Lucene search
+L

819 matches found

CNNVD
CNNVD
•added 2021/02/11 12:00 a.m.•17 views

Is-user-valid Injection Vulnerability

An injection vulnerability exists in Is-user-valid, which arises when, during the course of a user input operation to construct a command, data structure, or record, the network system or product lacks proper validation of the user input data, and fails to filter, or fails to correctly filter out...

7.5CVSS7.1AI score0.01419EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
•added 2021/02/10 12:00 a.m.•44 views

Adobe Photoshop U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D...

7.8CVSS4.5AI score0.03476EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/04 12:00 a.m.•56 views

Apple macOS ImageIO PICT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

7.8CVSS5.2AI score0.01082EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/04 12:00 a.m.•54 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00854EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/04 12:00 a.m.•64 views

Apple macOS CoreText TTF Parsing Out-of-Bounds Write Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the CoreText library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing o...

7.8CVSS5.5AI score0.01748EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/04 12:00 a.m.•43 views

Apple macOS CoreText TTF Parsing Out-of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the CoreText library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS3.6AI score0.01947EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/04 12:00 a.m.•37 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.01089EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/04 12:00 a.m.•50 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00922EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/04 12:00 a.m.•43 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ModelIO...

7.8CVSS5.5AI score0.01084EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/03 12:00 a.m.•47 views

Apple iOS FairplayIOKit Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Apple iOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the FairplayIOK...

5.6CVSS3.6AI score0.01205EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/29 12:00 a.m.•46 views

Schneider Electric IGSS CGF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.1AI score0.02477EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/20 12:00 a.m.•30 views

Siemens Solid Edge Viewer PAR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.7AI score0.02625EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•55 views

Siemens JT2Go SGI and RGB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SGI a...

7.8CVSS4.8AI score0.03492EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•35 views

Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS4.9AI score0.02534EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•45 views

Siemens JT2Go PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

7.8CVSS4.6AI score0.03042EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•37 views

Siemens JT2Go PAR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PAR...

7.8CVSS4.5AI score0.03439EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•38 views

Siemens JT2Go CG4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CG4...

7.8CVSS4.6AI score0.0308EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•31 views

Panasonic Control FPWIN Pro Project File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Panasonic Control FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.7AI score0.01191EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•38 views

Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS5.2AI score0.02534EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•39 views

Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS5.3AI score0.01896EPSS
SaveExploits0References1
Rows per page
Query Builder