Lucene search
+L

706 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/05/12 12:00 a.m.•24 views

Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/12 12:00 a.m.•21 views

Adobe Dimension SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/04/24 12:00 a.m.•23 views

Microsoft Excel SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.5AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/04/24 12:00 a.m.•18 views

Microsoft Excel SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.6AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/04/24 12:00 a.m.•29 views

Microsoft Excel SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS7.8AI score0.00831EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/04/11 12:00 a.m.•57 views

Microsoft Office Word SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

7.8CVSS7.8AI score0.03011EPSS
SaveExploits4References1
Zero Day Initiative
Zero Day Initiative
•added 2023/03/31 12:00 a.m.•29 views

Microsoft Excel SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS5.7AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/03/31 12:00 a.m.•33 views

Bentley View SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.7AI score0.00312EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/03/31 12:00 a.m.•35 views

Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.6AI score0.00313EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/03/31 12:00 a.m.•38 views

Bentley View SKP File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS5.8AI score0.00296EPSS
SaveExploits0
OSV
OSV
•added 2023/03/29 7:15 p.m.•18 views

CVE-2022-28303

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.2AI score0.00951EPSS
SaveExploits0References2
NVD
NVD
•added 2023/03/29 7:15 p.m.•25 views

CVE-2022-28303

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.00951EPSS
SaveExploits0References2
NVD
NVD
•added 2023/03/29 7:15 p.m.•49 views

CVE-2022-28310

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.8AI score0.00959EPSS
SaveExploits0References2
Prion
Prion
•added 2023/03/29 7:15 p.m.•23 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

4.4CVSS7.8AI score0.00951EPSS
SaveExploits0References2Affected Software2
Prion
Prion
•added 2023/03/29 7:15 p.m.•32 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.4CVSS7.8AI score0.00959EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2023/03/29 12:00 a.m.•87 views

CVE-2022-28310

CVE-2022-28310 is a use-after-free remote code execution vulnerability in Bentley MicroStation CONNECT (version 10.16.02.034) involving parsing of SKP files. The flaw stems from not validating the existence of an object before performing operations on it, enabling arbitrary code execution in the ...

7.8CVSS7.8AI score0.00959EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
•added 2023/03/29 12:00 a.m.•11 views

CVE-2022-28303

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.00951EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/03/29 12:00 a.m.•12 views

CVE-2022-28310

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.8AI score0.00959EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/03/29 12:00 a.m.•35 views

CVE-2022-28303

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS8AI score0.00951EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/29 12:00 a.m.•5 views

CVE-2022-28303: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.6AI score0.00951EPSS
SaveExploits0References2
Rows per page
Query Builder