Lucene search
+L

8233 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/11/10 12:00 a.m.•35 views

Open Design Alliance (ODA) ODAViewer U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

3.3CVSS6.8AI score0.0084EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/10 12:00 a.m.•29 views

Open Design Alliance (ODA) ODAViewer U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS7.6AI score0.0084EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/10 12:00 a.m.•35 views

Open Design Alliance (ODA) ODAViewer U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS7.7AI score0.01336EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/10 12:00 a.m.•31 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS7.7AI score0.00884EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/10 12:00 a.m.•40 views

Open Design Alliance (ODA) ODAViewer U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS7.7AI score0.01336EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/10 12:00 a.m.•38 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS7.7AI score0.00884EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/10 12:00 a.m.•29 views

Open Design Alliance (ODA) ODAViewer U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS7.6AI score0.0084EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/11/05 12:00 a.m.•132 views

Adobe Prelude memory corruption vulnerability

Adobe Prelude is a set of video clip editing tools from Adobe. Adobe Prelude has a memory corruption vulnerability that could be exploited to execute arbitrary code in the context of the current user...

9.3CVSS3.3AI score0.02061EPSS
SaveExploits0References1
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•66 views

Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete control of an affected system under the context of the current user...

9.3CVSS7.5AI score0.99976EPSS
SaveIn wildExploits12
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•128 views

ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability

ForgeRock Access Management AM Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints /ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame to execute code in the context of the current user unless ForgeRock AM is running as root user, whi...

10CVSS8.5AI score0.99999EPSS
SaveIn wildExploits10
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•75 views

Microsoft Office Memory Corruption Vulnerability

Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich text format files in memory. Successful exploitation allows for remote code execution in the context of the current user...

9.3CVSS9.4AI score0.97246EPSS
SaveIn wildExploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•72 views

Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user...

7.5CVSS7.7AI score0.02696EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•42 views

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user...

7.6CVSS7.8AI score0.86863EPSS
SaveIn wildExploits17
VulnCheck KEV
VulnCheck KEV
•added 2021/11/03 12:00 a.m.•8 views

VulnCheck KEV: CVE-2020-0878

Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user...

7.5CVSS6.9AI score0.02696EPSS
SaveIn wildExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2021/11/03 12:00 a.m.•13 views

VulnCheck KEV: CVE-2021-35464

ForgeRock Access Management AM Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints /ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame to execute code in the context of the current user unless ForgeRock AM is running as root user, whi...

10CVSS8.5AI score0.99999EPSS
SaveIn wildExploits10References659
CNNVD
CNNVD
•added 2021/11/01 12:00 a.m.•18 views

Adobe Prelude 缓冲区错误漏洞

Adobe Prelude is a set of video clip editing tools from Adobe. Adobe Prelude has a memory corruption vulnerability that can be exploited by remote attackers to execute arbitrary code in the context of the current user...

9.3CVSS6.3AI score0.02061EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/01 12:00 a.m.•24 views

Adobe Prelude 缓冲区错误漏洞

Adobe Prelude is a set of video clip editing tools from Adobe. Adobe Prelude has a memory corruption vulnerability that could be exploited to execute arbitrary code in the context of the current user...

9.3CVSS6.2AI score0.02061EPSS
SaveExploits0References3
Slackware Linux
Slackware Linux
•added 2021/10/28 1:13 a.m.•50 views

[slackware-security] bind

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.11.36-i586-1slack14.2.txz: Upgraded. This update fixes bugs and the following security issue: The "lame-ttl" option...

5.3CVSS6.4AI score0.10576EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/10/28 12:00 a.m.•32 views

Fuji Electric Tellus Lite V-Simulator X1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/28 12:00 a.m.•32 views

Fuji Electric Tellus Lite V-Simulator X1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01041EPSS
SaveExploits0References1
Rows per page
Query Builder