Lucene search
+L

9571 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/03/22 12:00 a.m.•45 views

Foxit PhantomPDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.8AI score0.02899EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/22 12:00 a.m.•48 views

Foxit PhantomPDF U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U...

7.8CVSS3.8AI score0.02491EPSS
SaveExploits0References1
OSV
OSV
•added 2021/03/18 1:15 p.m.•20 views

CVE-2021-26236

FastStone Image Viewer v.= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality BITMAPINFOHEADER Structure, 'BitCount' file format field, that will end up corrupting the Structure Exception Handler SEH. Attackers could exploit this issue to...

7.8CVSS7.5AI score0.01968EPSS
SaveExploits1References3
NVD
NVD
•added 2021/03/18 1:15 p.m.•28 views

CVE-2021-26236

FastStone Image Viewer v.= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality BITMAPINFOHEADER Structure, 'BitCount' file format field, that will end up corrupting the Structure Exception Handler SEH. Attackers could exploit this issue to...

7.8CVSS0.01968EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/03/18 12:55 p.m.•33 views

CVE-2021-26236

FastStone Image Viewer v.= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality BITMAPINFOHEADER Structure, 'BitCount' file format field, that will end up corrupting the Structure Exception Handler SEH. Attackers could exploit this issue to...

8.1AI score0.01968EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/03/18 12:00 a.m.•3 views

PT-2021-16977

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer versions = 7.5 Description The issue is a Stack-based Buffer Overflow affecting the CUR file parsing functionality, specifically the BITMAPINFOHEADER Structure and the 'BitCount' file format field. This can lead to...

7.8CVSS0.01968EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/18 12:00 a.m.•5 views

CVE-2021-26236: Out-of-bounds Write

FastStone Image Viewer v.= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality BITMAPINFOHEADER Structure, 'BitCount' file format field, that will end up corrupting the Structure Exception Handler SEH. Attackers could exploit this issue to...

7.8CVSS6AI score0.01968EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
•added 2021/03/17 12:00 a.m.•45 views

Microsoft PowerPoint PPTX File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft PowerPoint. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processin...

7.8CVSS5.1AI score0.04302EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/03/16 4:00 a.m.•20 views

CVE-2021-29097

Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 and earlier and ArcGIS Pro 2.7 and earlier allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user...

7.8CVSS8.3AI score0.02412EPSS
SaveExploits0References10
Zero Day Initiative
Zero Day Initiative
•added 2021/03/16 12:00 a.m.•54 views

Siemens Solid Edge Viewer 3DS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score0.02154EPSS
SaveExploits0References1
OSV
OSV
•added 2021/03/15 5:15 p.m.•12 views

CVE-2021-27380

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds write past the end of an allocated structure...

7.8CVSS5.9AI score0.02542EPSS
SaveExploits0References3
CVE
CVE
•added 2021/03/15 5:03 p.m.•74 views

CVE-2020-28385

Siemens Solid Edge vulnerabilities CVE-2020-28385 affect Solid Edge SE2020 (before SE2020MP13) and SE2021 (before SE2021MP4). The root cause is improper validation of user-supplied data when parsing DFT files, leading to an out-of-bounds write past the end of an allocated structure and potential ...

7.8CVSS7.7AI score0.02607EPSS
SaveExploits0References3Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•39 views

SAP 3D Visual Enterprise Viewer CGM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5.5AI score0.01419EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•45 views

SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01734EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•36 views

SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01734EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•33 views

SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01734EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•33 views

SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01734EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•44 views

SAP 3D Visual Enterprise Viewer PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.9AI score0.01287EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•45 views

SAP 3D Visual Enterprise Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.7AI score0.01734EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•32 views

SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01734EPSS
SaveExploits0
Rows per page
Query Builder