Lucene search
+L

8083 matches found

Zero Day Initiative
Zero Day Initiative
•added 2019/10/15 12:00 a.m.•36 views

Adobe Acrobat Reader DC AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.8AI score0.02641EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/10/15 12:00 a.m.•26 views

Adobe Acrobat Pro DC DST File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processin...

7.8CVSS4.2AI score0.03637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/10/15 12:00 a.m.•31 views

Adobe Acrobat Reader DC XFA closeDoc Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of th...

7.8CVSS2.6AI score0.03637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/10/15 12:00 a.m.•45 views

Adobe Acrobat Pro DC XFA Form Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processin...

7.8CVSS2.7AI score0.03637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/10/15 12:00 a.m.•29 views

Adobe Acrobat Pro DC DWG File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.3AI score0.02817EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/10/15 12:00 a.m.•34 views

Adobe Acrobat Pro DC DWT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS4.6AI score0.03287EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/10/15 12:00 a.m.•30 views

Adobe Acrobat Pro DC PostScript CharString Directory NULL Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processin...

7.8CVSS3.5AI score0.03287EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2019/10/15 12:00 a.m.•38 views

Slackware 14.0 / 14.1 / 14.2 / current : sudo (SSA:2019-287-01)

New sudo packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-287-01. The text itself is copyright C Slackware Linux...

9CVSS7.3AI score0.63764EPSS
SaveExploits12References2
CNVD
CNVD
•added 2019/10/11 12:00 a.m.•50 views

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-36634)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from a memory corruption vulnerability in the Chakra scripting engine. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects...

7.6CVSS7.2AI score0.10103EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/11 12:00 a.m.•52 views

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-36635)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from a memory corruption vulnerability in the Chakra scripting engine. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects...

7.6CVSS7.2AI score0.10103EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/11 12:00 a.m.•54 views

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-36636)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from a memory corruption vulnerability in the Chakra scripting engine. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects...

7.6CVSS7.2AI score0.09901EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/10 12:00 a.m.•60 views

Microsoft Edge and ChakraCore Memory Corruption Vulnerability (CNVD-2019-34742)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS6.8AI score0.09901EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/10 12:00 a.m.•13 views

Microsoft Dynamics 365 Cross-Site Scripting Vulnerability (CNVD-2019-35573)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability in Microsoft Dynamics 365 on-premises version...

5.4CVSS6.3AI score0.0156EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/10/08 12:00 a.m.•35 views

Apple WebKit HashTable Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the HashTable class...

8.8CVSS1AI score0.01818EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/04 6:15 p.m.•35 views

CVE-2019-13316

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.07711EPSS
SaveExploits0References2
Prion
Prion
•added 2019/10/04 6:15 p.m.•29 views

Design/Logic Flaw

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.07711EPSS
SaveExploits0References2Affected Software2
Prion
Prion
•added 2019/10/04 6:15 p.m.•28 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.04089EPSS
SaveExploits0References2Affected Software2
Prion
Prion
•added 2019/10/04 6:15 p.m.•28 views

Design/Logic Flaw

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.07711EPSS
SaveExploits0References2Affected Software2
Prion
Prion
•added 2019/10/03 10:15 p.m.•25 views

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.0496EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2019/10/03 10:15 p.m.•28 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.03852EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder