Lucene search
+L

2175 matches found

CVE
CVE
added 2022/10/10 12:0 a.m.89 views

CVE-2022-29055

CVE-2022-29055 describes an access of an uninitialized pointer in Fortinet FortiOS and FortiProxy that can crash the sslvpn daemon via an HTTP GET request. Affected products include FortiOS versions 6.0.x, 6.2.0–6.2.10, 6.4.0–6.4.8, 7.0.0–7.0.5, 7.2.0 and FortiProxy 1.2.x, 2.0.0–2.0.9, 7.0.0–7.0....

7.5CVSS7.5AI score0.00899EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2022/10/10 12:0 a.m.37 views

CVE-2022-29055

A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x, FortiProxy version 7.0.0 through 7.0.4, 2.0.0 through 2.0.9, 1.2.x allows a remote unauthenticated or authenticated attacker to crash the sslvpn daemon via a...

7.5CVSS7.7AI score0.00899EPSS
SaveExploits0References1
Fortinet
Fortinet
added 2022/10/10 12:0 a.m.84 views

Protect

An access of uninitialized pointer vulnerability CWE-824 in the SSL VPN portal of FortiOS & FortiProxy may allow a remote unauthenticated or authenticated see Affected Products section attacker to crash the sslvpn daemon via an HTTP GET request...

5CVSS7.3AI score0.00899EPSS
SaveExploits0Affected Software2
NCSC
NCSC
added 2022/09/30 12:0 a.m.4 views

Vulnerabilities found in GE Cimplicity

The Zero Day Initiative has published information about vulnerabilities in GE's Cimplicity have been published. The vulnerabilities occur during the processing of CIM files. Due to lack of proper initialization of the pointer, a malicious party can execute arbitrary code execute arbitrary code...

7.5AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2022/09/29 12:0 a.m.14 views

(0Day) GE CIMPLICITY CIM File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE CIMPLICITY. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CIM...

7.8CVSS6.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/09/21 12:0 a.m.7 views

The vulnerability of the udp6_input() function in the TCP-IP emulator library Libslirp, which allows a hacker to gain unauthorized access to protected information

The vulnerability in the implementation of the udp6input function of the TCP-IP emulator Libslirp is related to the use of an uninitialized pointer when processing UDP packets with a smaller size compared to the udphdr structure. Exploiting this vulnerability could allow an attacker to gain...

3.8CVSS6.5AI score0.00326EPSS
SaveExploits0References15Affected Software6
NVD
NVD
added 2022/09/16 6:15 p.m.17 views

CVE-2022-38427

Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

7.8CVSS0.0049EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/16 6:15 p.m.1 views

CVE-2022-38427

Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

7.8CVSS6.3AI score0.0049EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/16 6:15 p.m.3 views

CVE-2022-38426

Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

7.8CVSS6.3AI score0.0049EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/16 6:15 p.m.15 views

Null pointer dereference

Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

4.4CVSS7.7AI score0.0049EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/09/16 6:15 p.m.17 views

Null pointer dereference

Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

4.4CVSS7.7AI score0.0049EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/09/16 5:16 p.m.98 views

CVE-2022-38427

CVE-2022-38427 affects Adobe Photoshop 22.5.8 and earlier and 23.4.2 and earlier. Root cause described as an Access of Uninitialized Pointer (U3D file parsing context) that could allow arbitrary code execution in the current user’s context; exploitation requires user interaction (victim must open...

7.8CVSS7.7AI score0.0049EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/09/16 12:0 a.m.7 views

Adobe Photoshop 缓冲区错误漏洞

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is primarily used for processing images. A buffer error vulnerability exists in Adobe Photoshop version 22.5.8 and prior to version 22.x and version 23.4.2 and prior to version 23.x. The...

7.8CVSS8AI score0.0049EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2022/09/16 12:0 a.m.27 views

Siemens Simcenter Femap X_T File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.6AI score0.00241EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/15 4:15 p.m.5 views

CVE-2022-40642

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS6.2AI score0.00558EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/09/15 4:15 p.m.1 views

CVE-2022-40649

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS7.5AI score0.00558EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/09/15 4:15 p.m.2 views

CVE-2022-40642

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS7.5AI score0.00558EPSS
SaveExploits0References2
OSV
OSV
added 2022/09/15 4:15 p.m.8 views

CVE-2022-40646

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS6.2AI score0.00558EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/15 4:15 p.m.7 views

CVE-2022-40643

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS6.2AI score0.00558EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/09/15 12:0 a.m.5 views

Ansys SpaceClaim 缓冲区错误漏洞

Ansys SpaceClaim is a solid modeling CAD software from Ansys Corporation. A buffer error vulnerability exists in Ansys SpaceClaim 2022 R1, which stems from a specific flaw in the parsing of XB files, where a pointer is not properly initialized before being accessed, and can be exploited by an...

7.8CVSS7.8AI score0.00558EPSS
SaveExploits0References2
Rows per page
Query Builder