Lucene search
K

983 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:0 a.m.31 views

Bentley View JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.5AI score0.01937EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:0 a.m.33 views

Bentley View JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.5AI score0.01937EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:0 a.m.30 views

Bentley View J2K File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K...

7.8CVSS4.5AI score0.02005EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:0 a.m.35 views

Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.3AI score0.02015EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/07 12:0 a.m.20 views

Tencent WeChat WAXM Decoder Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM Decoder. T...

8.8CVSS2.7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.14 views

OpenText Brava! Desktop U3D File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS2.4AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.10 views

OpenText Brava! Desktop DGN File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score
Exploits0
OSV
OSV
added 2021/11/22 9:15 a.m.2 views

CVE-2021-43582

A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the...

7.8CVSS6AI score0.01339EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2021/11/18 6:1 p.m.62 views

CVE-2021-3918

The json-schema Node.JS library was vulnerable to prototype pollution during the validation of a JSON object. An attacker, able to provide a specially crafted JSON file for validation, could use this flaw to modify the behavior of the node program, to, for example, execute arbitrary code...

9.8CVSS9.2AI score0.03563EPSS
Exploits1References3
OSV
OSV
added 2021/11/14 9:15 p.m.2 views

CVE-2021-43274

A Use After Free Vulnerability exists in the Open Design Alliance Drawings SDK before 2022.11. The specific flaw exists within the parsing of DWF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage...

7.8CVSS5.6AI score
Exploits0References1
Cvelist
Cvelist
added 2021/11/14 8:50 p.m.17 views

CVE-2021-43275

A Use After Free vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute...

7.9AI score0.00855EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/10 12:0 a.m.19 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

3.3CVSS6.8AI score0.00855EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/10 12:0 a.m.17 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

3.3CVSS6.8AI score0.00855EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/28 12:0 a.m.30 views

Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.6AI score0.05118EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.27 views

Foxit PDF Reader transitionToState Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementatio...

7.8CVSS2.5AI score0.00349EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.22 views

Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

3.3CVSS2.6AI score0.0034EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:0 a.m.22 views

Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1AI score0.0034EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/10/15 12:0 a.m.2 views

Foxit PDF Editor 缓冲区错误漏洞

Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A buffer error vulnerability exists in Foxit PDF, which arises from a failure to validate the existence of an object before performing an operation on it, allowing a remote attacker to execute arbitrary code on an affected PDF...

7.8CVSS8.2AI score0.00349EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/10/15 12:0 a.m.3 views

Foxit PDF Editor 缓冲区错误漏洞

Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A buffer error vulnerability exists in Foxit PDF, which arises from a failure to validate the existence of an object before performing an operation on it, allowing a remote attacker to execute arbitrary code on an affected PDF...

7.8CVSS8.2AI score0.00349EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2021/10/15 12:0 a.m.4 views

PT-2021-20796 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicio...

5.5CVSS5.9AI score0.0034EPSS
Exploits0References5
Rows per page
Query Builder