Lucene search
+L

993 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/07/15 12:0 a.m.66 views

Adobe Bridge JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4.3AI score0.02762EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/06/10 12:0 a.m.12 views

The vulnerability of the Cortado ThinPrint component (JPEG2000 Parser) in the VMware Workstation hypervisor and the VMware Horizon Client for Windows virtualization client allows a malicious individual to disclose protected information.

The vulnerability of the Cortado ThinPrint component JPEG2000 Parser in the VMware Workstation hypervisor and the VMware Horizon Client for Windows virtualization client system relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to...

4CVSS6.5AI score0.00453EPSS
SaveExploits0References4Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2021/05/25 12:0 a.m.43 views

VMware Workstation ThinPrint JPEG2000 Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6.5CVSS2.8AI score0.00453EPSS
SaveExploits0References1
OSV
OSV
added 2021/05/24 12:15 p.m.8 views

CVE-2021-21988

VMware Workstation 16.x prior to 16.1.2 and Horizon Client for Windows 5.x prior to 5.5.2 contain out-of-bounds read vulnerability in the Cortado ThinPrint component JPEG2000 Parser. A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading t...

6.5CVSS5.6AI score0.00453EPSS
SaveExploits0References2
NVD
NVD
added 2021/05/24 12:15 p.m.41 views

CVE-2021-21988

VMware Workstation 16.x prior to 16.1.2 and Horizon Client for Windows 5.x prior to 5.5.2 contain out-of-bounds read vulnerability in the Cortado ThinPrint component JPEG2000 Parser. A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading t...

6.5CVSS0.00453EPSS
SaveExploits0References2
Prion
Prion
added 2021/05/24 12:15 p.m.23 views

Out-of-bounds

VMware Workstation 16.x prior to 16.1.2 and Horizon Client for Windows 5.x prior to 5.5.2 contain out-of-bounds read vulnerability in the Cortado ThinPrint component JPEG2000 Parser. A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading t...

2.1CVSS6.3AI score0.00453EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2021/05/24 11:35 a.m.32 views

CVE-2021-21988

VMware Workstation 16.x prior to 16.1.2 and Horizon Client for Windows 5.x prior to 5.5.2 contain out-of-bounds read vulnerability in the Cortado ThinPrint component JPEG2000 Parser. A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading t...

6.6AI score0.00453EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/05/21 12:0 a.m.8 views

Vmware VMware Workstation缓冲区错误漏洞

Vmware VMware Workstation is a set of virtual machine software from Vmware. The software provides the ability to run multiple virtual machines with different operating systems at the same time. A buffer error vulnerability exists in several VMware products, which stems from an out-of-bounds read...

6.5CVSS6.7AI score0.00559EPSS
SaveExploits0References6
OPENSUSE Linux
OPENSUSE Linux
added 2021/05/10 12:0 a.m.59 views

Security update for perl-Image-ExifTool (important)

openSUSE Security Update: Security update for perl-Image-ExifTool Announcement ID: openSUSE-SU-2021:0707-1 Rating: important References: 1185547 Cross-References: CVE-2021-22204 CVSS scores: CVE-2021-22204 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15....

7.8CVSS7.4AI score0.99982EPSS
SaveExploits39References1
OSV
OSV
added 2021/03/30 3:15 p.m.6 views

CVE-2021-27270

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.1AI score0.02692EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/30 3:15 p.m.36 views

CVE-2021-27270

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.02692EPSS
SaveExploits0References2
Prion
Prion
added 2021/03/30 3:15 p.m.16 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.02692EPSS
SaveExploits0References2Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/03/30 3:15 p.m.5 views

CVE-2021-27270

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6AI score0.02692EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2021/03/30 2:35 p.m.73 views

CVE-2021-27270

CVE-2021-27270 affects Foxit PhantomPDF 10.1.0.37527. The flaw lies in JPEG2000 image parsing where improper validation can cause a read past the end of an allocated structure, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a...

7.8CVSS7.7AI score0.02692EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2021/03/30 2:35 p.m.46 views

CVE-2021-27270

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.9AI score0.02692EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/03/22 12:0 a.m.38 views

Foxit PhantomPDF JPEG2000 Parsing Out-Of Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.7AI score0.02692EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/02/10 12:0 a.m.40 views

Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.5AI score0.03545EPSS
SaveExploits0References1
OSV
OSV
added 2020/10/13 5:15 p.m.6 views

CVE-2020-17416

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.09084EPSS
SaveExploits0References2
NVD
NVD
added 2020/10/13 5:15 p.m.27 views

CVE-2020-17416

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.09084EPSS
SaveExploits0References2
Prion
Prion
added 2020/10/13 5:15 p.m.20 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.09084EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder