Lucene search
+L

5716 matches found

NVD
NVD
added 2025/08/26 5:15 p.m.33 views

CVE-2025-9491

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS0.68864EPSS
SaveExploits3References3
Cvelist
Cvelist
added 2025/08/26 4:25 p.m.52 views

CVE-2025-9491 Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a...

7CVSS0.68864EPSS
SaveExploits3References1
CVE
CVE
added 2025/08/26 4:25 p.m.229 views

CVE-2025-9491

CVE-2025-9491 is a Microsoft Windows LNK file UI misrepresentation vulnerability. The flaw lies in how Windows handles .LNK/shortcuts, where crafted whitespace padding can hide malicious command-line arguments from the target user’s view, enabling arbitrary code execution in the context of the cu...

7.8CVSS7.2AI score0.68864EPSS
SaveIn wildExploits3References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/22 5:31 p.m.10 views

CVE-2025-46856

Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. A low privileged attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation ...

5.4CVSS5.4AI score0.00219EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 4:35 p.m.10 views

CVE-2011-10023

MJM QuickPlayer likely now referred to as MJM Player version 2010 contains a stack-based buffer overflow vulnerability triggered by opening a malicious .s3m music file. The flaw occurs due to improper bounds checking in the file parser, allowing an attacker to overwrite memory and execute arbitra...

8.4CVSS8AI score0.00347EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2025/08/21 12:0 a.m.6 views

Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

3.3CVSS5.7AI score0.00237EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/08/21 12:0 a.m.10 views

Autodesk AutoCAD DGN File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DG...

7.8CVSS6.2AI score0.0018EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2024-21005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are...

3.1CVSS6.7AI score0.00853EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/20 3:32 p.m.27 views

CVE-2010-20045 FileWrangler <= 5.30 Stack Buffer Overflow

FileWrangler = 5.30 suffers from a stack-based buffer overflow vulnerability when parsing directory listings from an FTP server. A malicious server can send an overlong folder name in response to a LIST command, triggering memory corruption during client-side rendering. Exploitation requires...

8.5CVSS0.00343EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-21971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.32 and prior. Difficult to...

5.3CVSS6AI score0.01286EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-35567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE...

6.8CVSS6.9AI score0.02902EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-2388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE:...

7.5CVSS6.7AI score0.04008EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2024-43805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on us...

7.6CVSS5.6AI score0.00396EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-21209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.4.2 and prior and 9.0.1 and...

2CVSS6.3AI score0.00618EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/08/14 10:19 p.m.4 views

CVE-2025-54231

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.0023EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/14 9:14 p.m.16 views

CVE-2025-54192

Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

5.5CVSS6.6AI score0.00202EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/14 9:13 p.m.17 views

CVE-2025-54216

InCopy versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00251EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/14 9:13 p.m.13 views

CVE-2025-54207

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00259EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/14 9:13 p.m.16 views

CVE-2025-54225

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00308EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/14 9:13 p.m.7 views

CVE-2025-54221

InCopy versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00251EPSS
SaveExploits0References1
Rows per page
Query Builder