Lucene search
K

7648 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.21 views

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01768EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.22 views

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01768EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.22 views

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01768EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.29 views

Autodesk Navisworks Freedom DWF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.6AI score0.0062EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.53 views

Autodesk Navisworks Freedom DWF File Parsing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score0.01012EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.26 views

Autodesk Navisworks Manage PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.9AI score0.01768EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/04 12:0 a.m.72 views

(0Day) Array Networks MotionPro Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Array Networks MotionPro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.9AI score
Exploits0References1
CNVD
CNVD
added 2022/03/31 12:0 a.m.32 views

Bentley MicroStation CONNECT Code Execution Vulnerability (CNVD-2022-65624)

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting.A code execution vulnerability exists in Bentley MicroStation CONNECT, which can be exploited by attackers to execute arbitrary code in the context of the current process...

7.8CVSS5.5AI score0.01911EPSS
Exploits0References1
CNVD
CNVD
added 2022/03/31 12:0 a.m.24 views

Bentley MicroStation CONNECT Code Execution Vulnerability (CNVD-2022-65623)

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting.A code execution vulnerability exists in Bentley MicroStation CONNECT, which can be exploited by attackers to execute arbitrary code in the context of the current process...

7.8CVSS5.5AI score0.01911EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/29 12:0 a.m.19 views

(0Day) Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS2.7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2022/03/25 12:0 a.m.29 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.4AI score0.08366EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/23 10:15 p.m.9 views

CVE-2022-24934

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEYCURRENTUSER in the registry...

9.8CVSS6.4AI score0.2047EPSS
Exploits1References3
OSV
OSV
added 2022/03/23 10:15 p.m.4 views

CVE-2022-24934

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEYCURRENTUSER in the registry...

9.8CVSS8.1AI score0.2047EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/03/23 12:0 a.m.12 views

Kingsoft WPS 代码注入漏洞

Kingsoft WPS is a kind of office software from Kingsoft, a Chinese company. It provides document processing functions. A security vulnerability exists in wpsupdater.exe version 11.2.0.10382 and earlier versions of Kingsoft WPS Office, which originates from a vulnerability in wpsupdater.exe that...

9.8CVSS9.3AI score0.2047EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.5 views

The vulnerability of Adobe Illustrator 2021, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe Illustrator 2021 graphic editor is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted PDF file...

9.3CVSS8.7AI score0.06041EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.6 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Magento Commerce development and management software platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.1CVSS6.8AI score0.01701EPSS
Exploits0References3Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/03/18 6:15 p.m.5 views

CVE-2022-22598

An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 15.4 and iPadOS 15.4. An app may be able to learn information about the current camera view before being granted camera access...

3.3CVSS5.8AI score0.00279EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2022/03/18 12:0 a.m.25 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.4AI score0.03844EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/18 12:0 a.m.34 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.4AI score0.04216EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/18 12:0 a.m.47 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.6AI score0.01211EPSS
Exploits0References2
Rows per page
Query Builder