Lucene search
+L

781 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.25 views

Apple macOS AppleIntelKBLGraphics IOCTL 0x10012 Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of IOCTL...

7.8CVSS3.5AI score0.00578EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/30 12:0 a.m.6 views

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system from Apple Inc. that was developed specifically for Mac computers. A security vulnerability exists in Apple macOS that stems from a lack of proper validation of user-supplied data, which could result in reading more than the end of an allocated data...

5.5CVSS7AI score0.00817EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.45 views

Apple macOS AudioCodecs MP4 File Parsing Signed to Unsigned Conversion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioCodecs module...

7.8CVSS5.6AI score0.01119EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.50 views

Apple macOS AudioCodecs MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioCodecs module...

7.8CVSS5.5AI score0.02147EPSS
SaveExploits0References1
Fedora
Fedora
added 2021/03/22 1:4 a.m.47 views

[SECURITY] Fedora 33 Update: glib2-2.66.8-1.fc33

GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system...

5.3CVSS6.9AI score0.02622EPSS
SaveExploits1
Fedora
Fedora
added 2021/03/20 12:21 a.m.35 views

[SECURITY] Fedora 34 Update: glib2-2.67.6-2.fc34

GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system...

5.5CVSS1.7AI score0.00639EPSS
SaveExploits1
Zero Day Initiative
Zero Day Initiative
added 2021/03/16 12:0 a.m.34 views

Siemens Solid Edge Viewer FBX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.7AI score0.0208EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/16 12:0 a.m.43 views

Siemens Solid Edge Viewer 3DS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score0.0208EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/24 12:0 a.m.33 views

Siemens JT2Go PAR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PAR...

7.8CVSS4.8AI score0.00646EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/02/24 12:0 a.m.36 views

Siemens JT2Go PAR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PAR...

7.8CVSS4.8AI score0.00653EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/02/16 12:0 a.m.8 views

Less-openui5 Injection Vulnerability

An injection vulnerability exists in Less-openui5, which arises when a network system or product lacks proper validation of user input during the course of an operation to construct a command, data structure, or record, and fails to filter, or fails to correctly filter out, specific elements of t...

7.8CVSS7.1AI score0.00988EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2021/02/12 12:0 a.m.40 views

Apple macOS ImageIO PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

7.8CVSS5.2AI score0.00938EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/02/11 12:0 a.m.10 views

Is-user-valid Injection Vulnerability

An injection vulnerability exists in Is-user-valid, which arises when, during the course of a user input operation to construct a command, data structure, or record, the network system or product lacks proper validation of the user input data, and fails to filter, or fails to correctly filter out...

7.5CVSS7.1AI score0.01419EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
added 2021/02/10 12:0 a.m.40 views

Adobe Photoshop U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D...

7.8CVSS4.5AI score0.03357EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/04 12:0 a.m.46 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00922EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/04 12:0 a.m.57 views

Apple macOS CoreText TTF Parsing Out-of-Bounds Write Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the CoreText library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing o...

7.8CVSS5.5AI score0.01748EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/04 12:0 a.m.36 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ModelIO...

7.8CVSS5.5AI score0.01084EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/04 12:0 a.m.40 views

Apple macOS CoreText TTF Parsing Out-of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the CoreText library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS3.6AI score0.01947EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/04 12:0 a.m.33 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.01089EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/04 12:0 a.m.47 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00854EPSS
SaveExploits0References1
Rows per page
Query Builder