Lucene search
K

3011 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/04/29 12:0 a.m.25 views

Foxit Reader AcroForm resetForm Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the resetFo...

3.3CVSS1.2AI score0.02652EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/29 12:0 a.m.23 views

Foxit Reader ConvertToPDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ConvertToPDFx86.dll...

7.8CVSS4.3AI score0.03455EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/17 12:0 a.m.40 views

(Pwn2Own) Xiaomi Mi6 V8 CollectValuesOrEntriesImpl Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Mi6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS3.4AI score0.06892EPSS
Exploits2
Zero Day Initiative
Zero Day Initiative
added 2019/04/17 12:0 a.m.18 views

Foxit Studio Photo EZI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.8CVSS3.7AI score0.03451EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/17 12:0 a.m.27 views

Foxit Studio Photo JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.8CVSS3.6AI score0.03451EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/17 12:0 a.m.20 views

Foxit Studio Photo EZI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.8CVSS3.7AI score0.03422EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/15 12:0 a.m.62 views

(Pwn2Own) Mozilla Firefox IonMonkey Optimizer Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within IonMonkey. The...

8.8CVSS2.6AI score0.07387EPSS
Exploits4References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/15 12:0 a.m.29 views

Microsoft Chakra Object Reoptimization Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

8.8CVSS2AI score0.11532EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/04 12:0 a.m.24 views

Microsoft Windows VBScript Array Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft VBScript. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.5CVSS3.4AI score0.3126EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2019/03/26 12:0 a.m.32 views

Apple Safari GraphicsContext Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the GraphicsContext...

7.5CVSS2.2AI score0.01659EPSS
Exploits0References1
NVD
NVD
added 2019/03/21 4:1 p.m.19 views

CVE-2019-6730

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the popUpMenu metho...

8.8CVSS8.8AI score0.0415EPSS
Exploits0References2
Prion
Prion
added 2019/03/21 4:1 p.m.18 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the popUpMenu metho...

6.8CVSS8.8AI score0.0415EPSS
Exploits0References2Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2019/03/12 12:0 a.m.42 views

Microsoft Windows Deployment Services TFTP Server Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. Authentication is not required to exploit this vulnerability. The specific flaw exists within WDSTFTP during TFTP read requests. The issue results from the lack of validating the...

9.8CVSS2.5AI score0.34209EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/03/12 12:0 a.m.23 views

Microsoft Internet Explorer CustomEvent Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5CVSS2.9AI score0.08261EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/03/12 12:0 a.m.30 views

Adobe Photoshop GIF Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in parsing of GIF files...

7CVSS4.9AI score0.06433EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/02/20 12:0 a.m.23 views

Horner Automation Cscape CSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Horner Automation Cscape. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.1AI score0.01716EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/02/14 12:0 a.m.33 views

Microsoft Windows JET Database Engine Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

7CVSS3.8AI score0.1613EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/02/14 12:0 a.m.26 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

7CVSS3.8AI score0.13596EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/02/12 12:0 a.m.35 views

Microsoft Chakra JavaScript Loop Type Confusion Vulnerability

This vulnerability allows remote attackers to produce abnormal program execution on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5CVSS1.7AI score0.19784EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/02/12 12:0 a.m.27 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

7CVSS3.8AI score0.19059EPSS
Exploits0References1
Rows per page
Query Builder