Lucene search
+L

6870 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/09/16 12:00 a.m.•35 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.00255EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/16 12:00 a.m.•34 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.00255EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/16 12:00 a.m.•31 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.00255EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/16 12:00 a.m.•31 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.00255EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/16 12:00 a.m.•34 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.5AI score0.00255EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/16 12:00 a.m.•26 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.5AI score0.00255EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/16 12:00 a.m.•26 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.00255EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/16 12:00 a.m.•29 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.00255EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/09/16 12:00 a.m.•17 views

The vulnerability of the Mozilla Firefox browser for Android exists due to the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of Mozilla Firefox browser on Android exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a specially created link...

6.4CVSS6.3AI score0.00647EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/16 12:00 a.m.•34 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.00255EPSS
SaveExploits0References1
OSV
OSV
•added 2022/09/15 4:15 p.m.•15 views

CVE-2022-40648

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS6.2AI score0.00876EPSS
SaveExploits0References1
Prion
Prion
•added 2022/09/15 4:15 p.m.•33 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

4.4CVSS7.8AI score0.00581EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/09/15 3:26 p.m.•51 views

CVE-2022-40653

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS8AI score0.00581EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/15 12:00 a.m.•7 views

CVE-2022-40651: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS7.8AI score0.00808EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/09/14 12:00 a.m.•10 views

The vulnerability of the WPE WebKit web page rendering module, related to the lack of measures taken to protect the structure of the web page, allows attackers to compromise the integrity of the data.

The vulnerability of the WPE WebKit web page rendering module is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of the data...

6.1CVSS6.5AI score0.01456EPSS
SaveExploits0References12Affected Software5
Zero Day Initiative
Zero Day Initiative
•added 2022/09/14 12:00 a.m.•36 views

(0Day) Ansys SpaceClaim X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XB...

7.8CVSS5.2AI score0.00581EPSS
SaveExploits0
Prion
Prion
•added 2022/09/13 7:15 p.m.•33 views

Design/Logic Flaw

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file...

6.5CVSS8.7AI score0.01192EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/09/13 6:11 p.m.•49 views

CVE-2022-34100

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file...

9AI score0.01192EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/09/13 12:00 a.m.•14 views

PT-2022-5059 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.13.0 and earlier Description: The issue is related to the lack of protection of the web page structure in Adobe Experience Manager, allowing a remote attacker to conduct cross-site scripting attacks using...

6.4CVSS5.2AI score0.00629EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/09/13 12:00 a.m.•24 views

Crestron AirMedia 安全漏洞

Crestron AirMedia is Crestron's unlimited sharing platform for laptops, PCs, smartphones or tablets. A security vulnerability exists in Crestron AirMedia Windows Application version 4.3.1.39. An attacker could exploit the vulnerability to temporarily store a file structure and change it during a...

8.8CVSS8AI score0.01192EPSS
SaveExploits0References3
Rows per page
Query Builder