Lucene search
+L

5934 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/05/17 12:0 a.m.12 views

Siemens Simcenter Femap IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.0039EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/05/17 12:0 a.m.21 views

Siemens Simcenter Femap IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.9AI score0.0039EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/05/17 12:0 a.m.21 views

Siemens Simcenter Femap IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.9AI score0.0039EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/05/15 12:0 a.m.11 views

The vulnerability of the can_map_frag() function in the net/ipv4/tcp.c module of the Linux operating system’s IPv4 protocol implementation allows a attacker to cause a service failure.

The vulnerability of the canmapfrag function in the net/ipv4/tcp.c module of the Linux operating system’s IPv4 protocol implementation is related to the lack of necessary data validation checks. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS6.5AI score0.0024EPSS
SaveExploits0References37Affected Software4
OSV
OSV
added 2024/05/14 3:25 p.m.2 views

DEBIAN-CVE-2024-31443

Cacti provides an operational monitoring and fault management framework. Prior to 1.2.27, some of the data stored in formsave function in dataqueries.php is not thoroughly checked and is used to concatenate the HTML statement in growrightpanetree function from lib/html.php , finally resulting in...

5.4CVSS7.8AI score0.00838EPSS
SaveExploits1References1
OSV
OSV
added 2024/05/14 9:37 a.m.6 views

SUSE-SU-2024:1635-2 Security update for tpm2-0-tss

This update for tpm2-0-tss fixes the following issues: - CVE-2024-29040: Fixed quote data validation by FapiVerifyQuote bsc1223690...

4.3CVSS4.7AI score0.00346EPSS
SaveExploits0References3
OSV
OSV
added 2024/05/14 9:36 a.m.8 views

SUSE-SU-2024:1635-1 Security update for tpm2-0-tss

This update for tpm2-0-tss fixes the following issues: - CVE-2024-29040: Fixed quote data validation by FapiVerifyQuote bsc1223690...

4.3CVSS4.7AI score0.00346EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2024/05/14 12:0 a.m.30 views

openSUSE Security Advisory (openSUSE-SU-2024:0123-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.19883EPSS
SaveExploits26References12
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.10 views

CemiPark 跨站脚本漏洞

CemiPark is an application from CemiPark, Inc. A cross-site scripting vulnerability exists in CemiPark that stems from an inability to properly validate user-entered data, allowing stored cross-site scripting XSS attacks...

7.2CVSS5.5AI score0.00907EPSS
SaveExploits0References5
OSV
OSV
added 2024/05/10 2:13 p.m.5 views

SUSE-SU-2024:1605-1 Security update for tpm2-0-tss

This update for tpm2-0-tss fixes the following issues: - CVE-2024-29040: Fixed quote data validation by FapiVerifyQuote bsc1223690...

4.3CVSS4.6AI score0.00346EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2024/05/09 12:0 a.m.14 views

Dassault Systèmes eDrawings Viewer DXF File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00322EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/05/09 12:0 a.m.20 views

Dassault Systèmes eDrawings Viewer DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00322EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/05/09 12:0 a.m.24 views

Dassault Systèmes eDrawings Viewer DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00322EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/05/09 12:0 a.m.7 views

Delta Electronics CNCSoft-G2 Buffer Overflow Vulnerability

Delta Electronics CNCSoft is a CNC machine simulation system software from Delta Electronics Taiwan, China. A buffer overflow vulnerability exists in Delta Electronics CNCSoft-G2, which stems from a lack of proper validation of the length of user-supplied data before copying it into a stack-based...

7.8CVSS7.1AI score0.00322EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/07 11:15 p.m.23 views

CVE-2021-35002

BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of...

8.8CVSS9.2AI score0.01652EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/05/07 12:0 a.m.12 views

PT-2024-6344 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Description: The issue is related to insufficient data validation in the V8 API, which can be exploited by a remote attacker to potentially impact th...

10CVSS5.8AI score0.20547EPSS
SaveExploits28References273
RedhatCVE
RedhatCVE
added 2024/05/03 11:22 a.m.59 views

CVE-2023-27349

A vulnerability was found in the BlueZ Audio Profile AVRCP, stemming from the improper validation of array indices. This flaw resides in the AVRCP protocol handling and arises due to inadequate validation of user-supplied data. Consequently, it may lead to writing beyond the bounds of an allocate...

7.1CVSS7AI score0.01427EPSS
SaveExploits0References4
NVD
NVD
added 2024/05/03 3:16 a.m.27 views

CVE-2023-51561

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must...

5.5CVSS4.8AI score0.0041EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:16 a.m.5 views

CVE-2023-51560

Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS6.2AI score0.00421EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/05/03 3:16 a.m.29 views

CVE-2023-51559

Foxit PDF Reader Doc Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

3.3CVSS6.1AI score0.00319EPSS
SaveExploits0References1
Rows per page
Query Builder