Lucene search
+L

7782 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/07/10 12:0 a.m.26 views

Adobe Bridge CC SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows attackers to disclose sensitive information on vulnerable installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SVG...

3.3CVSS1.7AI score0.02876EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/06/20 12:0 a.m.31 views

Phoenix Contact Automationworx BCP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Phoenix Contact Automationworx. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

7.8CVSS4.6AI score0.03707EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/06/13 12:0 a.m.28 views

Panasonic Control FPWIN PRO Project File Parsing ctreestd Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic Control FPWin Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.7AI score0.06853EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/06/13 12:0 a.m.26 views

Panasonic Control FPWIN PRO Project File Parsing sc_app Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic Control FPWin Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.9AI score0.06853EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/06/13 12:0 a.m.28 views

Panasonic Control FPWIN PRO Project File Parsing sc_obj Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic Control FPWin Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.8AI score0.03754EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/06/13 12:0 a.m.22 views

Panasonic Control FPWIN PRO Project File Parsing us_plcfg Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic Control FPWin Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5AI score0.03754EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/06/11 12:0 a.m.28 views

Microsoft Windows gdiplus Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.3AI score0.04314EPSS
SaveExploits0References1
Prion
Prion
added 2019/06/04 9:29 p.m.22 views

Information disclosure

Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile default $HOME/.config/Yubico/u2fkeys as root unless openasuser was enabled, and does not properly verify that the path lacks symlinks pointing to other files on the system owned by root. If the debug option is enabled in the PAM...

5CVSS7.5AI score0.02885EPSS
SaveExploits1References7Affected Software1
Prion
Prion
added 2019/05/30 5:29 p.m.19 views

Code injection

A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attacker to execute unauthorized code or commands via the parsing of the file...

4.6CVSS7.9AI score0.00382EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2019/05/30 5:29 p.m.29 views

CVE-2018-9193

A researcher has disclosed several vulnerabilities against FortiClient for Windows version 6.0.5 and below, version 5.6.6, the combination of these vulnerabilities can turn into an exploit chain, which allows a user to gain system privileges on Microsoft Windows...

7.8CVSS8AI score0.00382EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2019/05/30 4:27 p.m.19 views

CVE-2018-9193

A researcher has disclosed several vulnerabilities against FortiClient for Windows version 6.0.5 and below, version 5.6.6, the combination of these vulnerabilities can turn into an exploit chain, which allows a user to gain system privileges on Microsoft Windows...

7.8CVSS8AI score0.00382EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.27 views

Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.3AI score0.09456EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.24 views

Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.3AI score0.09456EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.24 views

Adobe Acrobat Pro DC PostScript File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.2AI score0.09685EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.24 views

Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.7AI score0.08534EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.26 views

Adobe Acrobat Pro DC JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.8AI score0.08724EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2019/05/14 4:18 p.m.103 views

Adobe Addresses Critical Adobe Flash Player, Acrobat Reader Flaws

Adobe has issued patches for critical flaws across its Adobe Flash Player and Acrobat Reader products, which could enable arbitrary code execution. Overall, the company fixed 87 vulnerabilities across Acrobat and Reader, Flash Player and Adobe Media Encoder as part of its regularly-scheduled...

10CVSS0.1362EPSS
SaveExploits0References8
Veracode
Veracode
added 2019/05/02 5:29 a.m.40 views

Denial Of Service (DoS)

file is vulnerable to denial of service. Multiple flaws were found in the way file parsed Executable and Linkable Format ELF files. A remote attacker could use these flaws to cause file to crash, disclose portions of its memory, or consume an excessive amount of system resources...

7.5CVSS7.1AI score0.04648EPSS
SaveExploits0References24Affected Software2
Veracode
Veracode
added 2019/05/02 5:29 a.m.31 views

Denial Of Service (DoS)

file is vulnerable to denial of service. Multiple flaws were found in the way file parsed Executable and Linkable Format ELF files. A remote attacker could use these flaws to cause file to crash, disclose portions of its memory, or consume an excessive amount of system resources...

5CVSS7.1AI score0.04683EPSS
SaveExploits0References20Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2019/04/29 12:0 a.m.26 views

Foxit Reader ConvertToPDF JPG File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS2.1AI score0.02652EPSS
SaveExploits0References1
Rows per page
Query Builder