Lucene search
+L

2207 matches found

CNNVD
CNNVD
added 2023/06/13 12:00 a.m.7 views

Fortinet FortiProxy 缓冲区错误漏洞

Fortinet FortiProxy is a secure network proxy from Fortinet that protects employees from cyberattacks by combining multiple detection technologies such as Web filtering, DNS filtering, DLP, anti-virus, intrusion prevention, and advanced threat protection.FortiProxy helps reduce bandwidth...

4.3CVSS5.1AI score0.00884EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/06/12 12:00 a.m.17 views

Fortinet Fortigate Access of uninitialized pointer in administrative interface API (FG-IR-23-095)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-095 advisory. - A access of uninitialized pointer vulnerability CWE-824 in Fortinet FortiProxy version 7.2.0 through 7.2.3 and before 7.0.9...

4.3CVSS5.2AI score0.00884EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/06/08 12:00 a.m.7 views

PT-2023-24786 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this issue, where the...

7.8CVSS7.2AI score0.00348EPSS
SaveExploits0References4
NVD
NVD
added 2023/06/06 5:15 p.m.10 views

CVE-2023-31244

The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer...

7.8CVSS7.9AI score0.00227EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/06 5:15 p.m.7 views

CVE-2023-31244

The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer...

7.8CVSS7.4AI score0.00227EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/06 5:15 p.m.21 views

Null pointer dereference

The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer...

4.4CVSS7.8AI score0.00227EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2023/06/06 4:27 p.m.24 views

CVE-2023-31244

The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer...

7.8CVSS8AI score0.00227EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/06/06 4:27 p.m.8 views

CVE-2023-31244

The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer...

7.8CVSS7.6AI score0.00227EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/05/31 12:00 a.m.8 views

PT-2023-3774 · Fatek Automation · Fvdesigner

Name of the Vulnerable Software and Affected Versions: Fatek Automation FvDesigner affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this issue...

7.8CVSS7.2AI score0.00418EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
added 2023/05/31 12:00 a.m.27 views

(0Day) Fatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00418EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/05/31 12:00 a.m.15 views

PT-2023-3771 · Fatek Automation · Fvdesigner

Name of the Vulnerable Software and Affected Versions: Fatek Automation FvDesigner affected versions not specified Description: The issue is related to an uninitialized pointer in the FvDesigner software, which can be exploited to execute arbitrary code on affected systems. This can be achieved b...

7.8CVSS7.6AI score0.00418EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/05/26 12:00 a.m.13 views

The vulnerability of the Horner Automation Cscape EnvisionRV remote control access software and the Cscape configuration software lies in their inability to access an uninitialized pointer, allowing attackers to execute arbitrary code.

The vulnerability of the Horner Automation Cscape EnvisionRV remote control access software and the Cscape configuration software relates to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code by opening a specially created CSP fi...

7.8CVSS7.7AI score0.00227EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/24 12:00 a.m.6 views

PT-2023-4764 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.003.20244 and earlier Adobe Acrobat Reader versions 20.005.30467 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Description: The issue is related to an Access of Uninitialized Pointer that could resu...

7.8CVSS7.7AI score0.02679EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2023/05/23 12:00 a.m.11 views

PT-2023-2871 · Horner Automation · Horner Automation Cscape Envisionrv +1

Name of the Vulnerable Software and Affected Versions: Horner Automation Cscape EnvisionRV affected versions not specified Cscape affected versions not specified Description: The issue is related to accessing an uninitialized pointer, which can be exploited by opening a specially crafted CSP file...

7.8CVSS7.7AI score0.00227EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/05/17 12:00 a.m.12 views

The vulnerability of the 3D model texturing program Adobe Substance 3D Painter, related to access to an uninitialized pointer, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS6.5AI score0.00345EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/17 12:00 a.m.12 views

The vulnerability of the 3D model texturing program Adobe Substance 3D Painter, related to access to an uninitialized pointer, allows a hacker to exploit the protected information.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by the system’s security measures...

5.5CVSS5.4AI score0.00325EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/05/17 12:00 a.m.22 views

Amazon Linux 2 : inkscape (ALAS-2023-2043)

The version of inkscape installed on the remote host is prior to 0.92.2-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2043 advisory. Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized...

7.8CVSS5.8AI score0.01454EPSS
SaveExploits3References8
CNVD
CNVD
added 2023/05/13 12:00 a.m.59 views

Adobe Substance 3D Painter Uninitialized Pointer Access Vulnerability

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. An uninitialized pointer access vulnerability exists in Adobe Substance 3D Painter 8.3.0 and earlier versions, which can be exploited by an attacker to execute code in the current user's context...

7.8CVSS7AI score0.00345EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/05/13 12:00 a.m.25 views

Adobe Substance 3D Painter Uninitialized Pointer Access Vulnerability (CNVD-2023-41411)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. An uninitialized pointer access vulnerability exists in Adobe Substance 3D Painter 8.3.0 and earlier versions, which can be exploited by an attacker to cause a sensitive memory leak...

5.5CVSS6.6AI score0.00325EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/12 9:15 p.m.6 views

CVE-2023-25007

A malicious actor may convince a user to open a malicious USD file that may trigger an uninitialized pointer which could result in code execution...

7.8CVSS7.2AI score0.00226EPSS
SaveExploits0References1
Rows per page
Query Builder