Lucene search
K

7641 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/09/17 12:0 a.m.25 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.1AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/17 12:0 a.m.20 views

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.5AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/17 12:0 a.m.21 views

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.3AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/17 12:0 a.m.29 views

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.5AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:0 a.m.4 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability could...

9.3CVSS7.9AI score0.03915EPSS
Exploits0References3
Adobe
Adobe
added 2020/09/15 12:0 a.m.35 views

APSB20-57 Security update available for Adobe Media Encoder

Adobe has released an update for Adobe Media Encoder. This update resolves important out-of-bounds read vulnerabilities that could lead to information disclosure in the context of the current user...

6.6AI score
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/09/14 12:0 a.m.33 views

Slackware 14.2 / current : mozilla-thunderbird (SSA:2020-256-01)

New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-256-01. The text itself is copyright C Slackware Linu...

9.3CVSS8.4AI score0.02603EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2020/09/14 12:0 a.m.9 views

Huawei Data Communication: Read current-configuration including ntp configuration

Get the current configuration for ntp of the VRP device. Note: This script only stores information for other Policy Controls. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

6.9AI score
Exploits0
Slackware Linux
Slackware Linux
added 2020/09/12 8:10 p.m.32 views

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-thunderbird-68.12.0-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For mor...

9.3CVSS0.5AI score0.02603EPSS
Exploits0
NVD
NVD
added 2020/09/11 5:15 p.m.17 views

CVE-2020-1180

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

7.6CVSS0.02067EPSS
Exploits0References1
OSV
OSV
added 2020/09/11 5:15 p.m.1 views

CVE-2020-16856

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an...

7.8CVSS7.8AI score0.04369EPSS
Exploits0References1
OSV
OSV
added 2020/09/10 7:15 p.m.1 views

CVE-2020-9731

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

7.8CVSS7.5AI score0.11294EPSS
Exploits0References1
OSV
OSV
added 2020/09/10 7:15 p.m.1 views

CVE-2020-9730

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

7.8CVSS7.5AI score
Exploits0References1
OSV
OSV
added 2020/09/10 7:15 p.m.2 views

CVE-2020-9729

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

7.8CVSS7.5AI score
Exploits0References1
OSV
OSV
added 2020/09/10 7:15 p.m.1 views

CVE-2020-9728

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

7.8CVSS6.1AI score0.02713EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/09/10 6:29 p.m.24 views

CVE-2020-9730 Out-of-bounds memory access could lead to code execution

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

7.8CVSS7.8AI score0.02713EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/10 12:0 a.m.36 views

SAP 3D Visual Enterprise Viewer BMP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01623EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/10 12:0 a.m.38 views

SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.7AI score0.01623EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/10 12:0 a.m.47 views

SAP 3D Visual Enterprise Viewer HPGL File Parsing hpgl Plugin Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7CVSS3.6AI score0.01623EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/10 12:0 a.m.81 views

Microsoft Windows WebM Video Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

8.8CVSS7.2AI score0.04664EPSS
Exploits0References1
Rows per page
Query Builder