Lucene search
+L

5622 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:0 a.m.25 views

Panasonic Control FPWIN Pro Project File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Panasonic Control FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.7AI score0.01191EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:0 a.m.40 views

Siemens JT2Go PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

7.8CVSS4.6AI score0.03042EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:0 a.m.31 views

Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS4.9AI score0.02534EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:0 a.m.32 views

Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS5.3AI score0.01896EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:0 a.m.35 views

Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS5.2AI score0.02534EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:0 a.m.33 views

Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS5.1AI score0.02534EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.9 views

The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS lies in the lack of security measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS programs is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a remote attacker to perform a cross-site scripting attack...

9.9CVSS7.3AI score0.02244EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.7 views

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client is related to the lack of protective measures for website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to the lack of security measures for handling web page structures. Exploiting these vulnerabilities allows a remote attacker to perform cross-site scripting attacks by redirecting users to the...

6.1CVSS7AI score0.01546EPSS
SaveExploits1References15Affected Software9
NVD
NVD
added 2021/01/12 9:15 p.m.22 views

CVE-2020-28382

A vulnerability has been identified in Solid Edge SE2020 All Versions SE2020MP12, Solid Edge SE2021 All Versions SE2021MP2. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in a out of bounds write past the end of an allocated structure...

7.8CVSS7.7AI score0.02625EPSS
SaveExploits0References4
NVD
NVD
added 2021/01/12 9:15 p.m.34 views

CVE-2020-26984

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of JT files. This could result in an out of bounds write past the end of an allocated structure. An...

8.8CVSS8.8AI score0.0308EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/12 9:15 p.m.22 views

Default credentials

A vulnerability has been identified in Solid Edge SE2020 All Versions SE2020MP12, Solid Edge SE2021 All Versions SE2021MP2. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in a out of bounds write past the end of an allocated structure...

6.8CVSS7.7AI score0.02625EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2021/01/12 9:15 p.m.25 views

Default credentials

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in an out of bounds write past the end of an allocated structure. An...

6.8CVSS8.8AI score0.0308EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2021/01/12 9:15 p.m.28 views

Default credentials

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing CG4 and CGM files. This could result in an out of bounds write past the end of an allocated structure. ...

6.8CVSS8.8AI score0.03042EPSS
SaveExploits0References2Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2021/01/12 12:0 a.m.24 views

SAP 3D Visual Enterprise Viewer IFF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.6AI score0.01199EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/12/28 12:0 a.m.54 views

Fedora 32 : xen (2020-df772b417b)

xenstore watch notifications lacking permission checks XSA-115, CVE-2020-29480 1908091 Xenstore: new domains inheriting existing node permissions XSA-322, CVE-2020-29481 1908095 Xenstore: wrong path length check XSA-323, CVE-2020-29482 1908096 Xenstore: guests can crash xenstored via watchs...

8.8CVSS6.3AI score0.00438EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.12 views

The vulnerability of the Fortinet FortiManager software and FortiAnalyzer network switch, related to the lack of security measures for the website structure, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Fortinet FortiManager device management software and the FortiAnalyzer network monitoring software is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform domain-level attacks by sending...

10CVSS5.9AI score0.00684EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.8 views

The vulnerability of the Junos operating system arises from the lack of measures taken to protect the web page structure. This allows attackers to intercept the HTTP/HTTPS session of the target user and perform administrative actions.

The vulnerability of the Junos operating system exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to capture the HTTP/HTTPS session of the target user and perform administrative actions...

10CVSS7.6AI score0.01556EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.11 views

The vulnerability of the SAP Business Objects Business Intelligence Platform lies in its lack of security measures to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of the SAP Business Objects Business Intelligence Platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

5.5CVSS6.1AI score0.00527EPSS
SaveExploits0References3Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2020/12/21 12:0 a.m.30 views

(0Day) Microsoft 3D Builder GLB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS5.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:0 a.m.9 views

The vulnerability of Adobe Experience Manager’s content and media management system lies in its lack of protection for website structures. This allows attackers to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of the Adobe Experience Manager content and media management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.9AI score0.01758EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder