Lucene search
K

7648 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.11 views

Autodesk AutoCAD JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.9AI score0.02885EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.21 views

Autodesk AutoCAD PICT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PI...

7.8CVSS5.1AI score0.01708EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.33 views

Autodesk AutoCAD PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PD...

7.8CVSS5.7AI score0.00876EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.33 views

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.6AI score0.01829EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.21 views

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.6AI score0.01829EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.52 views

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.6AI score0.01829EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.37 views

Autodesk AutoCAD PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PD...

7.8CVSS5AI score0.0154EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.27 views

Autodesk AutoCAD DWF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DW...

7.8CVSS5.4AI score0.0062EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.19 views

Autodesk AutoCAD PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PI...

7.8CVSS5.5AI score0.01494EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.24 views

Autodesk AutoCAD PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PI...

7.8CVSS5.5AI score0.0142EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.21 views

Autodesk AutoCAD 3DS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3D...

7.8CVSS4.2AI score0.01494EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.21 views

Autodesk AutoCAD JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.9AI score0.02885EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.16 views

Autodesk AutoCAD PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PS...

7.8CVSS4.8AI score0.01708EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.35 views

Autodesk AutoCAD JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.4AI score0.01797EPSS
Exploits0References1
Slackware Linux
Slackware Linux
added 2022/03/05 8:4 p.m.22 views

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-91.6.2-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For more...

0.4AI score
Exploits0
CNVD
CNVD
added 2022/03/04 12:0 a.m.7 views

Bentley MicroStation CONNECT Remote Code Execution Vulnerability (CNVD-2022-30752)

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, Inc. A remote code execution vulnerability exists in Bentley MicroStation CONNECT 10.16.0.80 when parsing PDF files, which stems from failure to verify the existence of an object before...

7.8CVSS5AI score0.01878EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:0 a.m.6 views

The vulnerability of the Magento Commerce software development and management platform lies in the incorrect limitation of the path to the restricted catalog. This allows attackers to execute arbitrary code.

The vulnerability of the Magento Commerce development and management software platform relates to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

9CVSS7.8AI score0.03116EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:0 a.m.5 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations, related to the manipulation of the null pointer, allows attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to the use of a zero pointer. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially crafted file...

7.8CVSS7AI score0.0183EPSS
Exploits0References3Affected Software1
Slackware Linux
Slackware Linux
added 2022/03/01 5:14 a.m.50 views

[slackware-security] libxml2

New libxml2 packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxml2-2.9.13-i586-1slack15.0.txz: Upgraded. This update fixes bugs and the following security issues:...

7.5CVSS0.3AI score0.0601EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2022/02/28 12:0 a.m.6 views

The vulnerability of Adobe Illustrator, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, as well as to increase their privileges...

9.3CVSS7.9AI score
Exploits0References4Affected Software3
Rows per page
Query Builder