Lucene search
+L

998 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.29 views

Adobe Dimension USDZ File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS5.7AI score0.00365EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.27 views

Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of USD...

7.8CVSS7.7AI score0.00387EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.20 views

Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of USD...

7.8CVSS7.7AI score0.00387EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.25 views

Adobe Substance 3D Stager SVG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.00379EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.32 views

Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of USD...

7.8CVSS7.7AI score0.00387EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.24 views

Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of USD...

7.8CVSS7.7AI score0.00387EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/15 12:0 a.m.21 views

Unity Technologies Unity Editor SKP File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Unity Technologies Unity Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS2.3AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/15 12:0 a.m.14 views

Unity Technologies Unity Editor SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unity Technologies Unity Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.80 views

Microsoft Windows win32kfull UMPD Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

8.8CVSS8.6AI score0.00764EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 3:47 a.m.6 views

SUSE CVE-2021-20226

A use-after-free flaw was found in the iouring in Linux kernel, where a local attacker with a user privilege could cause a denial of service problem on the system The issue results from the lack of validating the existence of an object prior to performing operations on the object by not...

7.8CVSS6.3AI score0.00436EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:47 a.m.3 views

SUSE CVE-2021-20292

There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveausgdma.c in nouveausgdmacreatettm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with ...

6.7CVSS7.5AI score0.00853EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
added 2023/02/15 3:27 a.m.4 views

SUSE CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS8.3AI score0.00644EPSS
SaveExploits0References18
NVD
NVD
added 2023/01/26 6:59 p.m.31 views

CVE-2022-42414

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5.5CVSS4AI score0.00412EPSS
SaveExploits0References2
OSV
OSV
added 2023/01/26 6:59 p.m.7 views

CVE-2022-42408

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5.5CVSS5AI score0.00401EPSS
SaveExploits0References2
Prion
Prion
added 2023/01/26 6:59 p.m.17 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

1.9CVSS5.3AI score0.00412EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.33 views

Microsoft Excel SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.1AI score0.00705EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.27 views

Microsoft 3D Builder PLY File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS7.6AI score0.00939EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.38 views

Microsoft Office SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SK...

7.8CVSS7.8AI score0.00915EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.28 views

Microsoft 3D Builder GLB File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS7.5AI score0.00939EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.20 views

Microsoft 3D Builder GLB File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS7.5AI score0.00939EPSS
SaveExploits0References1
Rows per page
Query Builder