Lucene search
+L

780 matches found

Positive Technologies
Positive Technologies
•added 2021/06/02 12:00 a.m.•12 views

PT-2021-19383 · Opentext · Opentext Brava! Desktop

Name of the Vulnerable Software and Affected Versions: OpenText Brava! Desktop version 16.6.3.84 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

7.8CVSS8AI score0.01419EPSS
SaveExploits0References6
OSV
OSV
•added 2021/05/07 9:15 p.m.•16 views

CVE-2021-31459

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.6AI score0.02767EPSS
SaveExploits0References2
OSV
OSV
•added 2021/05/07 9:15 p.m.•15 views

CVE-2021-31470

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.2AI score0.02819EPSS
SaveExploits0References2
OSV
OSV
•added 2021/03/30 3:15 p.m.•15 views

CVE-2021-27266

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS4.9AI score0.02187EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/03/10 5:15 p.m.•14 views

CVE-2021-0460

In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

4.4CVSS5.8AI score0.00129EPSS
SaveExploits0References2
OSV
OSV
•added 2021/02/12 12:15 a.m.•7 views

CVE-2020-27860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.03554EPSS
SaveExploits0References2
OSV
OSV
•added 2021/02/09 6:15 p.m.•13 views

CVE-2020-27857

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.03797EPSS
SaveExploits0References2
OSV
OSV
•added 2021/02/09 6:15 p.m.•15 views

CVE-2020-17424

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.0372EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/02/09 12:00 a.m.•8 views

PT-2021-2327

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2020.013.20074 and earlier, 2020.001.30018 and earlier, 2017.011.30188 and earlier Description A heap-based buffer overflow vulnerability exists, allowing an unauthenticated attacker to achieve arbitrary code...

8.8CVSS8.8AI score0.86326EPSS
SaveExploits2References12
attackerkb
attackerkb
•added 2020/12/15 4:15 p.m.•12 views

CVE-2020-0473

In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing an attacker with physical possession of the device to transfer files to it over Bluetooth, with no additional execution...

4.6CVSS5.5AI score0.00151EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/12/15 4:15 p.m.•11 views

CVE-2020-0482

In command of IncidentService.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

4.4CVSS5.6AI score0.0017EPSS
SaveExploits0References2
OSV
OSV
•added 2020/10/13 5:15 p.m.•13 views

CVE-2020-17411

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS5.2AI score0.03113EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/09/17 9:15 p.m.•12 views

CVE-2020-0426

In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154921790...

5.5CVSS5.6AI score0.0015EPSS
SaveExploits0References2
OSV
OSV
•added 2020/08/20 1:17 a.m.•13 views

CVE-2020-8869

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.2AI score0.04029EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/08/11 12:00 a.m.•9 views

PT-2020-3815 · Microsoft · Office +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Description: An information disclosure issue exists due to improper handling of objects in memory by Microsoft Excel. This could allow an attacke...

5.5CVSS5.8AI score0.04639EPSS
SaveExploits0References5
The Hacker News
The Hacker News
•added 2020/07/10 12:35 p.m.•7 views

Unpatched Critical Flaw Disclosed in Zoom Software for Windows 7 or Earlier

A zero-day vulnerability has been discovered in Zoom video conferencing software for Windows that could allow an attacker to execute arbitrary code on a victim's computer running Microsoft Windows 7 or older. To successfully exploit the zoom vulnerability, all an attacker needs to do is tricking ...

6.2AI score
SaveExploits0
OSV
OSV
•added 2020/06/10 6:15 p.m.•15 views

CVE-2020-0114

In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed...

7.8CVSS7.2AI score0.00336EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/22 9:15 p.m.•12 views

CVE-2020-10890

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS7.5AI score0.02224EPSS
SaveExploits0References2
OSV
OSV
•added 2020/04/14 8:15 p.m.•15 views

CVE-2019-10939

A vulnerability has been identified in TIM 3V-IE incl. SIPLUS NET variants All versions V2.8, TIM 3V-IE Advanced incl. SIPLUS NET variants All versions V2.8, TIM 3V-IE DNP3 incl. SIPLUS NET variants All versions V3.3, TIM 4R-IE incl. SIPLUS NET variants All versions V2.8, TIM 4R-IE DNP3 incl...

9.8CVSS7.2AI score0.01116EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/07 4:15 p.m.•13 views

CVE-2017-18680

An issue was discovered on Samsung mobile devices with L5.0/5.1 and M6.0 tablets software. The lockscreen interface allows Add User actions, leading to an unintended ability to access user data in external storage. The Samsung ID is SVE-2016-7797 March 2017...

7.1CVSS5.8AI score
SaveExploits0References1
Rows per page
Query Builder