Lucene search
+L

8091 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.42 views

Esri ArcReader PMF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.6AI score0.00443EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.31 views

Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

3.3CVSS3.2AI score0.00346EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.47 views

Bentley View DGN File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.7AI score0.01592EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.78 views

Bentley MicroStation CONNECT J2K File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.3AI score0.02005EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.35 views

Bentley MicroStation CONNECT BMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

3.3CVSS2.5AI score0.01612EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.72 views

Bentley MicroStation CONNECT J2K File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6AI score0.02113EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.59 views

Bentley MicroStation CONNECT JT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score0.01999EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.56 views

Bentley MicroStation CONNECT J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.3AI score0.02093EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.46 views

Bentley MicroStation CONNECT JP2 File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.7AI score0.02113EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.58 views

Bentley MicroStation CONNECT JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score0.02041EPSS
SaveExploits0References1
Ubuntu
Ubuntu
added 2022/01/27 6:37 a.m.180 views

USN-5247-1: Vim vulnerabilities

It was discovered that vim incorrectly handled parsing of filenames in its search functionality. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service. This issue only affected Ubuntu 21.10. CVE-2021-3973 It was...

9.3CVSS7.8AI score0.01792EPSS
SaveExploits5
Zero Day Initiative
Zero Day Initiative
added 2022/01/27 12:00 a.m.25 views

WECON LeviStudioU XML File Parsing Add Tag DstAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of A...

7.8CVSS7.6AI score0.08595EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/27 12:00 a.m.25 views

WECON LeviStudioU UMP File Parsing XY Tag WordAddr3 Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X...

7.8CVSS7.6AI score0.08595EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/27 12:00 a.m.20 views

WECON LeviStudioU UMP File Parsing XY Tag WordAddr2 Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X...

7.8CVSS7.6AI score0.08595EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/27 12:00 a.m.29 views

WECON LeviStudioU XML File Parsing Add Tag PLCAddr1 Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of A...

7.8CVSS7.6AI score0.08595EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/27 12:00 a.m.24 views

WECON LeviStudioU XML File Parsing Add Tag DigitCount Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of A...

7.8CVSS7.6AI score0.08595EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/27 12:00 a.m.33 views

WECON LeviStudioU UMP File Parsing XY Tag WordAddr1 Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X...

7.8CVSS7.6AI score0.08595EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/27 12:00 a.m.21 views

WECON LeviStudioU XML File Parsing BitAddr Tag ContralAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.6AI score0.08595EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/27 12:00 a.m.24 views

WECON LeviStudioU UMP File Parsing ScreenInfo Tag ScrnFile Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.7AI score0.07613EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/01/25 12:00 a.m.22 views

PT-2022-11194 · Autodesk · Autodesk Inventor

Name of the Vulnerable Software and Affected Versions: Autodesk Inventor versions 2019 through 2022 Description: The issue is related to an Information Disclosure vulnerability when parsing JT files, which, in conjunction with other vulnerabilities, may lead to code execution through maliciously...

7.8CVSS7.6AI score0.02296EPSS
SaveExploits0References5
Rows per page
Query Builder