Lucene search
+L

8246 matches found

Microsoft Security Update
Microsoft Security Update
•added 2021/12/14 6:00 p.m.•31 views

Visual Studio 2022 version 17.0.3 update

Visual Studio 2022 version 17.0.3 security update. This update applies to all affected editions of Visual Studio 2022 version lower than 17.0.3 on the Current channel. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the clie...

1.6AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/12/14 12:15 p.m.•10 views

CVE-2021-44450

A vulnerability has been identified in JT Utilities All versions V12.8.1.1, JTTK All versions V10.8.1.1. JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak...

7.8CVSS7.2AI score0.00654EPSS
SaveExploits0References2
NVD
NVD
•added 2021/12/14 12:15 p.m.•40 views

CVE-2021-44008

A vulnerability has been identified in JT2Go All versions V13.2.0.5, Teamcenter Visualization All versions V13.2.0.5. The TiffLoader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak...

5.5CVSS0.00951EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/12/14 12:00 a.m.•57 views

Bentley View JT File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

7.8CVSS5.6AI score0.02005EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/12/14 12:00 a.m.•24 views

Adobe Dimension buffer error vulnerability

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. A memory corruption vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause arbitrary code to be executed in the context of the current user...

9.3CVSS6AI score0.03062EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2021/12/14 12:00 a.m.•25 views

Adobe Dimension buffer error vulnerability

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause arbitrary code to be executed in the context of the current user...

9.3CVSS6AI score0.03248EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2021/12/14 12:00 a.m.•29 views

Adobe Dimension buffer error vulnerability

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause arbitrary code to be executed in the context of the current user...

9.3CVSS6AI score0.03248EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2021/12/14 12:00 a.m.•22 views

Adobe Media Encoder buffer error vulnerability

Adobe Media Encoder, an audio and video encoding application from Adobe, is vulnerable to a memory corruption vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

9.3CVSS6.2AI score0.01969EPSS
SaveExploits0References5
CNVD
CNVD
•added 2021/12/14 12:00 a.m.•66 views

Bentley View JT File Parsing Memory Corruption Remote Code Execution Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which is caused by a lack of proper validation of user-supplied data and can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS5.5AI score0.01897EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/12/13 11:15 a.m.•12 views

CVE-2021-24925

The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the currentmonthdivider parameter of its meclistloadmore AJAX call available to both unauthenticated and authenticated users before outputting it back in the response, leading to a Reflected Cross-Site...

6.1CVSS6.3AI score0.00822EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2021/12/13 11:15 a.m.•22 views

CVE-2021-24925

The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the currentmonthdivider parameter of its meclistloadmore AJAX call available to both unauthenticated and authenticated users before outputting it back in the response, leading to a Reflected Cross-Site...

6.1CVSS6.4AI score0.00822EPSS
SaveExploits2References1
CNVD
CNVD
•added 2021/12/13 12:00 a.m.•72 views

Bentley View Buffer Overflow Vulnerability (CNVD-2021-101860)

Bentley View is a free viewer from Bentley Systems, U.S.A. Bentley View is vulnerable to a buffer overflow vulnerability that stems from a boundary error when processing JT files. An attacker could exploit this vulnerability to execute code in the context of the current process...

7.8CVSS4.2AI score0.01937EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/12/13 12:00 a.m.•6 views

PT-2021-16370

Name of the Vulnerable Software and Affected Versions: The Modern Events Calendar Lite WordPress plugin versions prior to 6.1.5 Description: The issue concerns a Reflected Cross-Site Scripting problem. It arises because the current month divider parameter of the "mec list load more" AJAX call is...

6.1CVSS0.00822EPSS
SaveExploits2References4
CNVD
CNVD
•added 2021/12/12 12:00 a.m.•62 views

Bentley View JT File Memory Misreference Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View is vulnerable to a memory misreference vulnerability that results from not verifying the existence of an object before performing an operation on it. An attacker could exploit this vulnerability to execute code in the context o...

7.8CVSS3.2AI score0.0205EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/12/12 12:00 a.m.•81 views

Bentley View BMP File Parsing Stack Buffer Overflow Vulnerability

Bentley View, a free viewer from Bentley Systems, Inc. A stack buffer overflow vulnerability exists in Bentley View BMP file parsing, which is due to a failure to properly validate the length of user-supplied data before copying it to the heap buffer. An attacker could exploit this vulnerability ...

7.8CVSS4.4AI score0.02123EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/12/12 12:00 a.m.•88 views

Bentley View J2K File Parsing Memory Misreference Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. A memory mis-reference vulnerability exists in Bentley View J2K File Parsing, which results from not verifying the existence of an object prior to J2K File Parsing. An attacker could exploit this vulnerability to execute code in the context...

7.8CVSS5.2AI score0.02005EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/08 3:15 p.m.•33 views

CVE-2021-25521

Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet...

4CVSS0.00217EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/12/08 3:15 p.m.•12 views

CVE-2021-25521

Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet...

4CVSS4.8AI score0.00217EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/12/08 3:15 p.m.•20 views

CVE-2021-25521

Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet...

3.3CVSS5.8AI score0.00217EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/08 3:15 p.m.•31 views

Code injection

Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet...

2.1CVSS4.1AI score0.00217EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder