Lucene search
+L

7909 matches found

Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:00 a.m.29 views

Foxit Reader CPDF_Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS1.5AI score0.04775EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:00 a.m.29 views

Foxit Reader TextBox Format Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS1.9AI score0.03185EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:00 a.m.24 views

Foxit Reader XFA Button boundItem Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA boundItem...

6.8CVSS2.6AI score0.03185EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:00 a.m.30 views

Foxit Reader XFA Button resolveNode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA resolveNode...

6.8CVSS2.3AI score0.02737EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/19 12:00 a.m.33 views

Microsoft Edge CSS Custom Property Type Confusion Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

2.6CVSS0.4AI score0.04691EPSS
SaveExploits0References1
OSV
OSV
added 2018/04/16 5:29 p.m.5 views

DEBIAN-CVE-2017-10140

Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DBCONFIG in the current directory...

7.8CVSS7AI score0.00558EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/16 12:00 a.m.32 views

Microsoft Chakra Typed Array JIT Optimization Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the generation ...

6.8CVSS2.5AI score0.08643EPSS
SaveExploits0References1
OSV
OSV
added 2018/04/12 4:29 p.m.6 views

UBUNTU-CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

5.4CVSS6AI score0.01115EPSS
SaveExploits1References3
OSV
OSV
added 2018/04/12 4:29 p.m.7 views

DEBIAN-CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

5.4CVSS6.3AI score0.01115EPSS
SaveExploits1References1
The Hacker News
The Hacker News
added 2018/04/12 3:36 p.m.76 views

Hacker Can Steal Data from Air-Gapped Computers through Power Lines

Do you think it is possible to extract data from a computer using its power cables? If no, then you should definitely read about this technique. Researchers from Israel's Ben Gurion University of the Negev—who majorly focus on finding clever ways to exfiltrate data from an isolated or air-gapped...

0.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2018/04/12 12:00 a.m.11 views

The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS7.9AI score0.08643EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2018/04/11 12:00 a.m.30 views

OMRON CX-One Network Configurator Uz01Eip21 Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of N...

6.8CVSS3.4AI score0.0032EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/04/11 12:00 a.m.13 views

Microsoft Excel and Office Remote Code Execution Vulnerability

Microsoft Excel is one of the components of Microsoft's office software Microsoft office, a spreadsheet software written and run by Microsoft for computers with Windows and Apple Macintosh operating systems. A remote code execution vulnerability exists in Microsoft Excel and Office. The...

9.3CVSS7.9AI score0.19167EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/04/11 12:00 a.m.9 views

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2018-08027)

Internet Explorer is a web browser from Microsoft. A memory corruption vulnerability exists in Microsoft Internet Explorer. The vulnerability arises because the software fails to properly access objects in memory. An attacker can exploit the vulnerability to run arbitrary code in the context of t...

7.6CVSS7.3AI score0.15711EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/11 12:00 a.m.33 views

Microsoft Windows JScript defineProperty Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows JScript. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

4.3CVSS1.9AI score0.06209EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/11 12:00 a.m.22 views

OMRON CX-One CX-FLnet FLN File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of F...

6.8CVSS5.4AI score0.0032EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/11 12:00 a.m.32 views

Microsoft Windows SAFEARRAY Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

6.8CVSS3AI score0.19069EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/04/11 12:00 a.m.36 views

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-08937)

Microsoft Excel is one of the components of Microsoft's office software Microsoft office, a spreadsheet software written and run by Microsoft for computers with Windows and Apple Macintosh operating systems. A remote code execution vulnerability exists in Microsoft Excel. The vulnerability arises...

9.3CVSS7.9AI score0.20878EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/11 12:00 a.m.29 views

OMRON CX-One CX-Motion wcscpy Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of M...

6.8CVSS3.2AI score0.0032EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/11 12:00 a.m.33 views

Microsoft Windows VBScript Join Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS3.1AI score0.06544EPSS
SaveExploits0References1
Rows per page
Query Builder