Lucene search
+L

8061 matches found

Zero Day Initiative
Zero Day Initiative
added 2018/10/17 12:00 a.m.36 views

OMRON CX-Supervisor SCS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling...

4.3CVSS3.4AI score0.00891EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/17 12:00 a.m.33 views

OMRON CX-Supervisor SCS File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling...

7.8CVSS3.2AI score0.01627EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/17 12:00 a.m.44 views

OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling...

7.8CVSS2.8AI score0.01627EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/17 12:00 a.m.36 views

OMRON CX-Supervisor SCS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling...

4.3CVSS2.7AI score0.00891EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/16 12:00 a.m.25 views

LAquis SCADA lqs File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

9.8CVSS1.8AI score0.04831EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/16 12:00 a.m.45 views

LAquis SCADA LQS File Parsing Patamar Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of LQS...

7.8CVSS2.7AI score0.01567EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/16 12:00 a.m.35 views

LAquis SCADA lqs File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

9.8CVSS1.8AI score0.04831EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/16 12:00 a.m.28 views

LAquis SCADA LQS File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within parsing of...

9.8CVSS4.2AI score0.06381EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/16 12:00 a.m.44 views

LAquis SCADA LQS File Parsing Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The issue results from the lack of proper...

8.8CVSS4.3AI score0.08063EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/16 12:00 a.m.26 views

LAquis SCADA LQS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

9.8CVSS1.8AI score0.04831EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/16 12:00 a.m.42 views

LAquis SCADA LQS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

9.8CVSS1.8AI score0.04831EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/15 12:00 a.m.31 views

Delta Industrial Automation TPEditor TPE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation TPEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS5.6AI score0.01754EPSS
SaveExploits0References1
zdt
zdt
added 2018/10/11 12:00 a.m.73 views

VLC Media Player 2.2.8 MKV Use-After-Free Exploit

This Metasploit module exploits a use-after-free vulnerability in VideoLAN VLC versions 2.2.8 and below. The vulnerability exists in the parsing of MKV files and affects both 32 bits and 64 bits. In order to exploit this, this module will generate two files: The first .mkv file contains the main...

6.8CVSS2AI score0.35863EPSS
SaveExploits10
Zero Day Initiative
Zero Day Initiative
added 2018/10/10 12:00 a.m.36 views

Delta Industrial Automation ISPSoft DVP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation ISPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS5.3AI score0.01627EPSS
SaveExploits0References1
OSV
OSV
added 2018/10/08 12:29 p.m.9 views

CVE-2018-14810

WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which may allow code to be executed in the context of an administrator...

8.8CVSS5.8AI score0.01702EPSS
SaveExploits0References1
NVD
NVD
added 2018/10/08 12:29 p.m.36 views

CVE-2018-14810

WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which may allow code to be executed in the context of an administrator...

9.3CVSS9AI score0.01702EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/08 12:00 a.m.34 views

Cisco WebEx Network Recording Player ARF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

9.3CVSS5AI score0.02125EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/10/04 12:00 a.m.50 views

FreeBSD : clamav -- multiple vulnerabilities (8b812395-c739-11e8-ab5b-9c5c8e75236a)

Joel Esler reports : - CVE-2018-15378 : - Vulnerability in ClamAV's MEW unpacking feature that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. - Reported by Secunia Research at Flexera. - Fix for a 2-byte buffer over-read bug in...

8.8CVSS6.8AI score0.03806EPSS
SaveExploits0References6
Prion
Prion
added 2018/10/03 1:29 p.m.20 views

Design/Logic Flaw

Delta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file, to cause the application to read past the boundary allocated to a stack object, which could allow execution of code under the context of the application...

6.8CVSS7.5AI score0.01627EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2018/09/29 12:00 a.m.10 views

Multiple Fuji Electric Products Cross Boundary Read Vulnerability

Fuji Electric FRENIC Loader, etc. are inverters from Fuji Electric Japan. The out-of-bounds read vulnerability exists in multiple Fuji Electric products and stems from a program's failure to properly parse an FNC file, which can be exploited by an attacker to disclose information...

5.3CVSS5.8AI score0.0129EPSS
SaveExploits0References1
Rows per page
Query Builder