Lucene search
+L

564 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/07/26 12:00 a.m.•29 views

Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS6.8AI score0.005EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/07/13 12:00 a.m.•32 views

Kofax Power PDF U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D...

7.8CVSS6.8AI score0.00401EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/07/12 12:00 a.m.•86 views

Siemens Tecnomatix Plant Simulation Heap Buffer Overflow Vulnerability (CNVD-2023-56538)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany, that uses discrete-event simulation to analyze and optimize throughput and thereby improve manufacturing system performance. Siemens Tecnomatix Plant Simulation suffers from a heap buffer overflow...

7.8CVSS7.6AI score0.00229EPSS
SaveExploits0References1
NVD
NVD
•added 2023/07/11 10:15 a.m.•42 views

CVE-2023-37247

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker...

7.8CVSS7.8AI score0.00229EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/07/11 9:07 a.m.•42 views

CVE-2023-37374

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted STP files. This could allow an attacke...

7.8CVSS8AI score0.00229EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/07/11 12:00 a.m.•14 views

Siemens Tecnomatix Plant Simulation 安全漏洞

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany, that uses discrete-event simulation to analyze and optimize throughput and thereby improve manufacturing system performance. A type confusion vulnerability exists in Siemens Tecnomatix Plant Simulation, whi...

7.8CVSS7.3AI score0.00226EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2023/07/06 12:00 a.m.•39 views

GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of FLAC aud...

7.6CVSS7.4AI score0.017EPSS
SaveExploits0References1
NVD
NVD
•added 2023/06/27 7:15 p.m.•33 views

CVE-2023-29068

A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS8AI score0.00236EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/06/15 12:00 a.m.•29 views

(0Day) Ashlar-Vellum Cobalt Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.7AI score0.00401EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/06/15 12:00 a.m.•33 views

(0Day) Ashlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.00392EPSS
SaveExploits0
NVD
NVD
•added 2023/06/13 9:15 a.m.•29 views

CVE-2023-33124

A vulnerability has been identified in JT2Go All versions V14.2.0.3, Teamcenter Visualization V13.2 All versions V13.2.0.13, Teamcenter Visualization V13.3 All versions V13.3.0.10, Teamcenter Visualization V14.0 All versions V14.0.0.6, Teamcenter Visualization V14.1 All versions V14.1.0.8,...

7.8CVSS7.7AI score0.00217EPSS
SaveExploits0References1
Prion
Prion
•added 2023/06/13 9:15 a.m.•30 views

Memory corruption

A vulnerability has been identified in JT2Go All versions V14.2.0.3, Teamcenter Visualization V13.2 All versions V13.2.0.13, Teamcenter Visualization V13.3 All versions V13.3.0.10, Teamcenter Visualization V14.0 All versions V14.0.0.6, Teamcenter Visualization V14.1 All versions V14.1.0.8,...

4.4CVSS7.7AI score0.00217EPSS
SaveExploits0References1Affected Software2
UbuntuCve
UbuntuCve
•added 2023/06/07 3:15 a.m.•40 views

CVE-2023-0666

Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark...

6.5CVSS7.3AI score0.02275EPSS
SaveExploits1References3
Prion
Prion
•added 2023/06/06 5:15 p.m.•21 views

Stack overflow

The affected application lacks proper validation of user-supplied data when parsing project files e.g., CSP. This could lead to a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process...

4.4CVSS7.8AI score0.0023EPSS
SaveExploits0References1Affected Software2
NVD
NVD
•added 2023/06/06 3:15 p.m.•26 views

CVE-2023-32545

The affected application lacks proper validation of user-supplied data when parsing project files e.g., CSP. This could lead to an out-of-bounds read in Cscape!CANPortMigration. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS7.8AI score0.00227EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/06/01 12:00 a.m.•32 views

Delta Electronics CNCSoft-B DOPSoft DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00347EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/06/01 12:00 a.m.•20 views

Delta Electronics CNCSoft-B DOPSoft DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00347EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/06/01 12:00 a.m.•20 views

Delta Electronics CNCSoft-B DOPSoft DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00347EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/06/01 12:00 a.m.•24 views

Delta Electronics CNCSoft-B DOPSoft DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00347EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/25 12:00 a.m.•28 views

Adobe Acrobat Reader DC Annotation Highlight delay Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.8AI score0.00364EPSS
SaveExploits0References1
Rows per page
Query Builder