Lucene search
K

7640 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/07/10 12:0 a.m.42 views

Phoenix Contact Automationworx PC WORX MWE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Phoenix Contact Automationworx. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.9AI score0.02106EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/08 12:0 a.m.32 views

Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.123EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/08 12:0 a.m.27 views

Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.08977EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/08 12:0 a.m.34 views

Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.08977EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/07 12:0 a.m.25 views

Microsoft Windows hevcdecoder_store MKV File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of M...

7.8CVSS5.1AI score0.08977EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/07 12:0 a.m.32 views

Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.3AI score0.08977EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/07 12:0 a.m.18 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.8AI score0.05777EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.4 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to the use of memory after it is freed. Exploiting this vulnerability could allow an...

10CVSS8.2AI score0.04914EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.3 views

The vulnerability of the multimedia platform Adobe Shockwave Player, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the multimedia platform Adobe Shockwave Player is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.5AI score0.04084EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.1 views

The vulnerability of the Adobe Photoshop graphic editor relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.5AI score0.06433EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.5 views

The vulnerability of the Adobe Shockwave Player software lies in the fact that operations are performed outside the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of the multimedia platform Adobe Shockwave Player is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.5AI score0.05185EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.3 views

The vulnerability of the multimedia platform Adobe Shockwave Player, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the multimedia platform Adobe Shockwave Player is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.5AI score0.05066EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.3 views

The vulnerability of the multimedia platform Adobe Shockwave Player, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the multimedia platform Adobe Shockwave Player is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.6AI score0.05185EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.1 views

The vulnerability of the multimedia platform Adobe Shockwave Player, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the multimedia platform Adobe Shockwave Player is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.5AI score0.05185EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.2 views

The vulnerability of the Adobe Experience Design (Adobe XD) interface development program exists due to an incorrect path name limitation for the restricted access catalog. This allows a malicious actor to execute arbitrary code.

The vulnerability of the Adobe Experience Design Adobe XD interface development software exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.2AI score0.08262EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.4 views

The vulnerability of Adobe InDesign’s computer design automation tool lies in its lack of proper input data validation, allowing attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.2AI score0.27809EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.4 views

The vulnerability of the Adobe Bridge file manager relates to the issue of writing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user...

10CVSS7.7AI score0.06402EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.5 views

The vulnerability in the Adobe Experience Design (Adobe XD) interface development software exists due to an incorrect path name limitation for the restricted access catalog. This allows a malicious actor to execute arbitrary code.

The vulnerability of the Adobe Experience Design Adobe XD interface development software exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.2AI score0.08262EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:0 a.m.1 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS7.9AI score0.04463EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:0 a.m.1 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the use of a null pointer pointer, which allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the use of a null pointer. Exploiting these vulnerabilities can allow an attacker...

10CVSS8.3AI score0.041EPSS
Exploits0References4
Rows per page
Query Builder