Lucene search
+L

1561 matches found

Positive Technologies
Positive Technologies
•added 2020/10/25 12:00 a.m.•10 views

PT-2020-6496

Name of the Vulnerable Software and Affected Versions datatables.net affected versions not specified Description The issue is related to insufficient control of modification of dynamically defined object properties, which can be exploited by a remote attacker to execute arbitrary code or cause a...

7.5CVSS8.3AI score0.03715EPSS
SaveExploits2References21
CNVD
CNVD
•added 2020/09/30 12:00 a.m.•10 views

QEMU code issue vulnerability (CNVD-2020-61976)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. QEMU idecanceldmasync contains a security vulnerability that can be exploited by an attacker to force the dereference of a NU...

3.2CVSS9AI score0.00467EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/09/25 5:42 a.m.•45 views

CVE-2020-26108

cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution SEC-488...

9.7AI score0.02475EPSS
SaveExploits0References1
NVD
NVD
•added 2020/09/16 3:15 p.m.•34 views

CVE-2020-24890

libraw 20.0 has a null pointer dereference vulnerability in parsetiffifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way...

5.5CVSS0.01551EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2020/09/16 2:39 p.m.•88 views

CVE-2020-24890

libraw 20.0 has a null pointer dereference vulnerability in parsetiffifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way...

6.1AI score0.01551EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2020/09/16 12:00 a.m.•7 views

PT-2020-16080 · Gnu +4 · Gnuplot +4

Name of the Vulnerable Software and Affected Versions: gnuplot version 5.4 Description: The issue is related to the com line function in command.c which leads to an out-of-bounds write from strncpy, potentially resulting in arbitrary code execution. Recommendations: For gnuplot version 5.4,...

9.8CVSS7AI score0.02631EPSS
SaveExploits7References40
CNVD
CNVD
•added 2020/07/30 12:00 a.m.•23 views

TYPO3 Backend User Interface component code issue vulnerability (CNVD-2021-26155)

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland.Backend User Interface is one of the backend user interface components. A code issue vulnerability exists in the Backend User Interface component in TYPO3 versions 9.0.0 through...

8.8CVSS6.7AI score0.02229EPSS
SaveExploits0References1
Prion
Prion
•added 2020/07/22 8:15 p.m.•24 views

Out-of-bounds

Adobe Prelude versions 9.0 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...

6.8CVSS8.9AI score0.0391EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2020/07/22 7:19 p.m.•26 views

EUVD-2020-30464

Adobe Prelude versions 9.0 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...

8.8CVSS8.9AI score0.0391EPSS
SaveExploits0References1
EUVD
EUVD
•added 2020/07/22 7:17 p.m.•15 views

EUVD-2020-30468

Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...

8.8CVSS8.9AI score0.03482EPSS
SaveExploits0References1
OSV
OSV
•added 2020/07/09 3:15 p.m.•10 views

CVE-2020-12404

For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnerability affects Firefox for iOS 26...

4.3CVSS5.8AI score
SaveExploits0References2
CNVD
CNVD
•added 2020/06/28 12:00 a.m.•26 views

Bitrix24 Code Issue Vulnerability

Bitrix24 is a suite of enterprise social platforms from Bitrix USA. The platform includes features such as online communication, calendar management and CRM Customer Relationship Management. A code issue vulnerability exists in Bitrix24 version 20.0.975 and prior versions. The vulnerability stems...

9.8CVSS7.1AI score0.02028EPSS
SaveExploits1References1
EUVD
EUVD
•added 2020/06/12 1:13 p.m.•16 views

EUVD-2020-30420

Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...

8.8CVSS8.9AI score0.04463EPSS
SaveExploits0References1
EUVD
EUVD
•added 2020/06/12 1:10 p.m.•13 views

EUVD-2020-30421

Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...

8.8CVSS8.9AI score0.04463EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/06/11 12:00 a.m.•157 views

Access-Policy Code Execution Vulnerability

access-policy is an access policy encoder/parser. A security vulnerability exists in access-policy 3.1.0 and earlier versions, which originates when user input provided to the 'template' function is executed by the 'eval' function. An attacker could exploit this vulnerability to execute code...

9.8CVSS6.9AI score0.02512EPSS
SaveExploits1References1
Veracode
Veracode
•added 2020/05/15 2:24 a.m.•31 views

Arbitrary Code Execution

libvncserver is vulnerable to arbitrsary code execution. An integer overflow in HandleCursorShape results in heap-based buffer overflow allowing for arbitrary code execution...

9.8CVSS5.3AI score0.02497EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
•added 2020/05/08 3:20 p.m.•14 views

CVE-2019-17287

...

SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/04/28 12:00 a.m.•11 views

PT-2020-2479 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 10.0.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability in the file manager. Successful exploitation could lead to arbitrary code execution, allowing a remote attacker to execute code...

10CVSS7.5AI score0.02784EPSS
SaveExploits0References7
Veracode
Veracode
•added 2020/04/10 12:36 a.m.•26 views

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox...

10CVSS4.4AI score0.03733EPSS
SaveExploits1References16Affected Software2
attackerkb
attackerkb
•added 2020/03/17 12:00 a.m.•44 views

CVE-2020-3950

VMware Fusion 11.x before 11.5.2, VMware Remote Console for Mac 11.x and prior before 11.0.1 and Horizon Client for Mac 5.x and prior before 5.4.0 contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with...

7.8CVSS8AI score0.07254EPSS
SaveIn wildExploits10References5
Rows per page
Query Builder