Lucene search
+L

8233 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•55 views

Bentley View DXF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF...

7.8CVSS4.6AI score0.02005EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•55 views

Bentley MicroStation CONNECT BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.8AI score0.02087EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•87 views

Bentley View DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN...

7.8CVSS5.1AI score0.02087EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•55 views

Bentley View J2K File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K...

7.8CVSS5.4AI score0.02005EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•91 views

Bentley View JT File Parsing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of JT...

7.8CVSS4.1AI score0.01937EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•72 views

Bentley MicroStation CONNECT JT File Parsing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.8AI score0.01937EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•90 views

Bentley MicroStation CONNECT DXF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.5AI score0.02005EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•49 views

Bentley View BMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.8AI score0.01815EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•77 views

Bentley MicroStation CONNECT JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.1AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•64 views

Bentley MicroStation CONNECT JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•67 views

Bentley MicroStation CONNECT JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score0.02041EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•35 views

Mageia: Security Advisory (MGASA-2015-0236)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.9AI score0.00589EPSS
SaveExploits1References5
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•33 views

Mageia: Security Advisory (MGASA-2014-0039)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS6.8AI score0.35451EPSS
SaveExploits17References5
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•46 views

Mageia: Security Advisory (MGASA-2018-0080)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.6CVSS7.2AI score0.84172EPSS
SaveExploits11References5
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•38 views

Mageia: Security Advisory (MGASA-2021-0203)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.5AI score0.00347EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•26 views

Mageia: Security Advisory (MGASA-2017-0025)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.00423EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2022/01/25 8:15 p.m.•23 views

CVE-2021-40159

An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process...

7.8CVSS6AI score0.02296EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/01/25 8:15 p.m.•13 views

CVE-2021-40167

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS7.2AI score0.07734EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2022/01/21 6:55 p.m.•15 views

GHSA-PQ7M-3GW7-GQ5X Execution with Unnecessary Privileges in ipython

We’d like to disclose an arbitrary code execution vulnerability in IPython that stems from IPython executing untrusted files in CWD. This vulnerability allows one user to run code as another. Proof of concept User1: mkdir -m 777 /tmp/profiledefault mkdir -m 777 /tmp/profiledefault/startup echo...

9.3CVSS7.6AI score0.00652EPSS
SaveExploits1References12
CNVD
CNVD
•added 2022/01/17 12:00 a.m.•50 views

Adobe Acrobat Reader DC buffer overflow vulnerability

Acrobat Reader DC is an excellent PDF file reader developed by the U.S. Adobe Acrobat Reader DC has a buffer overflow vulnerability, which can be exploited by attackers to execute arbitrary code in the context of the current user...

9.3CVSS6.6AI score0.38182EPSS
SaveExploits0References1
Rows per page
Query Builder