Lucene search
K

3011 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/11/15 12:0 a.m.10 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.2AI score0.01415EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/15 12:0 a.m.36 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.2AI score0.01398EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/14 12:0 a.m.15 views

Apple macOS Hydra Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the Hydra library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the Hydr...

3.3CVSS6.9AI score0.00047EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/14 12:0 a.m.20 views

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files...

7.8CVSS6.7AI score0.51792EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/14 12:0 a.m.20 views

Siemens Tecnomatix Plant Simulation WRL File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.6AI score0.00099EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/14 12:0 a.m.20 views

Apple macOS Hydra ABC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the Hydra framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS6.9AI score0.00047EPSS
Exploits0References1
Prion
Prion
added 2023/10/26 8:15 p.m.19 views

Design/Logic Flaw

In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsing VC6 files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process...

4.4CVSS7.8AI score0.001EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/19 5:27 p.m.12 views

CVE-2023-5059 Santesoft Sante FFT Imaging Out-of-bounds Read

Santesoft Sante FFT Imaging lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS8AI score0.0035EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/19 12:0 a.m.42 views

Siemens Tecnomatix Plant Simulation IGS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.0015EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/19 12:0 a.m.19 views

Siemens Tecnomatix Plant Simulation STP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00112EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/19 12:0 a.m.32 views

Siemens Tecnomatix Plant Simulation IGS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00086EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/19 12:0 a.m.27 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00086EPSS
Exploits0References1
CNVD
CNVD
added 2023/10/11 12:0 a.m.10 views

Siemens Tecnomatix Plant Simulation Out-of-Bounds Read Vulnerability (CNVD-2023-75583)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. Siemens Tecnomatix Plant Simulation suffers from an...

7.8CVSS7.1AI score0.00166EPSS
Exploits0References1
CNVD
CNVD
added 2023/10/11 12:0 a.m.27 views

Siemens Tecnomatix Plant Simulation File Analysis Vulnerability

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. A file analysis vulnerability exists in Siemens...

7.8CVSS7.1AI score0.00166EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/11 12:0 a.m.14 views

Siemens Tecnomatix Plant Simulation PRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00112EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/11 12:0 a.m.17 views

Siemens Tecnomatix Plant Simulation PAR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00086EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/11 12:0 a.m.16 views

(Pwn2Own) Microsoft Teams Cross-Site Scripting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Teams. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

5CVSS7.1AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:0 a.m.17 views

(0Day) MuseScore CAP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MuseScore. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CAP files...

7.8CVSS6.8AI score0.02809EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:0 a.m.17 views

Ansys SpaceClaim X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XB...

7.8CVSS6.8AI score0.00429EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2023/09/29 12:0 a.m.17 views

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.01455EPSS
Exploits0References1
Rows per page
Query Builder