Lucene search
+L

5633 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/02/11 12:0 a.m.21 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01596EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/11 12:0 a.m.22 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01774EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/11 12:0 a.m.21 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01564EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/02/11 12:0 a.m.7 views

PT-2022-10396 · Qualcomm · Snapdragon Connectivity +3

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected versions not specified Description: The issue is...

8.4CVSS7.6AI score0.00188EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2022/02/11 12:0 a.m.50 views

Foxit PDF Reader JPEG2000 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.7AI score0.027EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/11 12:0 a.m.27 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01293EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/11 12:0 a.m.34 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01293EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/04 11:15 p.m.5 views

DEBIAN-CVE-2021-40403

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker ca...

6.3CVSS7.3AI score0.01084EPSS
SaveExploits1References1
OSV
OSV
added 2022/02/04 11:15 p.m.10 views

UBUNTU-CVE-2021-40403

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker ca...

6.3CVSS6.9AI score0.01084EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2022/02/04 12:0 a.m.11 views

The vulnerability of the Django web application framework, related to the lack of protection for website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Django web application framework is related to the lack of security measures for handling web page structures. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks...

6.4CVSS6.6AI score0.03328EPSS
SaveExploits1References9Affected Software4
Positive Technologies
Positive Technologies
added 2022/02/02 12:0 a.m.13 views

PT-2022-6479 · Zabbix +2 · Zabbix +2

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to the lack of protection of the web page structure in Zabbix. An authenticated user can create a link with reflected Javascript code for the items' page and send it to...

9.9CVSS6.1AI score0.01606EPSS
SaveExploits3References96
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:0 a.m.9 views

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

6.4CVSS6.1AI score0.00759EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:0 a.m.10 views

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

6.4CVSS6.1AI score0.00759EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:0 a.m.9 views

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

6.4CVSS6.1AI score0.00759EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:0 a.m.15 views

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

6.4CVSS6.1AI score0.00759EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:0 a.m.9 views

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

6.4CVSS6.1AI score0.00759EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:0 a.m.13 views

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

6.4CVSS6AI score0.00759EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:0 a.m.10 views

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

6.4CVSS6.1AI score0.00759EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:0 a.m.11 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE for Apple operating systems such as iPadOS, watchOS, iOS, tvOS, as well as in browsers like Safari, multimedia player iTunes, and iCloud service for Windows operating systems, allows attackers to execute cross-site scripting attacks.

The vulnerability of the web page rendering modules in WebKitGTK and WPE for Apple operating systems such as iPadOS, watchOS, iOS, tvOS, the Safari browser, the multimedia player iTunes, and the iCloud service for Windows operating systems is related to the lack of measures taken to protect the...

7.1CVSS6.3AI score0.01083EPSS
SaveExploits0References15Affected Software14
Redos
Redos
added 2022/02/01 12:0 a.m.28 views

ROS-20220125-18

A vulnerability in the Xen hypervisor is related to the incorrect configuration of a number of devices and the incorrect data structure release, including I/O page tables. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service and other issues,...

7.6CVSS7.7AI score0.00441EPSS
SaveExploits0
Rows per page
Query Builder