Lucene search
+L

8246 matches found

osv_ghsa
osv_ghsa
•added 2021/12/08 12:01 a.m.•31 views

GHSA-WJQC-J537-J9GJ Command injection in git-it-electron

Git-it through 4.4.0 allows OS command injection at the Branches Aren't Just For Birds challenge step. During the verification process, it attempts to run the reflog command followed by the current branch name which is not sanitized for execution...

9.8CVSS9.8AI score0.03467EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2021/12/08 12:00 a.m.•21 views

Bentley Systems Bentley View buffer error vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

7.8CVSS5.9AI score0.02041EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/12/08 12:00 a.m.•8 views

PT-2021-16711

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 16.0.2 Description The issue is related to an insecure caller check in the sharevia deeplink logic, allowing untrusted applications to obtain the current tab URL in Samsung Internet. Recommendations For...

4CVSS0.00217EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•43 views

Bentley View JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5.9AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•47 views

Bentley View JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5AI score0.01937EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•46 views

Bentley View JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.5AI score0.01937EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•50 views

Bentley View JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.5AI score0.01937EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•50 views

Bentley View JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.5AI score0.01937EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•58 views

Bentley View JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5.9AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•49 views

Bentley View BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS5.9AI score0.02123EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•50 views

Bentley View 3DS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS...

7.8CVSS4.5AI score0.02103EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•47 views

Bentley View JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5AI score0.01937EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•43 views

Bentley View DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.5AI score0.0161EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•40 views

Bentley View JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.5AI score0.0205EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•51 views

Bentley View JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5AI score0.01945EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•53 views

Bentley View BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS5.9AI score0.02005EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•46 views

Bentley View JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5AI score0.01937EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•42 views

Bentley View JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2...

7.8CVSS5.1AI score0.02005EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•48 views

Bentley View JP2 File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.8AI score0.0161EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•72 views

Bentley View PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.7AI score0.01603EPSS
SaveExploits0References1
Rows per page
Query Builder