Lucene search
+L

2400 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/02/04 12:00 a.m.62 views

Apple macOS CoreText TTF Parsing Out-of-Bounds Write Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the CoreText library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing o...

7.8CVSS5.5AI score0.01748EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/04 12:00 a.m.52 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00854EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/04 12:00 a.m.48 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00922EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/04 12:00 a.m.40 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ModelIO...

7.8CVSS5.5AI score0.01084EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/04 12:00 a.m.36 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.01089EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/03 12:00 a.m.46 views

Apple iOS FairplayIOKit Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Apple iOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the FairplayIOK...

5.6CVSS3.6AI score0.01205EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/29 12:00 a.m.42 views

Schneider Electric IGSS CGF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.1AI score0.02477EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/29 12:00 a.m.39 views

Schneider Electric IGSS CGF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.1AI score0.02499EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/22 12:00 a.m.49 views

Delta Industrial Automation TPEditor TPE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation TPEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.6AI score0.01191EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/21 12:00 a.m.139 views

Microsoft Windows splwow64 Out-Of-Bounds Read Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...

7.8CVSS4.7AI score0.01229EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/20 5:15 p.m.40 views

CVE-2020-25687

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker, who can create valid DNS replies, to cause an overflow in a heap-allocated memory...

5.9CVSS7.3AI score
SaveExploits0References8
OSV
OSV
added 2021/01/20 4:15 p.m.40 views

CVE-2020-25683

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocated memory...

5.9CVSS7.3AI score
SaveExploits0References8
AlpineLinux
AlpineLinux
added 2021/01/20 3:25 p.m.85 views

CVE-2020-25683

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocated memory...

7.1CVSS7.4AI score0.86041EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/01/20 12:00 a.m.29 views

Siemens Solid Edge Viewer PAR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.7AI score0.02625EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/18 12:00 a.m.43 views

Apple macOS CoreGraphics Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the CoreGraphi...

3.3CVSS3.4AI score0.00858EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:00 a.m.30 views

Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS4.9AI score0.0325EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:00 a.m.30 views

Delta Industrial Automation DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Delta Industrial Automation DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS4.7AI score0.0325EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:00 a.m.36 views

Siemens JT2Go CG4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CG4...

7.8CVSS4.6AI score0.0308EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:00 a.m.35 views

Siemens JT2Go PAR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PAR...

7.8CVSS4.5AI score0.03439EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:00 a.m.34 views

Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS4.7AI score0.02534EPSS
SaveExploits0References1
Rows per page
Query Builder