Lucene search
+L

8427 matches found

CNVD
CNVD
•added 2022/02/08 12:00 a.m.•68 views

Siemens Simcenter Femap Out-of-Bounds Writing Vulnerability (CNVD-2022-10008)

Siemens Simcenter Femap is a cutting-edge engineering simulation application from Siemens, Germany. It is used to create, edit and import/reuse mesh-based finite element analysis models of complex products or systems. Siemens Simcenter Femap is vulnerable to an out-of-bounds write vulnerability...

7.8CVSS3AI score0.01293EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/02/08 12:00 a.m.•74 views

Siemens Simcenter Femap Out-of-Bounds Writing Vulnerability (CNVD-2022-10009)

Siemens Simcenter Femap is a cutting-edge engineering simulation application from Siemens, Germany. It is used to create, edit and import/reuse mesh-based finite element analysis models of complex products or systems. Siemens Simcenter Femap is vulnerable to an out-of-bounds write vulnerability...

7.8CVSS3AI score0.01293EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/02/08 12:00 a.m.•65 views

Siemens Simcenter Femap Out-of-Bounds Writing Vulnerability (CNVD-2022-10013)

Siemens Simcenter Femap is a cutting-edge engineering simulation application from Siemens, Germany. It is used to create, edit and import/reuse mesh-based finite element analysis models of complex products or systems. Siemens Simcenter Femap is vulnerable to an out-of-bounds write vulnerability...

7.8CVSS3AI score0.01293EPSS
SaveExploits0References1
NVD
NVD
•added 2022/02/01 12:15 p.m.•43 views

CVE-2022-23597

Element Desktop is a Matrix client for desktop platforms with Element Web at its core. Element Desktop before 1.9.7 is vulnerable to a remote program execution bug with user interaction. The exploit is non-trivial and requires clicking on a malicious link, followed by another button click. To the...

8.8CVSS0.01509EPSS
SaveExploits0References2
Prion
Prion
•added 2022/02/01 12:15 p.m.•32 views

Design/Logic Flaw

Element Desktop is a Matrix client for desktop platforms with Element Web at its core. Element Desktop before 1.9.7 is vulnerable to a remote program execution bug with user interaction. The exploit is non-trivial and requires clicking on a malicious link, followed by another button click. To the...

5.1CVSS8.9AI score0.01509EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/02/01 11:49 a.m.•13 views

CVE-2022-23597 Remote program execution with user interaction

Element Desktop is a Matrix client for desktop platforms with Element Web at its core. Element Desktop before 1.9.7 is vulnerable to a remote program execution bug with user interaction. The exploit is non-trivial and requires clicking on a malicious link, followed by another button click. To the...

8.3CVSS8.9AI score0.01509EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/02/01 11:49 a.m.•35 views

CVE-2022-23597 Remote program execution with user interaction

Element Desktop is a Matrix client for desktop platforms with Element Web at its core. Element Desktop before 1.9.7 is vulnerable to a remote program execution bug with user interaction. The exploit is non-trivial and requires clicking on a malicious link, followed by another button click. To the...

8.3CVSS8.9AI score
SaveExploits0References4
CVE
CVE
•added 2022/02/01 11:49 a.m.•155 views

CVE-2022-23597

Element Desktop before 1.9.7 is vulnerable to a remote code execution bug via user interaction that requires a malicious link click followed by another button click. The attacker can specify a binary path on the victim’s machine for execution (arguments cannot be set), and in some configurations ...

8.8CVSS8.8AI score0.01509EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/02/01 11:49 a.m.•59 views

CVE-2022-23597 Remote program execution with user interaction

Element Desktop is a Matrix client for desktop platforms with Element Web at its core. Element Desktop before 1.9.7 is vulnerable to a remote program execution bug with user interaction. The exploit is non-trivial and requires clicking on a malicious link, followed by another button click. To the...

8.3CVSS9AI score0.01509EPSS
SaveExploits0References2
Mend
Mend
•added 2022/02/01 11:49 a.m.•9 views

CVE-2022-23597

Element Desktop is a Matrix client for desktop platforms with Element Web at its core. Element Desktop before 1.9.7 is vulnerable to a remote program execution bug with user interaction. The exploit is non-trivial and requires clicking on a malicious link, followed by another button click. To the...

9CVSS0.01509EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/01 12:00 a.m.•8 views

CVE-2022-23597: Use After Free

Element Desktop is a Matrix client for desktop platforms with Element Web at its core. Element Desktop before 1.9.7 is vulnerable to a remote program execution bug with user interaction. The exploit is non-trivial and requires clicking on a malicious link, followed by another button click. To the...

8.8CVSS8.2AI score0.01509EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/02/01 12:00 a.m.•23 views

Element Desktop Resource Management Error Vulnerability

Element Desktop is an open source Matrix client for the Element Web-centered desktop platform from Element. A resource management error vulnerability exists in Element Desktop that can be exploited by an attacker to specify the path to a binary file on the victim's computer...

8.8CVSS7.9AI score0.01509EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/02/01 12:00 a.m.•5 views

PT-2022-4289

Name of the Vulnerable Software and Affected Versions Element Desktop versions prior to 1.9.7 Description The issue concerns a remote program execution bug that requires user interaction, involving clicking on a malicious link followed by another button click. To the best of available knowledge,...

10CVSS0.01509EPSS
SaveExploits0References13
CNVD
CNVD
•added 2022/01/27 12:00 a.m.•103 views

FreeCAD ODA Command Injection Vulnerability

FreeCad is a free and open source general-purpose parametric 3D Cad modeler from the FreeCad community and supports the finite element method of building information modeling software. A command injection vulnerability exists in FreeCAD version 0.19, which stems from improper cleanup when calling...

7.8CVSS7.5AI score0.01111EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2022/01/24 12:00 a.m.•11 views

VulnCheck KEV: CVE-2022-0288

The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the htmlelementselection parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.02061EPSS
SaveIn wildExploits3References2
attackerkb
attackerkb
•added 2022/01/20 10:15 p.m.•16 views

CVE-2021-46344

There is an Assertion 'flags & PARSERPATTERNHASRESTELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

5.5CVSS5.9AI score0.00621EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2022/01/20 10:15 p.m.•32 views

UBUNTU-CVE-2021-46344

There is an Assertion 'flags & PARSERPATTERNHASRESTELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

5.5CVSS6AI score0.00621EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/01/20 12:00 a.m.•23 views

JerryScript security vulnerabilities

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a security vulnerability in JerryScript 3.0.0, which stems from an assertion in /jerry-core/parser/js/js-parser-expr.c flags & PARSERPATTERNHASRESTELEMENT fails. No details of the vulnerability are currently provided...

5.5CVSS5.5AI score0.00621EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/01/18 5:15 p.m.•24 views

CVE-2022-22690

Within the Umbraco CMS, a configuration element named "UmbracoApplicationUrl" or just "ApplicationUrl" is used whenever application code needs to build a URL pointing back to the site. For example, when a user resets their password and the application builds a password reset URL or when the...

7.5CVSS7.6AI score0.01138EPSS
SaveExploits2References1
NVD
NVD
•added 2022/01/13 6:15 p.m.•55 views

CVE-2021-40813

A cross-site scripting XSS vulnerability in the "Zip content" feature in Element-IT HTTP Commander 3.1.9 allows remote authenticated users to inject arbitrary web script or HTML via filenames...

5.4CVSS0.00745EPSS
SaveExploits1References2
Rows per page
Query Builder