Lucene search
K

7648 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/02/11 12:0 a.m.29 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01661EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/11 12:0 a.m.37 views

Siemens Simcenter Femap NEU File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.6AI score0.01495EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/11 12:0 a.m.44 views

Siemens Simcenter Femap NEU File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.9AI score0.01464EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/11 12:0 a.m.18 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01464EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/11 12:0 a.m.30 views

Siemens Simcenter Femap NEU File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.9AI score0.01464EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/02/11 12:0 a.m.4 views

PT-2022-7649

Name of the Vulnerable Software and Affected Versions Puma versions prior to 5.6.2 Puma version 4.3.11 Rails versions prior to 7.0.2.2 Rails versions prior to 6.1.4.6 Rails versions prior to 6.0.4.6 Rails versions prior to 5.2.6.2 Description The issue is related to information leakage due to Pum...

9.8CVSS6.6AI score0.04088EPSS
Exploits0References561
OSV
OSV
added 2022/02/10 8:28 p.m.1 views

GHSA-VJW7-6GFQ-6WF5 Path Traversal in Eclipse Vert

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0-milestone1, 4.0.0-milestone2, 4.0.0-milestone3, 4.0.0-milestone4, 4.0.0-milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

9.8CVSS5.8AI score0.01977EPSS
Exploits0References9
CNVD
CNVD
added 2022/02/10 12:0 a.m.32 views

Bentley Systems Bentley View Buffer Overflow Vulnerability (CNVD-2022-15835)

Bentley Systems Bentley View is a free viewer from Bentley Systems, USA. A buffer overflow vulnerability exists in Bentley View that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.8AI score0.01955EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/10 12:0 a.m.27 views

Sante DICOM Viewer Pro DCM Remote Code Execution Vulnerability

Sante DICOM Viewer Pro is a medical DICOM image viewer.A remote code execution vulnerability exists in Sante DICOM Viewer Pro DCM, which can be exploited by attackers to execute code in the context of the current process...

7.8CVSS6AI score0.01731EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/10 12:0 a.m.26 views

Sante DICOM Viewer Pro J2K Remote Code Execution Vulnerability (CNVD-2022-14984)

Sante DICOM Viewer Pro is a medical DICOM image viewer.A remote code execution vulnerability exists in Sante DICOM Viewer Pro J2K, which can be exploited by attackers to execute code in the context of the current process...

7.8CVSS6.2AI score0.01731EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/10 12:0 a.m.22 views

Sante DICOM Viewer Pro DCM Information Disclosure Vulnerability (CNVD-2022-14981)

Sante DICOM Viewer Pro is a medical DICOM image viewer.An information disclosure vulnerability exists in Sante DICOM Viewer Pro DCM, which can be exploited by attackers to execute arbitrary code in the context of the current process along with other vulnerabilities...

5.5CVSS4.5AI score0.0144EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/10 12:0 a.m.21 views

Sante DICOM Viewer Pro GIF Information Disclosure Vulnerability

Sante DICOM Viewer Pro is a medical DICOM image viewer.An information disclosure vulnerability exists in Sante DICOM Viewer Pro GIF, which can be exploited by attackers to execute arbitrary code in the context of the current process along with other vulnerabilities...

5.5CVSS4.7AI score0.0144EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/10 12:0 a.m.22 views

Bentley Systems MicroStation Buffer Overflow Vulnerability (CNVD-2022-15816)

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer overflow vulnerability exists in Bentley Systems MicroStation that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.9AI score0.01937EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/10 12:0 a.m.17 views

Bentley Systems Bentley View Resource Management Error Vulnerability (CNVD-2022-77006)

Bentley Systems Bentley View is a free viewer from Bentley Systems, Inc. A resource management error vulnerability exists in Bentley Systems Bentley View, which originally failed to verify the existence of an object before performing further free operations on the object, and could be exploited b...

7.8CVSS2.9AI score0.01814EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/10 12:0 a.m.26 views

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS2.2AI score0.02382EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/10 12:0 a.m.26 views

Bentley Systems MicroStation Buffer Overflow Vulnerability (CNVD-2022-15814)

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer overflow vulnerability exists in Bentley Systems MicroStation that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.9AI score0.01855EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/10 12:0 a.m.25 views

Autodesk Inventor JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Inventor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J...

7.8CVSS5AI score0.02885EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/10 12:0 a.m.12 views

Bentley MicroStation CONNECT Remote Code Execution Vulnerability (CNVD-2022-30767)

A remote code execution vulnerability exists in Bentley MicroStation CONNECT, a Cad software platform for 2D and 3D design and drafting from Bentley Systems, Inc. Lack of proper validation of the length before copying user-supplied data to a heap-based buffer can be exploited by an attacker to...

7.8CVSS3.4AI score0.01979EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/10 12:0 a.m.22 views

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS2.2AI score0.02382EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/10 12:0 a.m.24 views

Autodesk Inventor JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Inventor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J...

7.8CVSS5.7AI score0.02296EPSS
Exploits0References1
Rows per page
Query Builder