Lucene search
+L

1331 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/02/09 12:00 a.m.28 views

Open Design Alliance (ODA) Drawing SDK DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawing SDK. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS5.6AI score0.0205EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/09 12:00 a.m.36 views

Open Design Alliance (ODA) Drawing SDK DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawing SDK. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS5.6AI score0.02705EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/09 12:00 a.m.32 views

Open Design Alliance (ODA) Drawing SDK DWG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawing SDK. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS7.7AI score0.00315EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/09 12:00 a.m.30 views

Open Design Alliance (ODA) Drawing SDK DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawing SDK. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

3.3CVSS3.7AI score0.01443EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/09 12:00 a.m.29 views

Open Design Alliance (ODA) Drawing SDK DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawing SDK. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

3.3CVSS3.7AI score0.01339EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/09 12:00 a.m.27 views

Open Design Alliance (ODA) Drawing SDK DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawing SDK. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

3.3CVSS3.7AI score0.0205EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:00 a.m.35 views

Microsoft Office Visio DWG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS7.8AI score0.00723EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/10 12:00 a.m.8 views

PT-2023-1067 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Office Visio, which can be exploited by remote attackers to execute arbitrary code. This affects not just...

7.8CVSS9.6AI score0.00723EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2023/01/04 12:00 a.m.101 views

Autodesk DWG TrueView 2023 < 2023.1.1 RCE

The remote host has an install of Autodesk DWG TrueView version 2023 prior to 2023.1.1. It is, therefore, affected by a remote code execution vulnerability due to DLL search order hijacking. Note that Nessus has not tested for this issue but has instead relied only on the application's...

7.8CVSS8.2AI score0.00255EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/23 12:00 a.m.10 views

The vulnerability of Microsoft Visio graphical editors, Microsoft Office programs, and 365 Apps for Enterprise, related to memory usage after it is freed, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created DWG file...

7.8CVSS7AI score0.00822EPSS
SaveExploits0References4
OSV
OSV
added 2022/12/19 4:15 p.m.9 views

CVE-2022-42945

DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system...

7.8CVSS6.3AI score0.00255EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/19 4:15 p.m.27 views

CVE-2022-42945

DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system...

7.8CVSS0.00255EPSS
SaveExploits0References1
Prion
Prion
added 2022/12/19 4:15 p.m.22 views

Design/Logic Flaw

DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system...

4.4CVSS7.9AI score0.00255EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/19 12:00 a.m.7 views

CVE-2022-42945

DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system...

7.7AI score0.00255EPSS
SaveExploits0References1
CVE
CVE
added 2022/12/19 12:00 a.m.82 views

CVE-2022-42945

DWG TrueView 2023 contains a DLL search order hijacking vulnerability leading to remote code execution (CVE-2022-42945). Root cause: DLL search order manipulation. Affected product: Autodesk DWG TrueView 2023. Evidence from multiple sources confirms the issue; exploitation is described as remote ...

7.8CVSS7.9AI score0.00255EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/12/19 12:00 a.m.7 views

PT-2022-26672 · Autodesk · Dwg Trueview

Name of the Vulnerable Software and Affected Versions: DWG TrueViewTM version 2023 Description: The issue is related to a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system. Recommendations: For DWG...

7.8CVSS7.7AI score0.00255EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/12/19 12:00 a.m.36 views

CVE-2022-42945

DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system...

8.2AI score0.00255EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/15 12:00 a.m.47 views

Microsoft Office Visio DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.2AI score0.00822EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/15 12:00 a.m.34 views

Microsoft Office Visio DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.2AI score0.00726EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/15 12:00 a.m.35 views

Microsoft Office Visio DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.5AI score0.00726EPSS
SaveExploits0References1
Rows per page
Query Builder