Lucene search
+L

6495 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/02/16 12:00 a.m.•41 views

Apple macOS CoreML MLMODEL File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the CoreML library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4.4AI score0.00536EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/16 12:00 a.m.•41 views

Apple macOS ImageIO DDS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS3.6AI score0.0405EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/11 12:00 a.m.•23 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01596EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/11 12:00 a.m.•25 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01774EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/11 12:00 a.m.•34 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.8AI score0.01774EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/11 12:00 a.m.•25 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01564EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/11 12:00 a.m.•12 views

PT-2022-10396 · Qualcomm · Snapdragon Connectivity +3

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected versions not specified Description: The issue is...

8.4CVSS7.6AI score0.00188EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2022/02/11 12:00 a.m.•54 views

Foxit PDF Reader JPEG2000 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.7AI score0.027EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/11 12:00 a.m.•30 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01293EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/11 12:00 a.m.•38 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01293EPSS
SaveExploits0References1
OSV
OSV
•added 2022/02/04 11:15 p.m.•11 views

DEBIAN-CVE-2021-40403

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker ca...

6.3CVSS7.3AI score0.01084EPSS
SaveExploits1References1
OSV
OSV
•added 2022/02/04 11:15 p.m.•16 views

UBUNTU-CVE-2021-40403

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker ca...

6.3CVSS6.9AI score0.01084EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2022/02/04 12:00 a.m.•20 views

The vulnerability of the Django web application framework, related to the lack of protection for website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Django web application framework is related to the lack of security measures for handling web page structures. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks...

6.4CVSS6.6AI score0.03356EPSS
SaveExploits1References9Affected Software4
Positive Technologies
Positive Technologies
•added 2022/02/02 12:00 a.m.•18 views

PT-2022-6479 · Zabbix +2 · Zabbix +2

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to the lack of protection of the web page structure in Zabbix. An authenticated user can create a link with reflected Javascript code for the items' page and send it to...

9.9CVSS6.1AI score0.01606EPSS
SaveExploits3References96
BDU FSTEC
BDU FSTEC
•added 2022/02/01 12:00 a.m.•16 views

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

6.4CVSS6.5AI score0.00759EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/02/01 12:00 a.m.•17 views

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

6.4CVSS6.5AI score0.00759EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/02/01 12:00 a.m.•13 views

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

6.4CVSS6.5AI score0.00759EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/02/01 12:00 a.m.•12 views

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

6.4CVSS6.5AI score0.00759EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/02/01 12:00 a.m.•19 views

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

6.4CVSS6.5AI score0.00759EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/02/01 12:00 a.m.•18 views

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

6.4CVSS6.5AI score0.00759EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder