Lucene search
+L

8005 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/08/06 12:00 a.m.6 views

(0Day) Microsoft Office Visio EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/08/06 12:00 a.m.12 views

(0Day) Microsoft 3D Viewer GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft 3D Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/08/05 12:00 a.m.14 views

PT-2024-38397 · Trimble · Trimble Sketchup

Name of the Vulnerable Software and Affected Versions: Trimble SketchUp affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this issue, where the target mus...

7.8CVSS7.2AI score0.00415EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/08/05 12:00 a.m.8 views

PT-2024-38398 · Trimble · Trimble Sketchup

Name of the Vulnerable Software and Affected Versions: Trimble SketchUp affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this issue, where the target mus...

7.8CVSS7.2AI score0.00469EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2024/08/05 12:00 a.m.15 views

Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6.1AI score0.00396EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/08/05 12:00 a.m.12 views

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SK...

7.8CVSS6.9AI score0.00469EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/08/05 12:00 a.m.10 views

Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.9AI score0.00415EPSS
SaveExploits0
Redos
Redos
added 2024/08/05 12:00 a.m.28 views

ROS-20240805-08

A vulnerability in the golang package of the Debian GNU/Linux operating system is related to a lack of protection for service data. data. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive information A vulnerability in the golang package of the...

7.5CVSS7.9AI score0.01815EPSS
SaveExploits1
CVE
CVE
added 2024/08/02 6:47 a.m.59 views

CVE-2024-39392

Adobe InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer Overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Affects InDesign on Windows/macOS per sources....

7.8CVSS7.8AI score0.00378EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/08/02 6:47 a.m.58 views

CVE-2024-39396

CVE-2024-39396 affects Adobe InDesign Desktop for ID18.5.2, ID19.3 and earlier, due to an out-of-bounds read in the PCX parsing path that can disclose memory. Exploitation requires user interaction (victim opens a malicious file). Mitigation details across connected sources indicate a patch path ...

5.5CVSS5.3AI score0.00233EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/08/02 6:47 a.m.29 views

CVE-2024-39396 Adobe Indesign 2024 PCX File Parsing Out Of Bound Read

InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

5.5CVSS0.00233EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/02 6:47 a.m.24 views

CVE-2024-39396 Adobe Indesign 2024 PCX File Parsing Out Of Bound Read

InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

5.5CVSS6.3AI score0.00233EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/08/01 12:00 a.m.16 views

PT-2024-17901 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability, as t...

7.8CVSS7.2AI score0.00229EPSS
SaveExploits0References8
Zero Day Initiative
Zero Day Initiative
added 2024/07/31 12:00 a.m.21 views

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.00441EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/07/29 12:00 a.m.9 views

Microsoft Excel FBX File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS6.4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/07/29 12:00 a.m.7 views

Microsoft Office Visio DXF File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS7.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/07/29 12:00 a.m.7 views

Microsoft Office PowerPoint GLB File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office PowerPoint. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/07/29 12:00 a.m.8 views

Microsoft Word DOC File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DOC...

7.8CVSS7.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/07/26 12:00 a.m.15 views

IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files...

7.8CVSS6.9AI score0.00577EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/07/26 12:00 a.m.11 views

IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RLE files...

7.8CVSS6.9AI score0.00577EPSS
SaveExploits0References1
Rows per page
Query Builder