Lucene search
K

544 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/01/29 12:0 a.m.27 views

Schneider Electric IGSS CGF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.1AI score0.0066EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/29 12:0 a.m.19 views

Schneider Electric IGSS CGF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.1AI score0.0066EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:0 a.m.28 views

Delta Industrial Automation DOPSoft XLS File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Delta Industrial Automation DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS5.1AI score0.00134EPSS
Exploits0References1
CNVD
CNVD
added 2021/01/13 12:0 a.m.4 views

Unspecified Vulnerability in Solid Edge

Solid Edge is a portfolio of software tools that address a variety of product development processes. An unspecified vulnerability exists in Solid Edge, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.3AI score0.00486EPSS
Exploits0References1
NVD
NVD
added 2021/01/12 9:15 p.m.20 views

CVE-2020-28386

A vulnerability has been identified in Solid Edge SE2020 All Versions SE2020MP12, Solid Edge SE2021 All Versions SE2021MP2. Affected applications lack proper validation of user-supplied data when parsing DFT files. This could result in an out of bounds write past the end of an allocated structure...

7.8CVSS7.7AI score0.00468EPSS
Exploits0References4
Cvelist
Cvelist
added 2021/01/12 8:18 p.m.15 views

CVE-2020-26994

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of PCX files. This could result in a heap-based buffer overflow. An attacker could leverage this...

8.8AI score0.01595EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.3 views

Siemens Solid Edge 缓冲区错误漏洞

Solid Edge is a portfolio of software tools that address a variety of product development processes. Solid Edge has a security vulnerability that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.2AI score0.00468EPSS
Exploits0References7
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.3 views

Siemens Solid Edge 缓冲区错误漏洞

Solid Edge is a portfolio of software tools that address a variety of product development processes. An unspecified vulnerability exists in Solid Edge, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.3AI score0.00486EPSS
Exploits0References8
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.1 views

Siemens Jt2go和Siemens Teamcenter Visualization 缓冲区错误漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with existing JT, VFZ, CGM, TIF data.Teamcenter visualization software enables companies to enhance their Product Lifecycle Management PLM environments.The software gives business users access to documents in a...

8.8CVSS7.6AI score0.01595EPSS
Exploits0References4
Zero Day Initiative
Zero Day Initiative
added 2020/12/15 12:0 a.m.14 views

(0Day) Eaton EASYsoft E70 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Eaton EASYsoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of E70...

7.8CVSS5AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2020/12/03 12:0 a.m.120 views

Apple macOS AudioToolboxCore Wave Header Parsing Sign Extension Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the AudioToolbox library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

7.8CVSS5.2AI score0.00447EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/11/10 12:0 a.m.37 views

Adobe Acrobat Pro DC PDF Export Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the exporting...

7.8CVSS2.5AI score0.06479EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.34 views

Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.4AI score0.00211EPSS
Exploits0References1
Prion
Prion
added 2020/10/13 5:15 p.m.14 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.0284EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/10/13 5:10 p.m.20 views

CVE-2020-17413

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.0284EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2020/08/27 12:0 a.m.41 views

Microsoft Windows hevcdecoder_store MKV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of M...

7.8CVSS5.5AI score0.1667EPSS
Exploits0References1
OSV
OSV
added 2020/08/11 6:15 p.m.1 views

CVE-2020-13178

A function in the Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to version 20.04.1 does not properly validate the signature of an external binary, which could allow an attacker to gain elevated privileges via execution in the context of the PCoIP Agent process...

6.7CVSS6.7AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/04 12:0 a.m.25 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.8AI score0.02339EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/06/30 12:0 a.m.36 views

ICONICS Genesis64 TestQuery SQL Injection Remote Code Execution Vulnerability

The vulnerablity allows remote attackers to execute arbitrary code on affected installations of ICONICS Genesis64. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of requests to the TestQuery endpoint of the IcoFwxServer service. The...

9.8CVSS2.9AI score0.00906EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/28 12:0 a.m.27 views

Adobe Bridge EPS BoundingBox Element Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of the...

7.8CVSS5AI score0.07426EPSS
Exploits0References1
Rows per page
Query Builder