Lucene search
+L

5905 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/04/23 12:0 a.m.49 views

Autodesk FBX Review FBX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk FBX Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.9AI score0.01778EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/23 12:0 a.m.61 views

Autodesk FBX Review FBX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk FBX Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.9AI score0.01778EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/22 9:15 p.m.7 views

CVE-2021-25678

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds...

7.8CVSS5.9AI score0.0144EPSS
SaveExploits0References2
Prion
Prion
added 2021/04/22 9:15 p.m.21 views

Code injection

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could lead to pointer dereferences...

6.8CVSS7.5AI score0.01044EPSS
SaveExploits0References2Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2021/04/22 12:0 a.m.37 views

Delta Industrial Automation CNCSoft-B DOPSoft DPA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

7.8CVSS5AI score0.02025EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.8 views

The vulnerability of Google Chrome and Microsoft Edge web browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Google Chrome and Microsoft Edge browser QR scanners is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page...

6.4CVSS7AI score0.01398EPSS
SaveExploits0References7Affected Software4
Nvidia
Nvidia
added 2021/04/19 12:0 a.m.52 views

Security Bulletin: NVIDIA GPU Display Driver - April 2021

NVIDIA has released a software security update for NVIDIA GPU Display Driver. This update addresses issues that may lead to code execution, denial of service, escalation of privileges, and information disclosure. To protect your system, download and install this software update through the NVIDIA...

7.8CVSS8.2AI score0.00498EPSS
SaveExploits0Affected Software5
Tenable Nessus
Tenable Nessus
added 2021/04/19 12:0 a.m.168 views

Fedora 32 : kernel / kernel-headers / kernel-tools (2021-6b0f287b8b)

The remote Fedora 32 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-6b0f287b8b advisory. - An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver...

5.5CVSS6.6AI score0.00413EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2021/04/16 12:0 a.m.26 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2021:0392-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS8AI score0.23847EPSS
SaveExploits32References4
Microsoft CVE
Microsoft CVE
added 2021/04/15 6:40 p.m.62 views

Chromium: CVE-2021-21208 Insufficient data validation in QR scanner

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.5AI score0.01398EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/04/15 12:0 a.m.37 views

Adobe Bridge TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4.3AI score0.03868EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/15 12:0 a.m.67 views

Adobe Bridge HEIC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS1.7AI score0.02414EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/14 4:15 p.m.18 views

Integer overflow

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

4.4CVSS7.9AI score0.00447EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2021/04/13 12:0 a.m.13 views

Siemens Solid Edge PAR File Stack Buffer Overflow Vulnerability

Siemens Solid Edge is a 3D CAD software. The software can be used in the industries of part design, assembly design, sheet metal design, welding design, and so on. A stack buffer overflow vulnerability exists in the Siemens Solid Edge PAR file heap. The vulnerability is due to a lack of proper...

7.8CVSS7.4AI score0.02303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/13 12:0 a.m.19 views

(0Day) Microsoft Print 3D PLY File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS5.3AI score
SaveExploits0
CNVD
CNVD
added 2021/04/13 12:0 a.m.12 views

Siemens Solid Edge PAR File Out-of-Bounds Write Vulnerability

Siemens Solid Edge is a 3D CAD software. The software can be used in the industries of part design, assembly design, sheet metal design, welding design, and so on. An out-of-bounds write vulnerability exists in Siemens Solid Edge PAR files. The vulnerability is due to a lack of proper validation ...

7.8CVSS7.1AI score0.0144EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/13 12:0 a.m.13 views

(0Day) Microsoft 3D Builder PLY File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS5.5AI score
SaveExploits0
CNVD
CNVD
added 2021/04/08 12:0 a.m.7 views

Cisco Unified Communications Manager Authorization Bypass Vulnerability

Cisco Unified Communications Manager is the powerful call processing component of the Cisco Unified Communications solution. It is a scalable, distributable, and highly available enterprise Voice over IP call processing solution.Cisco Unified Communications Manager Session Management Edition is t...

4.3CVSS6.4AI score0.00615EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/08 12:0 a.m.17 views

CloudBees Jenkins Data Validation Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...

4.3CVSS6.5AI score0.02725EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/04/08 12:0 a.m.32 views

Debian: Security Advisory (DSA-4886-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8AI score0.23847EPSS
SaveExploits27References6
Rows per page
Query Builder