Lucene search
K

7641 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.38 views

Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.4AI score0.0372EPSS
Exploits0References1
CNVD
CNVD
added 2020/10/23 12:0 a.m.2 views

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2020-68844)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel, which can be exploited by an attacker to run arbitrary code in the context of the current user...

7.8CVSS7.2AI score0.04342EPSS
Exploits0References1
CNVD
CNVD
added 2020/10/23 12:0 a.m.5 views

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2020-68841)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a networked system or product. An...

8.8CVSS8.1AI score0.03665EPSS
Exploits0References1
CNVD
CNVD
added 2020/10/23 12:0 a.m.5 views

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2020-68843)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel, which can be exploited by an attacker to run arbitrary code in the context of the current user...

7.8CVSS7.2AI score0.04469EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/22 12:0 a.m.37 views

Adobe Illustrator PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of P...

7.8CVSS4.6AI score0.04071EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/10/22 12:0 a.m.19 views

Windows Migration Assistant < 2.2.0.0 Arbitrary Code Execution (HT211186)

According to its self-reported version number, the version of Windows Migration Assistant installed on the remote host is prior to 2.2.0.0. It is, therefore, affected by an arbitrary code execution vulnerability due to a dynamic library loading issue. An unauthenticated, local attacker can exploi...

7.8CVSS8.3AI score0.00469EPSS
Exploits0References2
CNVD
CNVD
added 2020/10/21 12:0 a.m.2 views

Adobe Creative Cloud Desktop Application Uncontrolled Search Path Vulnerability

Adobe Creative Cloud Desktop Application is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial...

7.8CVSS7.8AI score0.02951EPSS
Exploits0References1
CNVD
CNVD
added 2020/10/21 12:0 a.m.2 views

Adobe After Effects Code Execution Vulnerability

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. A security vulnerability exists in Adobe After Effects, which can be...

7.8CVSS7.7AI score0.00681EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.2 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 are related to reading beyond the buffer in memory. Exploiting these vulnerabilities...

4.3CVSS7.5AI score0.02241EPSS
Exploits0References3
Zero Day Initiative
Zero Day Initiative
added 2020/10/19 12:0 a.m.171 views

Microsoft Outlook HTML Email Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Outlook. User interaction is required to exploit this vulnerability in that the target must open a malicious email or view it in the preview pane. The specific flaw exists within the parsin...

8.1CVSS4.7AI score0.33551EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/19 12:0 a.m.54 views

Microsoft Windows Camera Codec Pack Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS3.6AI score0.04507EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/19 12:0 a.m.30 views

SAP 3D Visual Enterprise Viewer PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.4AI score0.01228EPSS
Exploits0
OSV
OSV
added 2020/10/16 11:15 p.m.3 views

CVE-2020-16933

A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file...

7CVSS7.1AI score0.02534EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/14 12:0 a.m.48 views

Microsoft Windows Camera Codec Pack Image Processing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the camera codec...

7.8CVSS3.7AI score0.03871EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/14 12:0 a.m.33 views

LAquis SCADA LQS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LQS...

7.8CVSS4.1AI score0.01858EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/10/14 12:0 a.m.2 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the use of a null pointer pointer, which allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the use of a null pointer. Exploiting these vulnerabilities can allow an attacker...

10CVSS8.3AI score0.04413EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/14 12:0 a.m.4 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the use of a null pointer pointer, which allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the use of a null pointer. Exploiting these vulnerabilities can allow an attacker...

10CVSS8.3AI score0.05048EPSS
Exploits0References3
Prion
Prion
added 2020/10/13 5:15 p.m.15 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.04002EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2020/10/13 5:15 p.m.18 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.08644EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/10/09 12:0 a.m.3 views

The vulnerability of the Adobe Photoshop graphic editor, related to reading beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to reading beyond the buffer limit in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

9.3CVSS8.3AI score0.03006EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder