Lucene search
K

15 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2013-7077

Malware in sbrugna...

5CVSS6.4AI score0.00231EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-21542

Malware in sbrugna...

7.8CVSS7.7AI score0.0066EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-51304

Malicious code in bioql PyPI...

7.8CVSS7.7AI score0.00713EPSS
Exploits0References1
CVE
CVE
added 2025/02/19 5:54 p.m.77 views

CVE-2025-1118

CVE-2025-1118 affects grub2 where the dump command is not blocked in lockdown/Secure Boot mode, allowing a local attacker to read arbitrary memory (signatures, salts, and other sensitive data). The issue is tied to grub2 memory access during lockdown and memory leakage from the dump/read path. Pu...

4.4CVSS5.5AI score0.00017EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2024/06/12 12:0 a.m.9 views

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.00074EPSS
Exploits0References1
NVD
NVD
added 2023/06/26 10:15 p.m.5 views

CVE-2023-35695

A remote attacker could leverage a vulnerability in Trend Micro Mobile Security Enterprise 9.8 SP5 to download a particular log file which may contain sensitive information regarding the product...

7.5CVSS7.5AI score0.0021EPSS
Exploits1References2
OSV
OSV
added 2023/06/15 9:30 p.m.6 views

GHSA-66C9-XRWJ-9XV6 Magento Open Source affected by Improper Input Validation

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An admin privileged attacker could leverage this vulnerability to impact the availability of a user's...

5.1CVSS3.3AI score0.00045EPSS
Exploits0References3
Exploit DB
Exploit DB
added 2022/01/18 12:0 a.m.341 views

OpenBMCS 2.4 - Information Disclosure

Exploit Title: OpenBMCS 2.4 - Information Disclosure Exploit Author: LiquidWorm Date: 26/10/2021 OpenBMCS 2.4 Secrets Disclosure Vendor: OPEN BMCS Product web page: https://www.openbmcs.com Affected version: 2.4 Summary: Building Management & Controls System BMCS. No matter what the size of your...

7.4AI score
Exploits0
Prion
Prion
added 2021/10/18 1:15 p.m.12 views

Heap overflow

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a heap-corruption condition. An attacker could leverage this vulnerability to execute code in the context of the current process...

6.8CVSS7.5AI score0.00555EPSS
Exploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.33 views

Foxit Studio Photo EPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.2AI score0.00211EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/29 12:0 a.m.23 views

Foxit Reader AcroForm value Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

3.3CVSS0.5AI score0.00236EPSS
Exploits0References1
Veracode
Veracode
added 2019/01/03 6:15 a.m.36 views

Remote Code Execution (RCE)

jackson-databind is susceptible to deserialisation vulnerability. The vulnerability is due to the lack of openjpa class blockage, allowing a remote attacker to leverage this vulnerability to execute arbitrary code...

9.8CVSS9.4AI score0.02501EPSS
Exploits0References46Affected Software4
Zero Day Initiative
Zero Day Initiative
added 2018/04/06 12:0 a.m.37 views

Apple Safari RenderObject Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS2AI score0.00549EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/02/27 12:0 a.m.26 views

Adobe Acrobat Pro DC JPEG Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

6.8CVSS5.6AI score0.26272EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2009/09/24 12:0 a.m.16 views

Changetrack Local Privilege Escalation Vulnerability

This host has Changetrack installed and is prone to Local Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodchangetrackprivescalationvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Changetrack Local Privilege Escalation Vulnerability Authors: Sharath S Copyright: Copyright c...

7.2CVSS0.9AI score0.00226EPSS
Exploits1References4
Rows per page
Query Builder