Lucene search
K

958 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/06/16 12:0 a.m.•23 views

Adobe Substance 3D Designer SBS File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00087EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/06/15 12:0 a.m.•16 views

(0Day) Ashlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.00794EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/06/15 12:0 a.m.•15 views

(0Day) Ashlar-Vellum Cobalt AR File Parsing Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.00532EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/06/15 12:0 a.m.•18 views

(0Day) Ashlar-Vellum Cobalt Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.00794EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/05/12 12:0 a.m.•14 views

Adobe Dimension SKP File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS5.9AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/10 12:0 a.m.•26 views

Adobe Substance 3D Painter GLTF File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Substance 3D Painter. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS5.9AI score0.00097EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/10 12:0 a.m.•23 views

Adobe Substance 3D Painter USD File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Substance 3D Painter. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS5.9AI score0.00174EPSS
Exploits0References1
OSV
OSV
•added 2023/05/08 8:15 p.m.•1 views

CVE-2023-27934

A memory initialization issue was addressed. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. A remote attacker may be able to cause unexpected app termination or arbitrary code execution...

8.8CVSS7.3AI score0.03098EPSS
Exploits0References3
Prion
Prion
•added 2023/05/08 8:15 p.m.•18 views

Memory corruption

A memory initialization issue was addressed. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. A remote attacker may be able to cause unexpected app termination or arbitrary code execution...

6.5CVSS8.8AI score0.03098EPSS
Exploits0References2Affected Software1
CVE
CVE
•added 2023/05/08 12:0 a.m.•114 views

CVE-2023-27934

CVE-2023-27934 involves a memory initialization issue in macOS components. Exploitation could allow a remote attacker to cause an unexpected app termination or arbitrary code execution. Affected versions include macOS Ventura 13.3 and macOS Monterey 12.6.4 (as fixed). The connected documents conf...

8.8CVSS8.7AI score0.03098EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/05/08 12:0 a.m.•16 views

CVE-2023-27934

A memory initialization issue was addressed. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. A remote attacker may be able to cause unexpected app termination or arbitrary code execution...

9.3AI score0.03098EPSS
Exploits0References2
Vulnrichment
Vulnrichment
•added 2023/05/08 12:0 a.m.•7 views

CVE-2023-27934

A memory initialization issue was addressed. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. A remote attacker may be able to cause unexpected app termination or arbitrary code execution...

8.6AI score0.03098EPSS
Exploits0References2
Veracode
Veracode
•added 2023/05/01 9:46 p.m.•24 views

Use Of Uninitialized Variable

linux-gke is vulnerable to Use of Uninitialized Variable. The vulnerability allows users with the ability to execute high-privileged code to exploit the flaws within 'nftosfeval function' causing a lack of proper initialization of memory prior to accessing it resulting in the attacker gaining...

4.4CVSS6.4AI score0.00094EPSS
Exploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/01 12:0 a.m.•29 views

(Pwn2Own) VMware Workstation UHCI Component Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS6.9AI score0.00051EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/04/24 12:0 a.m.•42 views

(Pwn2Own) Oracle VirtualBox GPA Request Handling Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS5.2AI score0.00101EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/04/12 12:0 a.m.•23 views

Adobe Substance 3D Stager USDC File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS5.4AI score0.00174EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/04/12 12:0 a.m.•18 views

Adobe Substance 3D Stager USDC File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS5.4AI score0.00174EPSS
Exploits0References1
OSV
OSV
•added 2023/03/29 7:15 p.m.•4 views

CVE-2022-42432

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

4.4CVSS7.5AI score
Exploits0References2
NVD
NVD
•added 2023/03/29 7:15 p.m.•17 views

CVE-2022-42432

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

5.1CVSS5.7AI score0.00094EPSS
Exploits0References2
NVD
NVD
•added 2023/03/29 7:15 p.m.•16 views

CVE-2022-28319

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.8AI score0.00395EPSS
Exploits0References2
Rows per page
Query Builder