Lucene search
+L

12807 matches found

Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.7 views

PT-2025-32940 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and 19.5.4 and earlier Description: InDesign Desktop versions 20.4, 19.5.4, and earlier are susceptible to a Use After Free issue, potentially leading to arbitrary code execution with current user privileges...

7.8CVSS8AI score0.00308EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.8 views

Microsoft Word 资源管理错误漏洞

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which is caused due to a post-release usage error when opening a specially crafted file. An attacker could exploit this vulnerability ...

7.8CVSS7.8AI score0.0052EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.6 views

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused due to a type confusion error when opening a specially crafted file. An attacker could exploit this vulnerability to execute...

7.8CVSS7.9AI score0.00565EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.7 views

PT-2025-32932 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.4 and 19.5.4 and earlier Description: InCopy versions 20.4, 19.5.4, and earlier are susceptible to an out-of-bounds write issue, potentially leading to arbitrary code execution with current user privileges. Successful...

7.8CVSS8.1AI score0.00251EPSS
SaveExploits0References5
CISA KEV Catalog
CISA KEV Catalog
added 2025/08/12 12:0 a.m.26 views

Microsoft Office Excel Remote Code Execution Vulnerability

Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a...

9.3CVSS8.1AI score0.42139EPSS
SaveIn wildExploits0
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.10 views

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused due to an error when opening a specially crafted file. An attacker could exploit this vulnerability to execute arbitrary code on t...

7.8CVSS7.9AI score0.00524EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.7 views

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel that is caused by a heap buffer overflow when opening a specially crafted file. An attacker can exploit this vulnerability to execute arbitrary cod...

7.8CVSS8.3AI score0.00531EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.8 views

PT-2025-32939 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.4 and 19.5.4 and earlier Description: InCopy versions 20.4, 19.5.4, and earlier are susceptible to a Use After Free issue, potentially leading to arbitrary code execution with the privileges of the current user. Successful...

7.8CVSS8AI score0.003EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.7 views

PT-2025-32933 · Adobe · Incopy 19.5.4 +1

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.4 and earlier InCopy version 19.5.4 and earlier Description: InCopy versions 20.4 and earlier, including version 19.5.4, are susceptible to an out-of-bounds write issue. Successful exploitation could lead to arbitrary code...

7.8CVSS7.2AI score0.00251EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2025/08/11 12:0 a.m.13 views

The vulnerability in the web interface for managing the Cisco Unified Intelligence Center reporting software and the Cisco Unified Contact Center Express operator automation software allows a malicious individual to execute arbitrary commands and increase their privileges.

The vulnerability in the web interface for creating reports using the Cisco Unified Intelligence Center and the Cisco Unified Contact Center Express software lies in the unlimited download of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and...

6.5CVSS5.8AI score0.00389EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/08 6:9 p.m.9 views

CVE-2012-10043 ActFax 4.32 Client Importer Buffer Overflow

A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy duri...

9.3CVSS7.5AI score0.0035EPSS
SaveExploits0References5
Snyk
Snyk
added 2025/07/31 7:37 p.m.5 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. An attacker can cause the application to crash or become unresponsive by supplying a deeply nested chain of imported files, leading to stack exhaustion during parsing. Note: This is only exploitable if the attacke...

7.5CVSS7AI score0.00818EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/07/31 7:20 p.m.5 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the LossyDctDecoderexecute function. An attacker can cause the application to crash or potentially leak sensitive information by providing a specially crafted DWAA-packed scan-line EXR file with a malicious chunk...

9.1CVSS6.7AI score0.00492EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/07/31 12:0 a.m.19 views

OpenEXR 安全漏洞

OpenEXR is an open standard for high dynamic range image HDR file formats. A heap buffer overflow vulnerability exists in OpenEXR versions 3.3.0 through 3.3.2 when decompressing ZIPS-compressed deep scanline EXR files, which originates from a write operation out of bounds when processing...

8.4CVSS8AI score0.0031EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2025/07/30 12:0 a.m.12 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code or cause system failures.

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created PR...

7.8CVSS8AI score0.00163EPSS
SaveExploits0References3Affected Software14
BDU FSTEC
BDU FSTEC
added 2025/07/30 12:0 a.m.9 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code or cause system failures.

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created PR...

7.8CVSS8AI score0.00163EPSS
SaveExploits0References3Affected Software14
BDU FSTEC
BDU FSTEC
added 2025/07/30 12:0 a.m.12 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code or cause system failures.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created 3DM fi...

7.8CVSS8AI score0.00163EPSS
SaveExploits0References3Affected Software14
BDU FSTEC
BDU FSTEC
added 2025/07/30 12:0 a.m.8 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code or cause system failures.

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created PR...

7.8CVSS8AI score0.00163EPSS
SaveExploits0References3Affected Software14
BDU FSTEC
BDU FSTEC
added 2025/07/30 12:0 a.m.9 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to memory usage after its release, allowing attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created PRT file...

7.8CVSS7.6AI score0.00163EPSS
SaveExploits0References3Affected Software14
RedHat Linux
RedHat Linux
added 2025/07/28 8:2 p.m.10 views

redis: Redis Stack Buffer Overflow

A flaw was found in Redis. Using memcpy with the strlen filepath when copying a user-supplied file path into a fixed-size stack buffer in redis-check-aof results in a stack-based buffer overflow. This flaw allows a local attacker to trigger the overflow by providing a specially crafted file path,...

9.8CVSS6.4AI score0.00824EPSS
SaveExploits0References8
Rows per page
Query Builder