Lucene search
+L

1591 matches found

Zero Day Initiative
Zero Day Initiative
added 2025/02/04 12:0 a.m.10 views

Microsoft Edge ms-its: Scheme Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file while in Internet Explorer mode. The specific flaw...

7.5CVSS7.3AI score
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/30 6:24 p.m.20 views

CVE-2025-24502

An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client IP address...

5.3CVSS0.00217EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.14 views

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created malware file...

7.8CVSS6.4AI score0.00212EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.8 views

The vulnerability of the Adobe Framemaker desktop publishing system arises from buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the desktop publishing system Adobe Framemaker arises from an overflow in the buffer of the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00484EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.9 views

The vulnerability of the Adobe Bridge file manager, caused by a loss of precision for an integer, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager arises from a loss of precision for a whole number. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS5.9AI score0.00459EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.5 views

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially created...

7.8CVSS6.4AI score0.00212EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.11 views

The vulnerability of the Substance 3D Stager software lies in buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in buffer overflow attacks within the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created malicious file...

7.8CVSS6.3AI score0.00259EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.5 views

Adobe Substance 3D Stager 缓冲区错误漏洞

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Stager that can be exploited by an attacker to cause arbitrary code to be executed in the current user's context...

7.8CVSS7.1AI score0.00212EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.7 views

Adobe Substance 3D Designer 安全漏洞

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.9AI score0.00257EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.5 views

Adobe Substance 3D Stager 安全漏洞

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.9AI score0.00259EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.6 views

Adobe Substance 3D Stager 安全漏洞

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Stager that can be exploited by an attacker to cause arbitrary code to be executed in the current user's context...

7.8CVSS7.1AI score0.00259EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.4 views

Adobe Substance 3D Stager 缓冲区错误漏洞

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Stager that can be exploited by an attacker to cause arbitrary code to be executed in the current user's context...

7.8CVSS7.1AI score0.00212EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.6 views

Adobe Illustrator 数字错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator that can be exploited by an attacker to cause arbitrary code to be executed in the current user's context...

7.8CVSS7.1AI score0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.8 views

Adobe Substance 3D Designer 安全漏洞

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.9AI score0.00257EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.6 views

Adobe Illustrator 数字错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator that can be exploited by an attacker to cause arbitrary code to be executed in the current user's context...

7.8CVSS7.1AI score0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/10 12:0 a.m.11 views

Adobe Substance 3D Sampler 缓冲区错误漏洞

Adobe Substance 3D Sampler is a photogrammetry software from the American company Audobee Adobe. It is used to convert photo captures and scanned images into 3D textures and material assets. Adobe Substance 3D Sampler suffers from an out-of-bounds write vulnerability that can be exploited by an...

7.8CVSS7.8AI score0.00319EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/10 12:0 a.m.5 views

Adobe Substance 3D Modeler 缓冲区错误漏洞

Adobe Substance 3D Modeler is a 3D modeling and sculpting software from the American company Audobee Adobe. Adobe Substance 3D Modeler suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.8AI score0.00431EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.11 views

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks lies in the lack of security measures regarding SQL query structures. This allows attackers to execute arbitrary code within the root user’s context.

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the root...

9CVSS7.7AI score0.67711EPSS
SaveExploits0References5
OSV
OSV
added 2024/11/18 6:15 a.m.5 views

CVE-2024-52945

An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to impel the user to execute the commands, a malicious DLL...

7.8CVSS6AI score0.00228EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/11/15 12:0 a.m.69 views

Adobe Photoshop Digital Error Vulnerability (CNVD-2025-24445)

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from a numeric error vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the current...

7.8CVSS7.3AI score0.00299EPSS
SaveExploits0References1
Rows per page
Query Builder