Lucene search
+L

1735 matches found

BDU FSTEC
BDU FSTEC
added 2022/05/17 12:00 a.m.20 views

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by transmitting specially crafted data...

9CVSS8.1AI score0.02336EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:00 a.m.12 views

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by transmitting specially crafted data...

9CVSS8.1AI score0.02736EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/05/13 1:04 a.m.37 views

Improper Access Control in SLF4J

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta4 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J version 1.7.26 and later and in the 2.0.x series. Note tha...

9.8CVSS7.3AI score0.14796EPSS
SaveExploits0References92Affected Software1
OSV
OSV
added 2022/05/13 1:04 a.m.9 views

GHSA-W77P-8CFG-2X43 Improper Access Control in SLF4J

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta4 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J version 1.7.26 and later and in the 2.0.x series. Note tha...

9.8CVSS7AI score0.14796EPSS
SaveExploits0References91
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.43 views

Microsoft Visual Studio DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6AI score0.0275EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.22 views

Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.02088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.26 views

Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.02088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.28 views

Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of embedd...

7.8CVSS5.1AI score0.00402EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.115 views

Microsoft Windows Active Directory Certificate Services Improper Authorization Privilege Escalation Vulnerability

This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of Microsoft Windows Active Directory Certificate Services. Authentication is required to exploit this vulnerability. The specific flaw exists within the issuance of certificates. By including...

9CVSS3.9AI score0.82989EPSS
SaveExploits8References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.38 views

Adobe FrameMaker PDF File Parsing Out-Of-Bounds Write Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PD...

7.8CVSS4.5AI score0.02088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.33 views

(0Day) Autodesk 3DS Max TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk 3DS Max. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TI...

7.8CVSS5.3AI score0.00997EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/05/10 12:00 a.m.4 views

PT-2022-2564 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the LDAP protocol in Microsoft Windows, specifically due to insufficient input validation. This can be exploited by a remote attacker to execut...

9CVSS9.5AI score0.02736EPSS
SaveExploits0References20
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.67 views

Adobe Character Animator SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Character Animator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS4.9AI score0.02789EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.40 views

Apple macOS SCPT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AppleScrip...

3.3CVSS3AI score0.01319EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.25 views

Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.7AI score0.02302EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.32 views

Apple macOS SCPT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AppleScrip...

3.3CVSS3AI score0.01127EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.34 views

Adobe Photoshop Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.7AI score0.02669EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.38 views

Adobe Photoshop U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D...

7.8CVSS4.7AI score0.02302EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.45 views

Autodesk FBX Review ABC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk FBX Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.4AI score0.01087EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.45 views

Apple macOS SCPT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AppleScrip...

3.3CVSS3AI score0.01014EPSS
SaveExploits0References1
Rows per page
Query Builder