Lucene search
+L

1755 matches found

Github Security Blog
Github Security Blog
added 2022/05/13 1:04 a.m.41 views

Improper Access Control in SLF4J

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta4 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J version 1.7.26 and later and in the 2.0.x series. Note tha...

9.8CVSS7.3AI score0.14703EPSS
SaveExploits0References92Affected Software1
OSV
OSV
added 2022/05/13 1:04 a.m.14 views

GHSA-W77P-8CFG-2X43 Improper Access Control in SLF4J

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta4 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J version 1.7.26 and later and in the 2.0.x series. Note tha...

9.8CVSS7AI score0.14703EPSS
SaveExploits0References91
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.44 views

Microsoft Visual Studio DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6AI score0.0275EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.30 views

Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of embedd...

7.8CVSS5.1AI score0.00402EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.27 views

Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.02088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.117 views

Microsoft Windows Active Directory Certificate Services Improper Authorization Privilege Escalation Vulnerability

This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of Microsoft Windows Active Directory Certificate Services. Authentication is required to exploit this vulnerability. The specific flaw exists within the issuance of certificates. By including...

9CVSS3.9AI score0.835EPSS
SaveExploits8References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.24 views

Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.02088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.39 views

Adobe FrameMaker PDF File Parsing Out-Of-Bounds Write Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PD...

7.8CVSS4.5AI score0.02088EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/05/10 12:00 a.m.5 views

PT-2022-2564 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the LDAP protocol in Microsoft Windows, specifically due to insufficient input validation. This can be exploited by a remote attacker to execut...

9CVSS9.5AI score0.02803EPSS
SaveExploits0References20
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.68 views

Adobe Character Animator SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Character Animator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS4.9AI score0.02789EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.35 views

(0Day) Autodesk 3DS Max TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk 3DS Max. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TI...

7.8CVSS5.3AI score0.01031EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.42 views

Apple macOS SCPT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AppleScrip...

3.3CVSS3AI score0.01319EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.33 views

Apple macOS SCPT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AppleScrip...

3.3CVSS3AI score0.01127EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.26 views

Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.7AI score0.02302EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.40 views

Adobe Photoshop U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D...

7.8CVSS4.7AI score0.02302EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.35 views

Adobe Photoshop Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.7AI score0.02669EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.47 views

Autodesk FBX Review ABC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk FBX Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.4AI score0.01161EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.30 views

Adobe Photoshop SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SVG...

7.8CVSS4.6AI score0.02302EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:00 a.m.47 views

Apple macOS SCPT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AppleScrip...

3.3CVSS3AI score0.01014EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:00 a.m.11 views

The vulnerability of the `exif_convert_any_to_int` function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the exifconvertanytoint function in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures through specially created EXIF data...

7.8CVSS7.4AI score0.07827EPSS
SaveExploits0References12Affected Software3
Rows per page
Query Builder