Lucene search
+L

7899 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.28 views

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.0182EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.42 views

Autodesk Navisworks Manage DWFX File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01538EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.32 views

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.0182EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.34 views

Omron CX-One CX-Position NCI File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

7.8CVSS4.4AI score0.01409EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/04 12:0 a.m.76 views

(0Day) Array Networks MotionPro Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Array Networks MotionPro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.9AI score
SaveExploits0References1
CNVD
CNVD
added 2022/03/31 12:0 a.m.43 views

Bentley MicroStation CONNECT Code Execution Vulnerability (CNVD-2022-65623)

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting.A code execution vulnerability exists in Bentley MicroStation CONNECT, which can be exploited by attackers to execute arbitrary code in the context of the current process...

7.8CVSS5.5AI score0.02041EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/03/31 12:0 a.m.50 views

Bentley MicroStation CONNECT Code Execution Vulnerability (CNVD-2022-65624)

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting.A code execution vulnerability exists in Bentley MicroStation CONNECT, which can be exploited by attackers to execute arbitrary code in the context of the current process...

7.8CVSS5.5AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/29 12:0 a.m.22 views

(0Day) Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS2.7AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2022/03/25 12:0 a.m.31 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.4AI score0.08366EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/23 10:15 p.m.8 views

CVE-2022-24934

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEYCURRENTUSER in the registry...

9.8CVSS8.1AI score0.2047EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/03/23 10:15 p.m.13 views

CVE-2022-24934

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEYCURRENTUSER in the registry...

9.8CVSS6.4AI score0.2047EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.15 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Magento Commerce development and management software platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.1CVSS6.8AI score0.01701EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.9 views

The vulnerability of Adobe Illustrator 2021, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe Illustrator 2021 graphic editor is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted PDF file...

9.3CVSS8.7AI score0.05915EPSS
SaveExploits0References4Affected Software2
CNNVD
CNNVD
added 2022/03/23 12:0 a.m.17 views

Kingsoft WPS 代码注入漏洞

Kingsoft WPS is a kind of office software from Kingsoft, a Chinese company. It provides document processing functions. A security vulnerability exists in wpsupdater.exe version 11.2.0.10382 and earlier versions of Kingsoft WPS Office, which originates from a vulnerability in wpsupdater.exe that...

9.8CVSS9.3AI score0.2047EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/03/18 6:15 p.m.10 views

CVE-2022-22598

An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 15.4 and iPadOS 15.4. An app may be able to learn information about the current camera view before being granted camera access...

3.3CVSS5.8AI score0.0029EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2022/03/18 12:0 a.m.28 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.4AI score0.04102EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/18 12:0 a.m.37 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.4AI score0.04498EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/18 12:0 a.m.51 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.6AI score0.01293EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/17 6:15 p.m.5 views

CVE-2022-26511

WPS Presentation 11.8.0.5745 insecurely load d3dx941.dll when opening .pps files'current directory type' DLL loading...

7.8CVSS7.1AI score0.00634EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/17 6:15 p.m.9 views

CVE-2022-26511

WPS Presentation 11.8.0.5745 insecurely load d3dx941.dll when opening .pps files'current directory type' DLL loading...

7.8CVSS7.1AI score0.00634EPSS
SaveExploits0References3
Rows per page
Query Builder