Lucene search
+L

2400 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/08/14 12:00 a.m.51 views

Microsoft Chakra Inline Cache Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementatio...

7.5CVSS2.6AI score0.0451EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/13 12:00 a.m.37 views

Microsoft Windows WalletService Race Condition Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

2.5CVSS4.6AI score0.00931EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/13 12:00 a.m.41 views

Microsoft Windows findBaseLigature TTF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.9AI score0.07087EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/13 12:00 a.m.39 views

Microsoft Windows WalletService Race Condition Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

2.5CVSS4.6AI score0.00931EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/12 12:00 a.m.50 views

Adobe Acrobat Pro DC updateFeed Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS0.8AI score0.02817EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/12 12:00 a.m.46 views

Adobe Acrobat Pro DC removeFeed Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.4AI score0.02817EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/10 12:00 a.m.24 views

Delta Industrial Automation TPEditor TPE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation TPEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.8AI score0.02641EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/08/07 12:00 a.m.286 views

SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2020:2143-1)

This update for java-11-openjdk fixes the following issues : Update to upstream tag jdk-11.0.8+10 July 2020 CPU, bsc1174157 - Security fixes : + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support + JDK-8233234: Better Zip Naming +...

8.3CVSS6.6AI score0.05166EPSS
SaveExploits0References18
Veracode
Veracode
added 2020/08/06 9:35 p.m.87 views

Remote Code Execution (RCE)

PHP is vulnerable to remote code execution RCE. While using mbstrtolower function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution...

8.8CVSS3.7AI score0.04883EPSS
SaveExploits1References8Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2020/08/05 12:00 a.m.28 views

Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta Industrial Automation CNCSoft ScreenEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

3.3CVSS3.4AI score0.01434EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/05 12:00 a.m.49 views

Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta Industrial Automation CNCSoft ScreenEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

3.3CVSS3.5AI score0.01434EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/05 12:00 a.m.32 views

Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta Industrial Automation CNCSoft ScreenEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

3.3CVSS3.4AI score0.01434EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/05 12:00 a.m.46 views

Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta Industrial Automation CNCSoft ScreenEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

3.3CVSS3.5AI score0.01434EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/05 12:00 a.m.43 views

Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta Industrial Automation CNCSoft ScreenEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

3.3CVSS3.4AI score0.01434EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/05 12:00 a.m.34 views

Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta Industrial Automation CNCSoft ScreenEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

3.3CVSS3.4AI score0.01434EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/22 12:00 a.m.48 views

Adobe Photoshop MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS2.5AI score0.04235EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/22 12:00 a.m.41 views

Adobe Prelude MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Prelude. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS2.8AI score0.04848EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/22 12:00 a.m.45 views

Adobe Bridge MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of MP4...

7.8CVSS4.3AI score0.03832EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/22 12:00 a.m.35 views

Adobe Bridge MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of MP4...

7.8CVSS4.3AI score0.0385EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/20 12:00 a.m.44 views

Oracle VirtualBox virtio-net Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

5.3CVSS2.8AI score0.00538EPSS
SaveExploits0References1
Rows per page
Query Builder