Lucene search
+L

2399 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/02/12 12:00 a.m.30 views

Microsoft Windows gdiplus bHandleExtCreateFont Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.4AI score0.07708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/02/12 12:00 a.m.32 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

7CVSS3.8AI score0.19059EPSS
SaveExploits0References1
Source Incite
Source Incite
added 2019/02/09 12:00 a.m.34 views

SRC-2019-0072 : Adobe Acrobat Pro DC Type 2 Charstring put Out-of-Bounds Read Information Disclosure Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...

7.5CVSS8.4AI score0.03011EPSS
SaveExploits1
Veracode
Veracode
added 2019/02/07 9:04 a.m.32 views

Denial Of Service (DoS)

libcurl.so is vulnerable to denial of service DoS. The vulnerability is possible because it does not properly handle the end-of-response for SMTP, leading to an out-of-bounds read if the strtol function is called. Therefore, it causes reading beyond the allocated buffer...

7.5CVSS8.1AI score0.04286EPSS
SaveExploits1References13Affected Software5
Zero Day Initiative
Zero Day Initiative
added 2019/01/25 12:00 a.m.27 views

Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.9AI score0.04647EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/25 12:00 a.m.29 views

Foxit PhantomPDF AFParseDateEx Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1AI score0.04088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/25 12:00 a.m.31 views

Cisco WebEx Network Recording Player ARF File Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS4.8AI score0.0148EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/25 12:00 a.m.39 views

Foxit PhantomPDF PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.1AI score0.0429EPSS
SaveExploits0References1
NVD
NVD
added 2019/01/24 4:29 a.m.23 views

CVE-2018-17699

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS6.2AI score0.04088EPSS
SaveExploits0References2
Prion
Prion
added 2019/01/24 4:29 a.m.32 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

4.3CVSS6.2AI score0.24397EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2019/01/24 4:00 a.m.31 views

CVE-2018-17699

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.2AI score0.04088EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2019/01/22 12:00 a.m.26 views

Adobe Acrobat Pro DC TTF Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5.5CVSS1.8AI score0.02958EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.32 views

LAquis SCADA LQS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS1.8AI score0.03726EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/17 12:00 a.m.30 views

Oracle Outside In vsxl5 GelFrame Record Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Oracle Outside In. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS2.7AI score0.01704EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/17 12:00 a.m.34 views

Oracle VirtualBox crUnpackExtendGetAttribLocation Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

5.5CVSS2.3AI score0.01133EPSS
SaveExploits2References1
Veracode
Veracode
added 2019/01/15 9:05 a.m.31 views

Arbitrary Code Execution

QEMU is vulnerable to arbitray code execution. A local guest user is able to write arbitrary data outside of VRAM-allocated buffer boundaries in the host's application address space due to insufficient checks in the Cirrus blit region, leading to execution of arbitrary code...

4.6CVSS9.1AI score0.00603EPSS
SaveExploits0References31Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2019/01/09 12:00 a.m.29 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

7CVSS3.8AI score0.13596EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/09 12:00 a.m.41 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

7CVSS3.8AI score0.13596EPSS
SaveExploits0References1
Prion
Prion
added 2019/01/03 11:29 p.m.17 views

Memory corruption

An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. They allowed Denial of Service application crash via image data, because two bytes are written to the end of the allocated memory without judging whether this will cause corruption...

4.3CVSS5.4AI score0.01269EPSS
SaveExploits0References1Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2019/01/02 12:00 a.m.35 views

Horner Automation Cscape CSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Horner Automation Cscape. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.1AI score0.0167EPSS
SaveExploits0References1
Rows per page
Query Builder