Lucene search
+L

7896 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:00 a.m.29 views

Adobe Acrobat Reader DC XFA template Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS2.9AI score0.03637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:00 a.m.29 views

Adobe Acrobat Reader DC XFA instanceManager Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.3AI score0.03637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:00 a.m.22 views

Adobe Acrobat Pro DC XFA validate Event Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.8CVSS2.4AI score0.03637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:00 a.m.33 views

Adobe Acrobat Reader DC AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.8AI score0.02641EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:00 a.m.25 views

Adobe Acrobat Pro DC DST File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processin...

7.8CVSS4.2AI score0.03637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:00 a.m.28 views

Adobe Acrobat Pro DC DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS4.9AI score0.03287EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:00 a.m.31 views

Adobe Acrobat Pro DC DWT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS4.6AI score0.03287EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:00 a.m.28 views

Adobe Acrobat Reader DC XFA closeDoc Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of th...

7.8CVSS2.6AI score0.03637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:00 a.m.26 views

Adobe Acrobat Pro DC PostScript CharString Directory NULL Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processin...

7.8CVSS3.5AI score0.03287EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:00 a.m.40 views

Adobe Acrobat Pro DC XFA Form Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processin...

7.8CVSS2.7AI score0.03637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:00 a.m.28 views

Adobe Acrobat Pro DC DWG File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.3AI score0.02817EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/10/15 12:00 a.m.36 views

Slackware 14.0 / 14.1 / 14.2 / current : sudo (SSA:2019-287-01)

New sudo packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-287-01. The text itself is copyright C Slackware Linux...

9CVSS7.3AI score0.63764EPSS
SaveExploits11References2
CNVD
CNVD
added 2019/10/11 12:00 a.m.45 views

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-36634)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from a memory corruption vulnerability in the Chakra scripting engine. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects...

7.6CVSS7.2AI score0.10377EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/11 12:00 a.m.46 views

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-36635)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from a memory corruption vulnerability in the Chakra scripting engine. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects...

7.6CVSS7.2AI score0.10377EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/11 12:00 a.m.45 views

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-36636)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from a memory corruption vulnerability in the Chakra scripting engine. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects...

7.6CVSS7.2AI score0.1017EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/10 12:00 a.m.55 views

Microsoft Edge and ChakraCore Memory Corruption Vulnerability (CNVD-2019-34742)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS6.8AI score0.1017EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/10 12:00 a.m.6 views

Microsoft Dynamics 365 Cross-Site Scripting Vulnerability (CNVD-2019-35573)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability in Microsoft Dynamics 365 on-premises version...

5.4CVSS6.3AI score0.0156EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/08 12:00 a.m.30 views

Apple WebKit HashTable Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the HashTable class...

8.8CVSS1AI score0.01818EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/04 6:15 p.m.31 views

CVE-2019-13316

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.07711EPSS
SaveExploits0References2
Prion
Prion
added 2019/10/04 6:15 p.m.26 views

Design/Logic Flaw

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.07711EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder