Lucene search
K

983 matches found

Zero Day Initiative
Zero Day Initiative
added 2017/03/09 12:0 a.m.16 views

Foxit Reader execMenuItem Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the execMenuItem...

6.8CVSS7AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/03/09 12:0 a.m.30 views

Foxit Reader Field deleteItemAt Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the deleteItemAt...

6.8CVSS7AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/01/11 12:0 a.m.31 views

Foxit Reader setInterval Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS7AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/01/10 12:0 a.m.39 views

Adobe Reader DC XFA Layout Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA subform...

6.8CVSS2.8AI score0.03346EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2016/11/15 11:40 a.m.2 views

php: Zend/zend_exceptions.c does not validate certain Exception objects

Zend/zendexceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exception objects, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash or trigger unintended method execution via crafted...

9.8CVSS7.6AI score0.12237EPSS
Exploits1References4
Zero Day Initiative
Zero Day Initiative
added 2016/11/08 12:0 a.m.21 views

Adobe Flash Selection setFocus Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Selection's setFocus...

6.8CVSS2.5AI score0.08363EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/10/11 12:0 a.m.43 views

Adobe Reader DC XSLT Parsing copy-of Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AXSLE librar...

6.8CVSS5.1AI score0.02654EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/10/11 12:0 a.m.27 views

Adobe Reader DC XFA maxChars Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS4.7AI score0.02654EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/10/11 12:0 a.m.25 views

Adobe Reader DC XSLT Parsing key Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AXSLE librar...

6.8CVSS5.1AI score0.02654EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/10/11 12:0 a.m.27 views

Adobe Reader DC XSLT Parsing if Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AXSLE librar...

6.8CVSS5.1AI score0.02654EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/10/11 12:0 a.m.22 views

Adobe Reader DC XSLT Parsing sort Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AXSLE librar...

6.8CVSS5AI score0.02654EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/10/11 12:0 a.m.31 views

Acrobat Reader DC XFA FormSubform Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS2AI score0.02654EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/10/11 12:0 a.m.27 views

Adobe Reader DC XSLT Parsing variable Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AXSLE librar...

6.8CVSS5AI score0.02654EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/10/11 12:0 a.m.24 views

Adobe Reader DC XSLT Parsing for-each Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AXSLE librar...

6.8CVSS5.1AI score0.02654EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/10/11 12:0 a.m.24 views

Adobe Reader DC XSLT Parsing number Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AXSLE librar...

6.8CVSS5.1AI score0.02654EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/10/11 12:0 a.m.27 views

Adobe Reader DC XSLT Parsing choose Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AXSLE librar...

6.8CVSS5.2AI score0.02654EPSS
Exploits0References1
Check Point Advisories
Check Point Advisories
added 2014/03/03 12:0 a.m.3 views

Microsoft Excel Embedded Object Validation Integer Overflow - Ver2 (CVE-2008-3477)

An integer overflow vulnerability has been reported inMicrosoft Office Excel. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5.1AI score0.71275EPSS
Exploits1
seebug.org
seebug.org
added 2013/01/10 12:0 a.m.32 views

Microsoft .NET Framework 远程权限提升漏洞(CVE-2013-0004)

Bugtraq ID:57113 CVE ID: CVE-2013-0004 Microsoft .NET Framework是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统 Microsoft .NET Framework里存在的一个两次构建错误会导致不正确验证内存中某些对象的权限,攻击者可以构建特制的XMAL浏览器应用XBAP或不可信的.Net应用,诱使用户解析,可完全控制应用系统,执行任意代码 0 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0 Microsoft .NET Framework...

9.3CVSS9AI score0.08661EPSS
Exploits2
Symantec
Symantec
added 2010/06/08 12:0 a.m.19 views

Microsoft Windows COM Object Validation Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Excel, PowerPoint, Publisher, Visio, Wordpad, or Word file. Successful exploits would allow the attacker to execute arbitrary code in the...

7.9AI score
Exploits0Affected Software19
Prion
Prion
added 2008/10/15 12:12 a.m.26 views

Integer overflow

Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an Office document with an embedded object, which allows remote attackers to execute arbitrary code via an Excel file containing a crafted value, leading to...

9.3CVSS7.9AI score0.71275EPSS
Exploits1References11Affected Software1
Rows per page
Query Builder