Lucene search
+L

1747 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.52 views

Bentley MicroStation CONNECT DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5AI score0.02087EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.69 views

Bentley MicroStation CONNECT JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.1AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.75 views

Bentley MicroStation CONNECT PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.1AI score0.01987EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/13 10:15 p.m.5 views

CVE-2021-34946

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score0.02041EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/01/13 10:15 p.m.9 views

CVE-2021-34926

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score0.01937EPSS
SaveExploits0References2
Prion
Prion
added 2022/01/13 10:15 p.m.29 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

6.8CVSS7.8AI score0.02041EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2022/01/13 10:15 p.m.25 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

6.8CVSS7.8AI score0.01996EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2022/01/11 12:00 a.m.5 views

PT-2022-1793 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Exchange Server, which can be exploited by a remote attacker to execute arbitrary code by sending...

9CVSS9.7AI score0.00927EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2022/01/11 12:00 a.m.2 views

PT-2022-1990 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Exchange Server, allowing a remote attacker to execute arbitrary code by sending specially crafted data ...

9CVSS9.8AI score0.01117EPSS
SaveExploits0References18
Zero Day Initiative
Zero Day Initiative
added 2022/01/06 12:00 a.m.28 views

Siemens JT2Go JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS7.7AI score0.01736EPSS
SaveExploits0References2
Prion
Prion
added 2021/12/21 7:15 p.m.24 views

Heap overflow

An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before 2022.12. Crafted data in a BMP file can trigger a write operation past the end of an allocated buffer, or lead to a heap-based buffer overflow. An attacker can leverage this...

6.8CVSS7.8AI score0.00869EPSS
SaveExploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:00 a.m.39 views

SAP 3D Visual Enterprise Viewer JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.7AI score0.01021EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:00 a.m.12 views

The vulnerability of Inforail’s mobile device management system allows a hacker to execute arbitrary code.

The vulnerability of Inforail’s mobile device management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data...

10CVSS8.3AI score0.62244EPSS
SaveExploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:00 a.m.14 views

The vulnerability of the QTS and QuTS operating systems, related to buffer overflows in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of the QTS and QuTS operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data...

10CVSS6AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:00 a.m.11 views

The vulnerabilities of the programmable logic controllers MELSEC iQ-R, MELSEC Q, and MELSEC L stem from insufficient checks on input data. This allows attackers to trigger malfunctions during maintenance operations.

The vulnerability of the programmable logic controllers MELSEC iQ-R, MELSEC Q, and MELSEC L exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause malfunctions through a specially crafted package...

7.8CVSS7.2AI score0.02988EPSS
SaveExploits0References4Affected Software10
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:00 a.m.16 views

The vulnerability of the StatServer service in the Avalanche mobile device management system allows a hacker to execute arbitrary code.

The vulnerability of the StatServer service in the Avalanche mobile device management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data...

10CVSS8.3AI score0.65833EPSS
SaveExploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.14 views

The vulnerability of the TCP/IP protocol implementation in the Microsoft Windows operating system allows a perpetrator to cause a service failure.

The vulnerability of the TCP/IP protocol implementation in the Microsoft Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted input data to the application...

7.8CVSS7.2AI score0.03253EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:00 a.m.39 views

Bentley View JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5.2AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:00 a.m.41 views

Bentley View JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5AI score0.01937EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:00 a.m.37 views

Bentley View JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2...

7.8CVSS5.1AI score0.02005EPSS
SaveExploits0References1
Rows per page
Query Builder