Lucene search
K

7641 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/06/17 12:0 a.m.33 views

(0Day) Microsoft Print 3D PLY File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS5.3AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/15 12:0 a.m.58 views

OpenText Brava! Desktop DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01811EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/15 12:0 a.m.59 views

OpenText Brava! Desktop BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01811EPSS
Exploits0
Oracle linux
Oracle linux
added 2021/06/15 12:0 a.m.224 views

Unbreakable Enterprise kernel security update

5.4.17-2102.202.5 - sctp: delay autoasconf init until binding the first addr Xin Long Orabug: 32907967 CVE-2021-23133 CVE-2021-23133 - dm ioctl: fix out of bounds array access when no devices Mikulas Patocka Orabug: 32860491 CVE-2021-31916 - uek-rpm: update kABI lists for the new symbols Saeed...

8.1CVSS8.1AI score0.06563EPSS
Exploits1
OSV
OSV
added 2021/06/11 12:15 p.m.0 views

UBUNTU-CVE-2021-3013

ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag...

9.8CVSS6.1AI score0.01934EPSS
Exploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.29 views

Schneider Electric IGSS CGF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.3AI score0.00665EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.40 views

Vector 35 Binary Ninja BNDB File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5AI score0.02384EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.38 views

Schneider Electric IGSS WSP and CGF File Parsing Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4AI score0.01395EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.32 views

Schneider Electric IGSS WSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS3.7AI score0.01172EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.47 views

Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Animate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS4.5AI score0.0292EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.34 views

Schneider Electric IGSS WSP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS3.8AI score0.01172EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.43 views

Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.6AI score0.05172EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/06/09 12:0 a.m.6 views

Liferay DXP 跨站脚本漏洞

Liferay DXP is a suite of digital experience collaboration platforms from US-based Liferay. A security vulnerability exists in Liferay DXP 7.0, which allows remote attackers to inject arbitrary web script or HTML via the currentURL parameter...

6.1CVSS6.4AI score0.00754EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2016:3080-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.5AI score0.87921EPSS
Exploits17References17
Slackware Linux
Slackware Linux
added 2021/06/07 7:7 p.m.100 views

[slackware-security] polkit

New polkit packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/polkit-0.113-i586-3slack14.2.txz: Rebuilt. This update includes a mitigation for local privilege escalation using...

7.8CVSS0.2AI score0.22193EPSS
Exploits37
Zero Day Initiative
Zero Day Initiative
added 2021/06/07 12:0 a.m.60 views

OpenText Brava! Desktop IGS File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.5AI score0.01384EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/02 12:0 a.m.32 views

OpenText Brava! Desktop DWF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.8AI score0.01419EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/02 12:0 a.m.29 views

OpenText Brava! Desktop DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.1AI score0.01556EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/02 12:0 a.m.185 views

OpenText Brava! Desktop dwg2dl Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.9AI score0.01419EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/02 12:0 a.m.35 views

OpenText Brava! Desktop pdf2dl Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.7AI score0.01419EPSS
Exploits0
Rows per page
Query Builder