Lucene search
+L

4325 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:00 a.m.22 views

Microsoft 3D Builder GLB File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS7.5AI score0.00939EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:00 a.m.34 views

Microsoft 3D Builder WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS7.6AI score0.00929EPSS
SaveExploits0References1
NVD
NVD
added 2023/01/16 4:15 p.m.18 views

CVE-2022-4453

The 3D FlipBook WordPress plugin through 1.13.2 does not validate or escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks against high privilege users like...

6.1CVSS5.3AI score0.00534EPSS
SaveExploits2References1
Prion
Prion
added 2023/01/16 4:15 p.m.21 views

Cross site scripting

The 3D FlipBook WordPress plugin through 1.13.2 does not validate or escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks against high privilege users like...

4.9CVSS5.3AI score0.00534EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2023/01/16 3:37 p.m.32 views

CVE-2022-4453 3D FlipBook <= 1.13.2 - Contributor+ Stored XSS

The 3D FlipBook WordPress plugin through 1.13.2 does not validate or escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks against high privilege users like...

5.5AI score0.00534EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2023/01/16 3:37 p.m.14 views

CVE-2022-4453 3D FlipBook <= 1.13.2 - Contributor+ Stored XSS

The 3D FlipBook WordPress plugin through 1.13.2 does not validate or escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks against high privilege users like...

5.9AI score0.00534EPSS
SaveExploits2References1
CVE
CVE
added 2023/01/16 3:37 p.m.74 views

CVE-2022-4453

The CVE-2022-4453 issue affects the WordPress plugin 3D FlipBook up to version 1.13.2 (and earlier). The vulnerability arises from not validating/escaping certain shortcode attributes before output, enabling Stored XSS where a user with as little as Contributor privileges can target high-privileg...

6.1CVSS5.3AI score0.00534EPSS
SaveExploits2References1Affected Software1
CNVD
CNVD
added 2023/01/13 12:00 a.m.52 views

Siemens Solid Edge File Parsing Vulnerability

Solid Edge is a portfolio of software tools that handles various product development processes: 3D design, simulation, manufacturing, and design management.A file parsing vulnerability exists in Siemens Solid Edge, which can be exploited by attackers to execute code in the context of the current...

7.8CVSS3.5AI score0.00279EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:00 a.m.83 views

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04324)

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

7.8CVSS2.6AI score0.00929EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:00 a.m.57 views

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04328)

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

7.8CVSS2.6AI score0.00939EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:00 a.m.44 views

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04325)

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

7.8CVSS2.6AI score0.01099EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:00 a.m.59 views

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04326)

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

7.8CVSS2.6AI score0.00929EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:00 a.m.81 views

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04329)

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

7.8CVSS2.6AI score0.00939EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:00 a.m.69 views

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04322)

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

7.8CVSS2.6AI score0.00929EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:00 a.m.51 views

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04320)

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

7.8CVSS2.6AI score0.00929EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:00 a.m.64 views

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04319)

Microsoft 3D Builder is a tool for creating models and 3D printing from Microsoft USA. a security vulnerability exists in Microsoft 3D Builder. No details of the vulnerability are currently available...

7.8CVSS2.7AI score0.00939EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:00 a.m.54 views

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04323)

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

7.8CVSS2.6AI score0.00929EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:00 a.m.50 views

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04321)

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

7.8CVSS2.6AI score0.00929EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:00 a.m.61 views

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04531)

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

7.8CVSS2.6AI score0.00929EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:00 a.m.81 views

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-04327)

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

7.8CVSS2.6AI score0.00929EPSS
SaveExploits0References1
Rows per page
Query Builder