Lucene search
+L

5639 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/09/16 12:0 a.m.26 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.7AI score0.00241EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/09/16 12:0 a.m.24 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.00241EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/09/16 12:0 a.m.9 views

The vulnerability of the Mozilla Firefox browser for Android exists due to the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of Mozilla Firefox browser on Android exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a specially created link...

6.4CVSS6.3AI score0.00647EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/09/16 12:0 a.m.21 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.5AI score0.00241EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/09/16 12:0 a.m.23 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.00241EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/09/16 12:0 a.m.20 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.00241EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/09/16 12:0 a.m.29 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.5AI score0.00241EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/09/16 12:0 a.m.26 views

Siemens Simcenter Femap X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.00241EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/15 4:15 p.m.7 views

CVE-2022-40648

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS6.2AI score0.00794EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/15 4:15 p.m.27 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

4.4CVSS7.8AI score0.00526EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/09/15 3:26 p.m.42 views

CVE-2022-40653

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS8AI score0.00526EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:0 a.m.6 views

The vulnerability of the WPE WebKit web page rendering module, related to the lack of measures taken to protect the structure of the web page, allows attackers to compromise the integrity of the data.

The vulnerability of the WPE WebKit web page rendering module is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of the data...

6.1CVSS6.5AI score0.01298EPSS
SaveExploits0References12Affected Software5
Zero Day Initiative
Zero Day Initiative
added 2022/09/14 12:0 a.m.32 views

(0Day) Ansys SpaceClaim X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XB...

7.8CVSS5.2AI score0.00526EPSS
SaveExploits0
Prion
Prion
added 2022/09/13 7:15 p.m.22 views

Design/Logic Flaw

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file...

6.5CVSS8.7AI score0.01088EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/09/13 6:11 p.m.41 views

CVE-2022-34100

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file...

9AI score0.01088EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/09/13 12:0 a.m.8 views

PT-2022-5059 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.13.0 and earlier Description: The issue is related to the lack of protection of the web page structure in Adobe Experience Manager, allowing a remote attacker to conduct cross-site scripting attacks using...

6.4CVSS5.2AI score0.00543EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/09/13 12:0 a.m.13 views

Fedora: Security Advisory for cloudcompare (FEDORA-2022-9cbdf39a5a)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.7AI score0.02885EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/09/13 12:0 a.m.9 views

Crestron AirMedia 安全漏洞

Crestron AirMedia is Crestron's unlimited sharing platform for laptops, PCs, smartphones or tablets. A security vulnerability exists in Crestron AirMedia Windows Application version 4.3.1.39. An attacker could exploit the vulnerability to temporarily store a file structure and change it during a...

8.8CVSS8AI score0.01088EPSS
SaveExploits0References3
Fedora
Fedora
added 2022/09/12 5:58 p.m.41 views

[SECURITY] Fedora 37 Update: cloudcompare-2.11.3-4.fc37

CloudCompare is a 3D point cloud and triangular mesh processing software. It has been originally designed to perform comparison between two 3D points clouds such as the ones obtained with a laser scanner or between a point cloud and a triangular mesh. It relies on a specific octree structure that...

8.8CVSS1.2AI score0.02885EPSS
SaveExploits1
Fedora
Fedora
added 2022/09/10 7:54 p.m.40 views

[SECURITY] Fedora 35 Update: cloudcompare-2.9.1-16.fc35

CloudCompare is a 3D point cloud and triangular mesh processing software. It has been originally designed to perform comparison between two 3D points clouds such as the ones obtained with a laser scanner or between a point cloud and a triangular mesh. It relies on a specific octree structure that...

8.8CVSS1.2AI score0.02885EPSS
SaveExploits1
Rows per page
Query Builder