Lucene search
+L

549 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/06/15 12:0 a.m.25 views

(0Day) Ashlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.00392EPSS
SaveExploits0
NVD
NVD
added 2023/06/13 9:15 a.m.25 views

CVE-2023-33124

A vulnerability has been identified in JT2Go All versions V14.2.0.3, Teamcenter Visualization V13.2 All versions V13.2.0.13, Teamcenter Visualization V13.3 All versions V13.3.0.10, Teamcenter Visualization V14.0 All versions V14.0.0.6, Teamcenter Visualization V14.1 All versions V14.1.0.8,...

7.8CVSS7.7AI score0.00217EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/13 9:15 a.m.25 views

Memory corruption

A vulnerability has been identified in JT2Go All versions V14.2.0.3, Teamcenter Visualization V13.2 All versions V13.2.0.13, Teamcenter Visualization V13.3 All versions V13.3.0.10, Teamcenter Visualization V14.0 All versions V14.0.0.6, Teamcenter Visualization V14.1 All versions V14.1.0.8,...

4.4CVSS7.7AI score0.00217EPSS
SaveExploits0References1Affected Software2
UbuntuCve
UbuntuCve
added 2023/06/07 3:15 a.m.35 views

CVE-2023-0666

Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark...

6.5CVSS7.3AI score0.02256EPSS
SaveExploits1References3
Prion
Prion
added 2023/06/06 5:15 p.m.17 views

Stack overflow

The affected application lacks proper validation of user-supplied data when parsing project files e.g., CSP. This could lead to a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process...

4.4CVSS7.8AI score0.0023EPSS
SaveExploits0References1Affected Software2
NVD
NVD
added 2023/06/06 3:15 p.m.19 views

CVE-2023-32545

The affected application lacks proper validation of user-supplied data when parsing project files e.g., CSP. This could lead to an out-of-bounds read in Cscape!CANPortMigration. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS7.8AI score0.00227EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/06/01 12:0 a.m.23 views

Delta Electronics CNCSoft-B DOPSoft DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00347EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/06/01 12:0 a.m.16 views

Delta Electronics CNCSoft-B DOPSoft DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00347EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/06/01 12:0 a.m.17 views

Delta Electronics CNCSoft-B DOPSoft DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00347EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/06/01 12:0 a.m.19 views

Delta Electronics CNCSoft-B DOPSoft DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00347EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/25 12:0 a.m.26 views

Adobe Acrobat Reader DC Annotation Highlight delay Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.8AI score0.00351EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/17 12:0 a.m.21 views

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.9AI score0.00579EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2023/05/16 8:56 a.m.5 views

kernel: tcp: tcp_rtx_synack() can be called from process context

In the Linux kernel, the following vulnerability has been resolved: tcp: tcprtxsynack can be called from process context Laurent reported the enclosed report 1 This bug triggers with following coditions: 0 Kernel built with CONFIGDEBUGPREEMPT=y 1 A new passive FastOpen TCP socket is created. This...

5.5CVSS6.2AI score0.00291EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/05/09 10:4 a.m.6 views

kernel: tcp: tcp_rtx_synack() can be called from process context

In the Linux kernel, the following vulnerability has been resolved: tcp: tcprtxsynack can be called from process context Laurent reported the enclosed report 1 This bug triggers with following coditions: 0 Kernel built with CONFIGDEBUGPREEMPT=y 1 A new passive FastOpen TCP socket is created. This...

5.5CVSS6.2AI score0.00291EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2023/04/12 12:0 a.m.35 views

Adobe Acrobat Reader DC AcroForm removeField Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS7.6AI score0.0271EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/03/31 12:0 a.m.30 views

Foxit PDF Reader Resource Management Error Vulnerability (CNVD-2023-25116)

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to resource management errors, which can be exploited to execute arbitrary code in the context of the current process...

7.8CVSS7.8AI score0.00956EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/29 7:15 p.m.25 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

4.4CVSS7.8AI score0.00946EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.36 views

CVE-2022-43637

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.9AI score0.01091EPSS
SaveExploits0References2
CNVD
CNVD
added 2023/03/16 12:0 a.m.78 views

Siemens Tecnomatix Plant Simulation Out-of-Bounds Write Vulnerability (CNVD-2023-18930)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. A security vulnerability exists in Siemens Tecnomatix...

7.8CVSS7.7AI score0.00223EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.25 views

Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of USD...

7.8CVSS7.6AI score0.00353EPSS
SaveExploits0References1
Rows per page
Query Builder