Lucene search
+L

8050 matches found

ATTACKERKB
ATTACKERKB
added 2021/10/07 6:22 p.m.6 views

CVE-2021-38430

FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code...

7.8CVSS7.8AI score0.01036EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.24 views

Autodesk Design Review TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.3AI score0.02208EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.21 views

Autodesk Design Review TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.7AI score0.02208EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.22 views

Autodesk Design Review TGA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.7AI score0.02208EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.22 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.01708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.29 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.02208EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.15 views

Autodesk Design Review PICT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.5AI score0.01708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.19 views

Autodesk Design Review PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.1AI score0.01708EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/05 1:15 p.m.7 views

CVE-2021-39893

A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed parsing files without authorisation...

7.5CVSS7.1AI score0.01129EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/10/05 12:18 p.m.23 views

CVE-2021-39893

A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed parsing files without authorisation...

5.3CVSS7.5AI score0.01129EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/10/05 12:00 a.m.3 views

PT-2021-22739 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 9.1 and later Description: A potential DOS issue was discovered that allows parsing files without authorization. Recommendations: For GitLab versions 9.1 and later, at the moment, there is no information about a newer version...

7.5CVSS7.2AI score0.01129EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2021/10/01 11:00 p.m.43 views

CVE-2021-38105

IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue...

5.5AI score0.01501EPSS
SaveExploits0References2
CVE
CVE
added 2021/10/01 6:07 p.m.67 views

CVE-2021-38104

Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability in IPPP72.FLT when parsing a crafted PPT file. An unauthenticated attacker could access arbitrary system memory in the context of the current user. Exploitation requires user interaction (victim must open a mal...

5.5CVSS5.3AI score0.01501EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/09/30 12:00 a.m.33 views

Siemens Solid Edge Viewer OBJ File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.9AI score0.01159EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/09/30 12:00 a.m.44 views

Siemens Solid Edge Viewer OBJ File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.9AI score0.01567EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/09/30 12:00 a.m.33 views

Siemens Solid Edge Viewer OBJ File Parsing Uninitialized Pointer Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS3.7AI score0.00966EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/09/29 3:41 p.m.35 views

CVE-2021-40710 Adobe Premiere Pro 2021 SVG File Parsing Leads to Memory Corruption

Adobe Premiere Pro version 15.4 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious .svg file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a special...

7.8CVSS8.1AI score0.02113EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/09/29 3:37 p.m.11 views

CVE-2021-39835 Adobe FrameMaker PDF File Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Framemaker versions 2019 Update 8 and earlier and 2020 Release Update 2 and earlier are affected by a use-after-free vulnerability in the processing of a malformed PDF file that could result in disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a...

4.3CVSS6.6AI score0.0154EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/09/29 3:37 p.m.36 views

CVE-2021-39829 Adobe FrameMaker PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Framemaker versions 2019 Update 8 and earlier and 2020 Release Update 2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mu...

7.8CVSS8AI score0.02222EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/09/29 3:37 p.m.12 views

CVE-2021-39832 Adobe FrameMaker PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

Adobe Framemaker versions 2019 Update 8 and earlier and 2020 Release Update 2 and earlier are affected by a memory corruption vulnerability due to insecure handling of a malicious PDF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is...

7.8CVSS7.8AI score0.01959EPSS
SaveExploits0References1
Rows per page
Query Builder