Lucene search
+L

8233 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•33 views

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01944EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•41 views

Autodesk Navisworks Manage DWF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.6AI score0.00663EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•44 views

Omron CX-One CX-Position NCI File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

7.8CVSS4.4AI score0.01504EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•44 views

Omron CX-One CX-Position NCI File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

7.8CVSS5.4AI score0.01473EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•46 views

Autodesk Navisworks Manage DWFX File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.6AI score0.00663EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•46 views

Autodesk Navisworks Manage DWFX File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01642EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•65 views

Autodesk Navisworks Freedom DWF File Parsing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score0.01112EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/04 12:00 a.m.•83 views

(0Day) Array Networks MotionPro Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Array Networks MotionPro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.9AI score
SaveExploits0References1
CNVD
CNVD
•added 2022/03/31 12:00 a.m.•58 views

Bentley MicroStation CONNECT Code Execution Vulnerability (CNVD-2022-65624)

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting.A code execution vulnerability exists in Bentley MicroStation CONNECT, which can be exploited by attackers to execute arbitrary code in the context of the current process...

7.8CVSS5.5AI score0.02041EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/03/31 12:00 a.m.•53 views

Bentley MicroStation CONNECT Code Execution Vulnerability (CNVD-2022-65623)

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting.A code execution vulnerability exists in Bentley MicroStation CONNECT, which can be exploited by attackers to execute arbitrary code in the context of the current process...

7.8CVSS5.5AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/03/29 12:00 a.m.•26 views

(0Day) Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS2.7AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2022/03/25 12:00 a.m.•37 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.4AI score0.08366EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/23 10:15 p.m.•24 views

CVE-2022-24934

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEYCURRENTUSER in the registry...

9.8CVSS6.4AI score0.2047EPSS
SaveExploits2References3
osv_cve
osv_cve
•added 2022/03/23 10:15 p.m.•19 views

CVE-2022-24934

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEYCURRENTUSER in the registry...

9.8CVSS8.1AI score0.2047EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2022/03/23 12:00 a.m.•35 views

Kingsoft WPS 代码注入漏洞

Kingsoft WPS is a kind of office software from Kingsoft, a Chinese company. It provides document processing functions. A security vulnerability exists in wpsupdater.exe version 11.2.0.10382 and earlier versions of Kingsoft WPS Office, which originates from a vulnerability in wpsupdater.exe that...

9.8CVSS9.3AI score0.2047EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
•added 2022/03/23 12:00 a.m.•20 views

Adobe Illustrator Heap Buffer Overflow

The vulnerability of Adobe Illustrator 2021 graphic editor is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted PDF file...

9.3CVSS8.7AI score0.07996EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/03/23 12:00 a.m.•25 views

Magento Commerce Code Execution

The vulnerability of the Magento Commerce development and management software platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.1CVSS6.8AI score0.01701EPSS
SaveExploits0References3Affected Software2
attackerkb
attackerkb
•added 2022/03/18 6:15 p.m.•14 views

CVE-2022-22598

An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 15.4 and iPadOS 15.4. An app may be able to learn information about the current camera view before being granted camera access...

3.3CVSS5.8AI score0.0029EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2022/03/18 12:00 a.m.•44 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.4AI score0.04498EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/03/18 12:00 a.m.•33 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.4AI score0.04102EPSS
SaveExploits0References1
Rows per page
Query Builder