Lucene search
+L

987 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.22 views

Micro Focus Operations Bridge Manager CIService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.6AI score0.7699EPSS
SaveExploits6References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.26 views

Micro Focus Operations Bridge Manager ImpactService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.7AI score0.7699EPSS
SaveExploits6References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.35 views

Micro Focus Operations Bridge Manager HistoryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.2AI score0.7699EPSS
SaveExploits6References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.31 views

Micro Focus Operations Bridge Manager SchedulerService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS5AI score0.7699EPSS
SaveExploits6References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.18 views

Micro Focus Operations Bridge Manager ResourceManagementService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.5AI score0.7699EPSS
SaveExploits6References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.30 views

Micro Focus Operations Bridge Manager MailService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.5AI score0.7699EPSS
SaveExploits6References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.17 views

Micro Focus Operations Bridge Manager DataAcquisitionService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.7AI score0.7699EPSS
SaveExploits6References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.27 views

Micro Focus Operations Bridge Manager SoftwareLibraryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4AI score0.7699EPSS
SaveExploits6References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.51 views

Micro Focus Operations Bridge Manager CITService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.4AI score0.7699EPSS
SaveExploits6References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.34 views

Micro Focus Operations Bridge Manager LicensingService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.6AI score0.7699EPSS
SaveExploits6References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.30 views

Micro Focus Operations Bridge Manager PatternService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.5AI score0.7699EPSS
SaveExploits6References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.36 views

Micro Focus Operations Bridge Manager PackageFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.6AI score0.7699EPSS
SaveExploits6References1
CNVD
CNVD
added 2020/10/26 12:0 a.m.5 views

Oracle Solaris Remote Code Execution Vulnerability

Oracle Solaris is a UNIX operating system. A security vulnerability exists in the Oracle Solaris protocol handling, which allows remote attackers to exploit the vulnerability by submitting a special request that can be used to execute arbitrary code in the system context...

10CVSS9.4AI score0.79842EPSS
SaveExploits13References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/19 12:0 a.m.40 views

Microsoft Windows User Profile Service Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within handling of the...

5.5CVSS4.5AI score0.01553EPSS
SaveExploits0References1
NVD
NVD
added 2020/10/13 5:15 p.m.25 views

CVE-2020-17414

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handli...

7.8CVSS0.01909EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2020/09/28 12:0 a.m.43 views

Trend Micro Maximum Security Race Condition Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

5.3CVSS3.7AI score0.00298EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/25 12:0 a.m.37 views

Trend Micro Apex One Authentication Bypass Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...

7.8CVSS5AI score0.00482EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/10 12:0 a.m.44 views

Microsoft Windows State Repository Service Race Condition Use-After-Free Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Sta...

2.5CVSS4.2AI score0.01079EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/09/09 12:0 a.m.5 views

Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2021-01044)

Microsoft Exchange Server is a mail server and calendar server developed by Microsoft. A remote code execution vulnerability exists in Microsoft Exchange Server. An attacker could exploit this vulnerability to run arbitrary code in the System user context...

9CVSS9.6AI score0.47145EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:0 a.m.29 views

NEC ExpressCluster ApplyConfig XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressCluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the clpwebmc executable. Due to the improper restriction of XML External Enti...

7.5CVSS3AI score0.73962EPSS
SaveExploits0References1
Rows per page
Query Builder