Lucene search
K

983 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/05/12 12:0 a.m.18 views

Autodesk 3DS Max USD File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk 3DS Max. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of US...

7.8CVSS6.3AI score0.00237EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/12 12:0 a.m.21 views

Autodesk 3DS Max SKP File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk 3DS Max. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

3.3CVSS5.4AI score0.00258EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/12 12:0 a.m.10 views

Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/12 12:0 a.m.8 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.8AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/12 12:0 a.m.9 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.8AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/12 12:0 a.m.12 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.8AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/12 12:0 a.m.11 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.8AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/12 12:0 a.m.7 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.8AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/04/24 12:0 a.m.19 views

Microsoft Excel SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS7.8AI score0.00809EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/04/24 12:0 a.m.7 views

Microsoft Excel SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.6AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/04/12 12:0 a.m.25 views

Adobe Acrobat Reader DC Popup Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS7.7AI score0.02619EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/04/12 12:0 a.m.23 views

Adobe Substance 3D Designer USD File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.00379EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/04/12 12:0 a.m.23 views

Adobe Acrobat Reader DC AcroForm exportAsFDFStr Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS7.6AI score0.0271EPSS
Exploits0References1
OSV
OSV
added 2023/04/05 9:30 p.m.36 views

GHSA-776F-QX25-Q3CC xml2js is vulnerable to prototype pollution

xml2js versions before 0.5.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the proto property to be edited...

5.3CVSS5.3AI score0.01392EPSS
Exploits1References6
Zero Day Initiative
Zero Day Initiative
added 2023/03/31 12:0 a.m.21 views

PDF-XChange Editor TIF File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.8AI score0.00551EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/31 12:0 a.m.24 views

Bentley View SKP File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS5.8AI score0.00296EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2023/03/31 12:0 a.m.21 views

Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.6AI score0.00313EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2023/03/31 12:0 a.m.5 views

PT-2023-14274 · Bentley · Bentley View

Name of the Vulnerable Software and Affected Versions: Bentley View affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Bentley View. It requires user interaction, where the target must visit a malicious page or op...

7.8CVSS8AI score0.00313EPSS
Exploits0References4
OSV
OSV
added 2023/03/29 7:15 p.m.1 views

CVE-2022-43637

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.2AI score0.01091EPSS
Exploits0References2
NVD
NVD
added 2023/03/29 7:15 p.m.11 views

CVE-2022-43639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.01091EPSS
Exploits0References2
Rows per page
Query Builder