Lucene search
+L

5935 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/03/28 12:0 a.m.30 views

Foxit PDF Reader AcroForm Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS7.2AI score0.00764EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/28 12:0 a.m.27 views

Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS7.2AI score0.00862EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/27 12:0 a.m.26 views

Autodesk DWG TrueView DWG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk DWG TrueView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

7.8CVSS7.2AI score0.0047EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/24 7:4 p.m.18 views

CVE-2024-29194 OneUptime Vulnerable to a Privilege Escalation via Local Storage Key Manipulation

OneUptime is a solution for monitoring and managing online services. The vulnerability lies in the improper validation of client-side stored data within the web application. Specifically, the ismasteradmin key, stored in the local storage of the browser, can be manipulated by an attacker. By...

8.3CVSS7.7AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:0 a.m.7 views

The vulnerability of the Windows operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of Windows operating system kernels is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using specially created data...

5.5CVSS6.6AI score0.01035EPSS
SaveExploits0References3
CNVD
CNVD
added 2024/03/22 12:0 a.m.25 views

FreeImage FreeImage_CreateICCProfile function buffer overflow vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. FreeImage suffers from a buffer overflow vulnerability that originates from the program failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a...

6.2CVSS7.2AI score0.00292EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2024/03/18 12:0 a.m.7 views

The vulnerability of the DCH-compatible Thunderbolt driver, related to the lack of data validation during operation, allows a hacker to trigger a service failure.

The vulnerability of the DCH-compatible Thunderbolt driver is related to the lack of data validation during return operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

2CVSS5.4AI score0.00246EPSS
SaveExploits0References8Affected Software1
Redos
Redos
added 2024/03/13 12:0 a.m.30 views

ROS-2-471

2.471 Multiple Vulnerabilities in Moodle CVE-2021-32472 - CVE-2021-32478 1. Vulnerability Description: CVE-2021-32478 A vulnerability exists due to insufficient cleansing of user-provided data at the LTI authorization endpoint. A remote attacker could trick a victim into clicking a specially...

7.5CVSS8.2AI score0.01128EPSS
SaveExploits0
NVD
NVD
added 2024/03/12 3:15 p.m.16 views

CVE-2024-1226

The software does not neutralize or incorrectly neutralizes certain characters before the data is included in outgoing HTTP headers. The inclusion of invalidated data in an HTTP header allows an attacker to specify the full HTTP response represented by the browser. An attacker could control the...

7.5CVSS7.2AI score0.00449EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/12 3:15 p.m.54 views

Cross site scripting

The software does not neutralize or incorrectly neutralizes certain characters before the data is included in outgoing HTTP headers. The inclusion of invalidated data in an HTTP header allows an attacker to specify the full HTTP response represented by the browser. An attacker could control the...

5CVSS7.1AI score0.00449EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/12 12:0 a.m.22 views

NI LabVIEW VI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI LabVIEW. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of VI files...

7.8CVSS7.8AI score0.00591EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/12 12:0 a.m.15 views

NI LabVIEW VI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI LabVIEW. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of VI files...

7.8CVSS7AI score0.00604EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:0 a.m.19 views

Dassault Systèmes eDrawings Viewer STL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:0 a.m.21 views

Dassault Systèmes eDrawings Viewer JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:0 a.m.17 views

Dassault Systèmes eDrawings IPT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:0 a.m.13 views

Dassault Systèmes eDrawings SAT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:0 a.m.17 views

Dassault Systèmes eDrawings SAT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:0 a.m.21 views

Dassault Systèmes eDrawings Viewer SAT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:0 a.m.19 views

Dassault Systèmes eDrawings IPT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/08 12:0 a.m.20 views

Dassault Systèmes eDrawings DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.00322EPSS
SaveExploits0References1
Rows per page
Query Builder