Lucene search
+L

1032 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/04/24 12:00 a.m.52 views

(Pwn2Own) Oracle VirtualBox GPA Request Handling Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS5.2AI score0.00316EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/04/12 12:00 a.m.31 views

Adobe Substance 3D Stager USDC File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS5.4AI score0.00325EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/04/12 12:00 a.m.27 views

Adobe Substance 3D Stager USDC File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS5.4AI score0.00325EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/29 7:15 p.m.11 views

CVE-2022-42432

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

4.4CVSS7.5AI score
SaveExploits0References2
NVD
NVD
added 2023/03/29 7:15 p.m.28 views

CVE-2022-42432

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

5.1CVSS5.7AI score0.0061EPSS
SaveExploits0References2
NVD
NVD
added 2023/03/29 7:15 p.m.51 views

CVE-2022-28319

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.8AI score0.00946EPSS
SaveExploits0References2
NVD
NVD
added 2023/03/29 7:15 p.m.41 views

CVE-2022-28317

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.8AI score0.00642EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/29 7:15 p.m.14 views

CVE-2022-28317

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS6.2AI score0.00642EPSS
SaveExploits0References2
Prion
Prion
added 2023/03/29 7:15 p.m.30 views

Design/Logic Flaw

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

1.4CVSS4.5AI score0.0061EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2023/03/29 7:15 p.m.39 views

CVE-2022-42432

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

5.1CVSS6AI score0.0061EPSS
SaveExploits0References4
Prion
Prion
added 2023/03/29 7:15 p.m.29 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

4.4CVSS7.8AI score0.00946EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2023/03/29 7:15 p.m.23 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.4CVSS7.8AI score0.00946EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2023/03/29 12:00 a.m.94 views

CVE-2022-28319

Bentley MicroStation CONNECT 10.16.02.034 is affected. The vulnerability originates from the 3DM file parser, where memory is not properly initialized before access, enabling arbitrary code execution. An attacker must lure a user to visit a malicious page or open a malicious file, after which cod...

7.8CVSS7.8AI score0.00946EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2023/03/29 12:00 a.m.69 views

CVE-2022-28320

CVE-2022-28320 affects Bentley View 10.16.02.022. The issue lies in parsing 3DM files where memory is not properly initialized before access, enabling an attacker to execute code in the context of the current process with user interaction required (visit a malicious page or open a malicious file)...

7.8CVSS7.8AI score0.00946EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2023/03/29 12:00 a.m.46 views

CVE-2022-28317

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS8AI score0.00642EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/03/29 12:00 a.m.46 views

CVE-2022-42432

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

5.1CVSS5.4AI score0.0061EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/03/29 12:00 a.m.12 views

CVE-2022-28317

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS6.8AI score0.00642EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/03/29 12:00 a.m.11 views

CVE-2022-28319

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.8AI score0.00946EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2023/03/29 12:00 a.m.43 views

CVE-2022-42432

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

5.1CVSS5.5AI score0.0061EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/03/29 12:00 a.m.54 views

CVE-2022-28319

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS8AI score0.00946EPSS
SaveExploits0References2
Rows per page
Query Builder