Lucene search
K

983 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/05/12 12:0 a.m.24 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.01031EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:0 a.m.27 views

Adobe InCopy Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of embedd...

7.8CVSS4.5AI score0.00489EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:0 a.m.25 views

Adobe FrameMaker Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.4AI score0.02459EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/05/05 12:0 a.m.3 views

The vulnerability of the Apache Superset data visualization software lies in the lack of validation for XML objects’ sequences, which allows attackers to carry out attacks based on SQL injections.

The vulnerability of Apache Superset’s data visualization software lies in the lack of validation for the consistency of XML objects. Exploiting this vulnerability allows a remote attacker to carry out attacks based on SQL injections...

10CVSS8AI score0.02709EPSS
Exploits0References5Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:0 a.m.22 views

Adobe Acrobat Pro DC AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.8CVSS2.4AI score0.03518EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:0 a.m.22 views

Adobe Acrobat Pro DC AcroForm calculateNow Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.5AI score0.12202EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:0 a.m.26 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.4AI score0.03518EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:0 a.m.19 views

Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

3.3CVSS3.1AI score0.01823EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:0 a.m.20 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.4AI score0.03274EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/28 12:0 a.m.18 views

Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.5AI score0.03443EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.4 views

The vulnerability of the sapi/cgi/cgi_main.c component of the PHP programming language interpreter allows a hacker to execute arbitrary code.

The vulnerability of the sapi/cgi/cgimain.c component of the PHP programming language interpreter is related to the lack of validation for the sequences of XML objects. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.5CVSS7.6AI score0.99998EPSS
Exploits41References18Affected Software4
Zero Day Initiative
Zero Day Initiative
added 2022/04/12 12:0 a.m.32 views

Bentley MicroStation CONNECT IFC File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.7AI score0.00938EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/12 12:0 a.m.25 views

Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.3AI score0.00951EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.29 views

Omron CX-One CX-Position NCI File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

7.8CVSS4.4AI score0.01368EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.53 views

Autodesk Navisworks Freedom DWF File Parsing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score0.01012EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.38 views

Autodesk Navisworks Manage DWFX File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01494EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.23 views

Autodesk Navisworks Manage SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score0.01063EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.20 views

Autodesk Navisworks Manage SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score0.01063EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.37 views

Autodesk Navisworks Freedom DWFX File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.3AI score0.01063EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2022/03/31 8:48 p.m.67 views

CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS3.1AI score0.00598EPSS
Exploits0References3
Rows per page
Query Builder