Lucene search
+L

12807 matches found

BDU FSTEC
BDU FSTEC
added 2025/06/23 12:0 a.m.12 views

The vulnerabilities of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, and Acrobat Reader 2020 are related to the use of memory after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, and Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code in the context of the...

7.8CVSS7.6AI score0.00351EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/06/21 12:9 a.m.9 views

CVE-2025-6218 RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...

7.8CVSS8AI score0.89416EPSS
SaveExploits8References2
BDU FSTEC
BDU FSTEC
added 2025/06/13 12:0 a.m.9 views

The vulnerability of CNCSoft’s numerical control software lies in its ability to write beyond buffer boundaries, allowing attackers to execute arbitrary code.

The vulnerability of CNCSoft’s numerical control software lies in its ability to execute code outside the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

6.8CVSS7.8AI score0.00214EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/13 12:0 a.m.9 views

The vulnerability of CNCSoft’s numerical control software lies in its ability to write beyond buffer boundaries, allowing attackers to execute arbitrary code.

The vulnerability of CNCSoft’s numerical control software lies in its ability to execute code outside the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

6.8CVSS7.8AI score0.00214EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/13 12:0 a.m.9 views

The vulnerability of CNCSoft’s numerical control software lies in its ability to write beyond buffer boundaries, allowing attackers to execute arbitrary code.

The vulnerability of CNCSoft’s numerical control software lies in its ability to execute code outside the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

6.8CVSS7.8AI score0.00214EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/09 12:0 a.m.11 views

The vulnerability of the xmlSchemaIDCFillNodeTables() function in the xmlschemas.c file of the libxml2 library allows a attacker to trigger a service failure.

The vulnerability of the xmlSchemaIDCFillNodeTables function in the xmlschemas.c file of the libxml2 library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created XML file...

2.9CVSS6.7AI score0.00601EPSS
SaveExploits1References16Affected Software9
RedhatCVE
RedhatCVE
added 2025/06/05 12:3 a.m.7 views

CVE-2025-45855

An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file...

5.4CVSS7.8AI score0.00292EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/06/05 12:0 a.m.15 views

The vulnerability of Autodesk Revit software for building information modeling allows a perpetrator to cause service failures, gain unauthorized access to protected information, and execute arbitrary code within the context of the current process.

The vulnerability of Autodesk Revit software for building information modeling involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause service failures, gain unauthorized access to protected information, and execute arbitrary code within the...

7.8CVSS7.6AI score0.00168EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/06/04 5:15 p.m.7 views

CVE-2025-20275

A vulnerability in the file opening process of Cisco Unified Contact Center Express Unified CCX Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device. This vulnerability is due to insecure deserialization of Java objects by the affected software. An attack...

7.8CVSS6.2AI score0.00161EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/06/04 5:15 p.m.13 views

CVE-2025-20275

A vulnerability in the file opening process of Cisco Unified Contact Center Express Unified CCX Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device. This vulnerability is due to insecure deserialization of Java objects by the affected software. An attack...

7.8CVSS0.00161EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/04 5:15 p.m.3 views

CVE-2025-20275

A vulnerability in the file opening process of Cisco Unified Contact Center Express Unified CCX Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device. This vulnerability is due to insecure deserialization of Java objects by the affected software. An attack...

7.8CVSS6.1AI score
SaveExploits0References1
Cisco
Cisco
added 2025/06/04 4:0 p.m.23 views

Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability

A vulnerability in the file opening process of Cisco Unified Contact Center Express Unified CCX Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device. This vulnerability is due to insecure deserialization of Java objects by the affected software. An attack...

5.3CVSS7.7AI score0.00161EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/04 10:30 a.m.166 views

CVE-2025-5601

Wireshark (versions 4.4.0–4.4.6 and 4.2.0–4.2.12) is affected by CVE-2025-5601 due to a vulnerability in the column handling/processing code that can trigger a denial of service when processing crafted packets or captures. The underlying issue is described as a buffer handling flaw (buffer overfl...

7.8CVSS7.7AI score0.00297EPSS
SaveExploits1References2Affected Software1
Github Security Blog
Github Security Blog
added 2025/06/03 3:31 p.m.11 views

Erupt Unrestricted Upload of File with Dangerous Type vulnerability

An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file...

5.4CVSS7.6AI score0.00292EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/06/03 12:0 a.m.7 views

CVE-2025-45855

An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file...

5.4CVSS8AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/06/03 12:0 a.m.5 views

CVE-2025-45855

An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file...

6AI score0.00292EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/06/03 12:0 a.m.18 views

CVE-2025-45855

An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file...

0.00292EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/06/03 12:0 a.m.24 views

CVE-2025-45854

/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams...

10CVSS0.02794EPSS
SaveExploits1References3
OSV
OSV
added 2025/06/02 3:15 p.m.1 views

DEBIAN-CVE-2024-52035

An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

7.8CVSS7.8AI score0.00261EPSS
SaveExploits1References1
OSV
OSV
added 2025/06/02 3:15 p.m.14 views

UBUNTU-CVE-2024-52035

An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

8.4CVSS5.9AI score0.00261EPSS
SaveExploits1References4
Rows per page
Query Builder