Lucene search
+L

391 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.40 views

Bentley MicroStation CONNECT JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.73 views

Bentley MicroStation CONNECT JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.44 views

Bentley View JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5AI score0.02293EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.72 views

Bentley MicroStation CONNECT JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5AI score0.01913EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.68 views

Bentley View DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.7AI score0.01612EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/13 10:15 p.m.23 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

6.8CVSS7.8AI score0.01945EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2021/12/14 12:00 a.m.11 views

Siemens JT Utilities 缓冲区错误漏洞

JT is a publicly available data format developed by Siemens Digital Industry Software and is widely used for communication, visualization, numerical modeling, etc. The JT Utility provides a series of command line utilities that can be used to support application development and reuse of JT. The J...

7.8CVSS5.5AI score0.00633EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:00 a.m.49 views

Bentley View JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5.2AI score0.01937EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/06 6:17 p.m.50 views

GHSA-7HPJ-HFCR-5QWM Code injection in FreeIPA

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function berscanf was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger...

8.8CVSS6.9AI score0.07413EPSS
SaveExploits0References12
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:00 a.m.23 views

Open Design Alliance (ODA) ODAViewer DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6AI score0.01695EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/16 12:00 a.m.91 views

Open Design Alliance Drawings SDK has an unspecified vulnerability (CNVD-2021-89164)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for . An out - bound...

7.8CVSS3.2AI score0.01695EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/10 12:00 a.m.28 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS7.7AI score0.00884EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2021/11/03 3:12 p.m.51 views

Product Overview - Cynet Centralized Log Management

For most organizations today, the logs produced by their security tools and environments provide a mixed bag. On the one hand, they can be a trove of valuable data on security breaches, vulnerabilities, attack patterns, and general security insights. On the other, organizations don't have the rig...

6.6AI score
SaveExploits0
OSV
OSV
added 2021/10/18 1:15 p.m.9 views

CVE-2021-38436

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a memory-corruption condition. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS6.1AI score0.0097EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2021/09/12 11:30 a.m.63 views

ODBParser - OSINT Tool To Search, Parse And Dump Only The Open Elasticsearch And MongoDB Directories That Have The Data You Care About Exposing

ODBParser is a tool to search for PII being exposed in open databases. ONLY to be used to identify exposed PII and warn server owners of irresponsible database maintenance OR to query databases you have permission to access! PLEASE USE RESPONSIBLY What is this? Wrote this as wanted to create...

7.2AI score
SaveExploits0References1
NVD
NVD
added 2021/09/09 8:15 a.m.29 views

CVE-2021-1948

Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrago...

7.8CVSS0.00598EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/09 8:15 a.m.27 views

Out-of-bounds

Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrago...

7.8CVSS7.6AI score0.00598EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/09/09 7:35 a.m.41 views

CVE-2021-1948

Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrago...

7.5CVSS7.8AI score0.00598EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/09/09 12:00 a.m.15 views

Delta Electronics DOPSoft 安全漏洞

Delta Electronics DOPSoft is a set of human-machine interface HMI software from Delta Electronics in Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft 2, which arises from a lack of proper validation of user-supplied data when parsing a specific project file in the...

7.8CVSS5.9AI score0.01036EPSS
SaveExploits0References5
OSV
OSV
added 2021/07/29 6:15 p.m.11 views

UBUNTU-CVE-2021-23418

The package glances before 3.2.1 are vulnerable to XML External Entity XXE Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks...

9.8CVSS7.3AI score0.01639EPSS
SaveExploits1References8
Rows per page
Query Builder