1
CNVD
CNVD
added 2023/01/17 12:0 a.m.12 views

Adobe InDesign Buffer Overflow Vulnerability (CNVD-2023-04306)

Adobe InDesign is a set of typesetting and editing applications from Adobe. Adobe InDesign suffers from a buffer overflow vulnerability that stems from an out-of-bounds write vulnerability that could lead to the execution of arbitrary code in the context of the current user. No detailed...

7.8CVSS5.9AI score0.00291EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/01/17 12:0 a.m.9 views

Git 代码问题漏洞

Git is a free, open source distributed version control system. A code issue vulnerability exists in the Git GUI, which stems from the dangerous design of Tcl scripts on Windows, causing the search path when looking for executables to always include the current directory...

8.6CVSS8.1AI score0.06796EPSS
Exploits0References5
CNVD
CNVD
added 2023/01/17 12:0 a.m.24 views

Adobe InDesign input validation error vulnerability

Adobe InDesign is a set of typesetting and editing applications from Adobe. Adobe InDesign has an input validation error vulnerability that stems from an improper input validation vulnerability that could lead to the execution of arbitrary code in the context of the current user. No details of th...

7.8CVSS3.2AI score0.00326EPSS
Exploits0References1
CNVD
CNVD
added 2023/01/14 12:0 a.m.27 views

Adobe InCopy Buffer Overflow Vulnerability (CNVD-2023-05227)

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

7.8CVSS6.7AI score0.00408EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/01/13 12:0 a.m.3 views

Adobe InDesign 安全漏洞

Adobe InDesign is a set of typesetting and editing applications from Adobe. Adobe InDesign has a security vulnerability that stems from a heap-based buffer overflow vulnerability that could lead to the execution of arbitrary code in the context of the current user. No details of the vulnerability...

7.8CVSS7.8AI score0.00412EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/01/13 12:0 a.m.38 views

Siemens Teamcenter Visualization 和 JT2Go 缓冲区错误漏洞

Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens JT2GO is a JT file viewer. Siemens Teamcenter Visualization and JT2Go are vulnerable to a memory corruption vulnerability that could be exploited by an attacker to...

7.8CVSS7.3AI score0.00413EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/01/13 12:0 a.m.2 views

Adobe InDesign 缓冲区错误漏洞

Adobe InDesign is a set of typesetting and editing applications from Adobe. Adobe InDesign suffers from a buffer overflow vulnerability that stems from an out-of-bounds write vulnerability that could lead to the execution of arbitrary code in the context of the current user. No detailed...

7.8CVSS7.9AI score0.00291EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/01/13 12:0 a.m.12 views

Adobe InDesign 缓冲区错误漏洞

Adobe InDesign is a set of typesetting and editing applications from Adobe. Adobe InDesign suffers from a buffer overflow vulnerability that stems from an out-of-bounds write vulnerability that could lead to the execution of arbitrary code in the context of the current user. No detailed...

7.8CVSS7.9AI score0.00302EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/01/13 12:0 a.m.13 views

CVE-2023-21594 Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.9AI score0.00408EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/01/11 12:0 a.m.3 views

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy is vulnerable to an out-of-bounds write vulnerability, which can be exploited to execute arbitrary code in the context of the current user...

7.8CVSS7.8AI score0.00294EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/01/11 12:0 a.m.3 views

Adobe InCopy 安全漏洞

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

7.8CVSS8AI score0.00408EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/01/09 12:0 a.m.15 views

Slackware: Security Advisory (SSA:2023-006-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS10AI score0.17563EPSS
Exploits0References4
Slackware Linux
Slackware Linux
added 2023/01/07 2:9 a.m.36 views

[slackware-security] php

New php packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/php-7.4.33-i586-2slack15.0.txz: Rebuilt. This update fixes a security issue: PDO::quote may return unquoted string. For more information...

9.1CVSS0.5AI score0.02154EPSS
Exploits0
OpenVAS
OpenVAS
added 2023/01/05 12:0 a.m.21 views

Slackware: Security Advisory (SSA:2023-004-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00518EPSS
Exploits2References4
Positive Technologies
Positive Technologies
added 2023/01/04 12:0 a.m.3 views

PT-2023-12991 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE candidate...

6.2AI score
Exploits0References2
OSV
OSV
added 2022/12/26 7:15 p.m.2 views

CVE-2020-12067

In Pilz PMC programming tool 3.x before 3.5.17 based on CODESYS Development System, a user's password may be changed by an attacker without knowledge of the current password...

7.5CVSS5.8AI score0.00509EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.5 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

5.5CVSS5.6AI score0.00708EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder