Lucene search
+L

8050 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/09/15 12:00 a.m.39 views

Siemens Simcenter Femap MODFEM File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS3.2AI score0.00795EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/09/15 12:00 a.m.55 views

Autodesk FBX Review ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk FBX Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.2AI score0.5964EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/14 11:15 a.m.12 views

CVE-2021-37203

A vulnerability has been identified in NX 1980 Series All versions V1984, Solid Edge SE2021 All versions SE2021MP8. The plmxmlAdapterIFC.dll contains an out-of-bounds read while parsing user supplied IFC files which could result in a read past the end of an allocated buffer. This could allow an...

7.1CVSS7AI score0.00637EPSS
SaveExploits0References2
OSV
OSV
added 2021/09/14 11:15 a.m.9 views

CVE-2021-37202

A vulnerability has been identified in NX 1980 Series All versions V1984, Solid Edge SE2021 All versions SE2021MP8. The IFC adapter in affected application contains a use-after-free vulnerability that could be triggered while parsing user-supplied IFC files. An attacker could leverage this...

7.8CVSS7.2AI score0.00852EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/09/14 11:15 a.m.5 views

CVE-2021-25665

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2021.2.1. The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an out of bounds write past the end of an allocated structure. An attacker could...

7.8CVSS7.4AI score0.01336EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2021/09/14 12:00 a.m.40 views

(0Day) Autodesk Navisworks PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.8AI score0.00298EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/09/09 12:00 a.m.16 views

Delta Electronics DOPSoft 安全漏洞

Delta Electronics DOPSoft is a set of human-machine interface HMI software from Delta Electronics in Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft 2, which arises from a lack of proper validation of user-supplied data when parsing a specific project file by an affect...

7.8CVSS5.9AI score0.0712EPSS
SaveExploits0References5
NVD
NVD
added 2021/09/08 3:15 p.m.18 views

CVE-2021-30685

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Parsing a maliciously crafted audio file may lead to disclosure of user information...

5.5CVSS0.00878EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2021/09/08 2:30 p.m.29 views

CVE-2021-30685

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Parsing a maliciously crafted audio file may lead to disclosure of user information...

5.9AI score0.00878EPSS
SaveExploits0References5
NVD
NVD
added 2021/09/08 2:15 p.m.13 views

CVE-2021-28580

Medium by Adobe version 2.4.5.331 and earlier is affected by a buffer overflow vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user...

9.3CVSS0.08486EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/09/08 1:28 p.m.23 views

CVE-2021-28580 Medium by Adobe file parsing buffer overflow vulnerability could lead to arbitrary code execution

Medium by Adobe version 2.4.5.331 and earlier is affected by a buffer overflow vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user...

8.8CVSS9AI score0.08486EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/09/08 12:00 a.m.24 views

Delta Industrial Automation DOPSoft TBK File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS5.7AI score0.02376EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/02 5:15 p.m.9 views

CVE-2021-35994

Adobe After Effects version 18.2.1 and earlier is affected by an out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issu...

7.8CVSS6.5AI score0.02438EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/02 5:15 p.m.29 views

CVE-2021-36018

Adobe After Effects version 18.2.1 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this...

4.3CVSS0.01768EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/02 5:15 p.m.26 views

Cross site scripting

Adobe After Effects version 18.2.1 and earlier is affected by an out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issu...

6.8CVSS7.7AI score0.02199EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/09/02 5:00 p.m.36 views

CVE-2021-35995 Adobe After Effects MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe After Effects version 18.2.1 and earlier is affected by an Improper input validation vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation o...

3.3CVSS4.8AI score0.01768EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/09/02 5:00 p.m.5 views

CVE-2021-35995 Adobe After Effects MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe After Effects version 18.2.1 and earlier is affected by an Improper input validation vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation o...

3.3CVSS6.4AI score0.01768EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/09/02 5:00 p.m.30 views

CVE-2021-36019 Adobe After Effects PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe After Effects version 18.2.1 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of this...

3.3CVSS4.8AI score0.01768EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/09/01 2:34 p.m.37 views

CVE-2021-36072 Adobe Bridge SGI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Bridge versions 11.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS8AI score0.02315EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/09/01 2:34 p.m.38 views

CVE-2021-36066 Adobe Photoshop U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Photoshop versions 21.2.10 and earlier and 22.4.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fi...

7.8CVSS8AI score0.02211EPSS
SaveExploits0References1
Rows per page
Query Builder