Lucene search
K

7640 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/05/12 12:0 a.m.25 views

Adobe Acrobat Reader DC JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.10131EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/05/12 12:0 a.m.18 views

Microsoft Windows Media Player HEVC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows Media Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS5.9AI score0.05014EPSS
Exploits0References1
CNVD
CNVD
added 2020/05/12 12:0 a.m.2 views

Unspecified vulnerability in cPanel (CNVD-2020-29628)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An unspecified vulnerability exists in cPanel. An attacker can exploit this vulnerability to gain access to the current working...

8.1CVSS7AI score0.00877EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/05/12 12:0 a.m.28 views

Adobe Acrobat Reader DC JPEG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7CVSS5.7AI score0.05741EPSS
Exploits0References1
OSV
OSV
added 2020/05/11 4:15 p.m.1 views

CVE-2020-12785

cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature SEC-540...

8.1CVSS7.3AI score0.00877EPSS
Exploits0References2
CNVD
CNVD
added 2020/05/09 12:0 a.m.2 views

Plex Media Server Code Issue Vulnerability

Plex Media Server is a media player and media server software. A security vulnerability exists in Plex Media Server Windows versions prior to 1.19.3. A remote attacker can exploit this vulnerability to execute arbitrary Python code in the context of the current OS user...

7.2CVSS7.5AI score0.72936EPSS
Exploits4References1
Tenable Nessus
Tenable Nessus
added 2020/05/07 12:0 a.m.12 views

Slackware 14.2 / current : mozilla-thunderbird (SSA:2020-126-02)

New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-126-02. The text itself is copyright C Slackware Linu...

7AI score
Exploits0References1
Slackware Linux
Slackware Linux
added 2020/05/05 8:43 p.m.17 views

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-thunderbird-68.8.0-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2020/04/30 12:0 a.m.27 views

Adobe After Effects MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

7.8CVSS4.2AI score0.05797EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/30 12:0 a.m.30 views

LAquis SCADA LGX File Insufficient UI Warning Arbitrary File Creation Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS1.7AI score0.00832EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/30 12:0 a.m.22 views

Adobe Bridge DCM File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of DCM files...

7.8CVSS5.3AI score0.02658EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.27 views

Adobe Bridge PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PCX...

7.8CVSS5.8AI score0.05307EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.25 views

Adobe Bridge GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of GIF...

7.8CVSS4.3AI score0.02815EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.27 views

Adobe Bridge PostScript put Command Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of the...

7.8CVSS2.5AI score0.02784EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.28 views

Adobe Bridge PostScript callothersubr Command Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of the...

7.8CVSS4AI score0.02784EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.24 views

Adobe Bridge PostScript load Command Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of the...

7.8CVSS2.5AI score0.02815EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.28 views

Adobe Bridge PostScript callothersubr Command Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of the...

7.8CVSS4.1AI score0.02815EPSS
Exploits0References1
NVD
NVD
added 2020/04/22 9:15 p.m.15 views

CVE-2020-10902

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.04787EPSS
Exploits0References2
NVD
NVD
added 2020/04/22 9:15 p.m.12 views

CVE-2020-10897

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.04787EPSS
Exploits0References2
Prion
Prion
added 2020/04/22 9:15 p.m.15 views

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.9AI score0.04689EPSS
Exploits0References2Affected Software2
Rows per page
Query Builder