Lucene search
+L

8246 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•68 views

Bentley View FBX File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.6AI score0.01603EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•44 views

Bentley View J2K File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K...

7.8CVSS4.5AI score0.02123EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•46 views

Bentley View J2K File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K...

7.8CVSS4.5AI score0.02005EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•43 views

Bentley View JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5AI score0.01937EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/07 12:00 a.m.•38 views

Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

3.3CVSS1.7AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/12/07 12:00 a.m.•34 views

Tencent WeChat WAXM Decoder Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM Decoder. T...

8.8CVSS2.7AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/12/07 12:00 a.m.•46 views

Tencent WeChat WXAM Decoder Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM decoder. T...

8.8CVSS2.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/12/07 12:00 a.m.•24 views

Adobe Photoshop Elements Buffer Overflow

The vulnerability of Adobe Photoshop Elements relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS7.8AI score0.01872EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/12/07 12:00 a.m.•21 views

Adobe XMP-Toolkit-SDK Buffer Overflow Code Execution

The vulnerability of the Adobe XMP-Toolkit-SDK lies in the violation of the buffer’s initial boundary. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user, through a specially created application...

9.3CVSS7.7AI score0.02704EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/07 12:00 a.m.•15 views

Adobe Bridge Heap Buffer Overflow RCE

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user...

9.3CVSS8AI score0.03671EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/07 12:00 a.m.•16 views

Adobe Bridge Heap Buffer Overflow RCE

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user...

9.3CVSS8AI score0.0393EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/07 12:00 a.m.•20 views

Adobe Captivate 2019 Temporary File Permissions Privilege Escalation

The vulnerability of the program for creating interactive E-learning courses using ready-made slides from Adobe Captivate 2019 is related to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow a hacker to enhance their privileges in the context of th...

7.3CVSS7.2AI score0.00512EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2021/12/05 9:15 p.m.•36 views

CVE-2021-44047

A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write operation past the end ...

7.8CVSS0.00884EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/03 12:00 a.m.•25 views

OpenText Brava! Desktop XGL File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS2.4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/12/03 12:00 a.m.•18 views

OpenText Brava! Desktop JXR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.5AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/12/03 12:00 a.m.•23 views

OpenText Brava! Desktop JXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.7AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/12/03 12:00 a.m.•19 views

OpenText Brava! Desktop JXR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.8AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/12/03 12:00 a.m.•25 views

OpenText Brava! Desktop DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/12/03 12:00 a.m.•27 views

OpenText Brava! Desktop JXR File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/12/03 12:00 a.m.•21 views

OpenText Brava! Desktop DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.8AI score
SaveExploits0
Rows per page
Query Builder