Lucene search
K

3011 matches found

Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.38 views

Foxit Reader getPageBox Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS1.6AI score0.03855EPSS
Exploits0References1
0day.today
0day.today
added 2018/10/11 12:0 a.m.59 views

Microsoft SQL Server Management Studio 17.9 - .xel XML External Entity Injection Vulnerability

Exploit for windows platform in category web applications Exploit Title: Microsoft SQL Server Management Studio 17.9 - '.xel' XML External Entity Injection Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Venodor: www.microsoft.com Software: SQL Server Management Studio 17.9 and...

5.8AI score0.23373EPSS
Exploits5
Zero Day Initiative
Zero Day Initiative
added 2018/10/10 12:0 a.m.32 views

Microsoft Internet Explorer CSS Style Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS2.4AI score0.19165EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/10 12:0 a.m.29 views

Microsoft Windows VBScript Class_Terminate MSXML6 Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows VBScript. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS2.4AI score0.48901EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/10 12:0 a.m.30 views

Microsoft SQL Server Management Studio xmla File XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft SQL Server Management Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

2.6CVSS1.1AI score0.23373EPSS
Exploits5References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/10 12:0 a.m.28 views

Delta Industrial Automation ISPSoft DVP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation ISPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

6.8CVSS5.3AI score0.01627EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/10 12:0 a.m.27 views

Microsoft SQL Server Management Studio xel File XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft SQL Server Management Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

2.6CVSS1.4AI score0.23373EPSS
Exploits5References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/10 12:0 a.m.16 views

Cisco WebEx Network Recording Player ARF File Out-of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

2.6CVSS4AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2018/10/10 12:0 a.m.36 views

Microsoft Internet Explorer CSS Style Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS2.6AI score0.19165EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/03 12:0 a.m.28 views

Adobe Acrobat Pro DC EMF BMP Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

6.8CVSS5.5AI score0.10053EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/03 12:0 a.m.17 views

Adobe Acrobat Pro DC XFA Template Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

6.8CVSS2.1AI score0.04764EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/03 12:0 a.m.30 views

Adobe Acrobat Pro DC ImageConversion JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

4.3CVSS2.5AI score0.062EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/03 12:0 a.m.25 views

Adobe Acrobat Pro DC ImageConversion EMF EMR_COMMENT Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

4.3CVSS2.7AI score0.05463EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.32 views

Foxit Reader setInterval Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS2.1AI score0.03918EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.24 views

Foxit Reader TextBox Calculate Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS1.9AI score0.03814EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.28 views

Foxit Reader ListBox Selection Change Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

5.1CVSS1.7AI score0.03279EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.26 views

Foxit Reader TextBox Validate Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

5.1CVSS1.7AI score0.03814EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.26 views

Foxit Reader TextBox Format Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

5.1CVSS2AI score0.0358EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.27 views

Foxit Reader CheckBox onBlur Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

5.1CVSS1.6AI score0.03814EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.26 views

Foxit Reader Barcode Calculate Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

2.6CVSS0.7AI score0.03EPSS
Exploits0References1
Rows per page
Query Builder