Lucene search
+L

1591 matches found

CNNVD
CNNVD
added 2021/05/03 12:0 a.m.4 views

ESRI ArcGIS Earth 路径遍历漏洞

A path traversal vulnerability exists in Esri ArcGIS Earth 1.11.0 and earlier versions, which could be exploited to trick a user into uploading a crafted file to an affected system to gain access to it in the security context of the user running ArcGIS Earth. arbitrary code execution...

7.8CVSS6AI score0.01138EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/04/22 12:0 a.m.60 views

Schneider Electric C-Bus Toolkit CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric C-Bus Toolkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

7.8CVSS4AI score0.27172EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/15 2:15 p.m.3 views

CVE-2021-21093

Adobe Bridge versions 10.1.1 and earlier and 11.0.1 and earlier are affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitati...

7.8CVSS6.3AI score0.0393EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/04/01 12:0 a.m.8 views

vscode-stripe 注入漏洞

gracegoo-stripe vscode-stripe is an open source application plugin for gracegoo-stripe.Stripe's extensions to Visual Studio Code make it easy to generate sample code, view API request logs, forward events to your application, and use Stripe in the editor. vscode-stripe has an injection...

7.8CVSS7.7AI score0.00565EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2021/03/25 12:18 p.m.4 views

postgresql: Uncontrolled search path element in logical replication

A flaw was found in PostgreSQL, where it did not properly sanitize the searchpath during logical replication. This flaw allows an authenticated attacker to use this flaw in an attack similar to CVE-2018-1058 to execute an arbitrary SQL command in the user's context for replication. The highest...

7.1CVSS7.3AI score0.02235EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.6 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Arbitrary code can be executed in the context of the current user using a specially crafte...

8.8CVSS7.4AI score0.03977EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.10 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to writing beyond the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the remote memory buffer overflow attack. This allows arbitrary code to execute in the context of the current user, using a...

9.3CVSS8.1AI score0.03545EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.6 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Magento Commerce development and management software platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

4.9CVSS6AI score0.84674EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.7 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Arbitrary code can be executed in the context of the current user using a specially crafte...

8.8CVSS7.4AI score0.02956EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.7 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of executing code outside of the buffer memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of code execution outside the buffer. Exploiting these vulnerabilities can allow a malicious actor to...

9.3CVSS8.2AI score0.02617EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/03/25 12:0 a.m.7 views

Esri ArcReader 资源管理错误漏洞

Esri ArcReader is an application from Esri, USA. A free, easy-to-use desktop mapping application. A security vulnerability exists in Esri ArcReader that allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. No details of the vulnerability are...

7.8CVSS6.4AI score0.01522EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/02/28 12:0 a.m.6 views

Adobe Bridge Code Execution Vulnerability (CNVD-2021-14783)

Adobe Bridge is a file viewer from the American company Audobee Adobe. A security vulnerability exists in Adobe Bridge version 11.0 and earlier, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.4AI score0.03361EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/02/25 12:0 a.m.8 views

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a file viewer from the American company Audobee Adobe. A security vulnerability exists in Adobe Bridge version 11.0 and earlier, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.5AI score0.03361EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/02/23 11:15 p.m.28 views

CVE-2021-3410

A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in cacaresize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context...

7.8CVSS7AI score0.00565EPSS
SaveExploits1References2
OSV
OSV
added 2021/02/23 11:15 p.m.9 views

UBUNTU-CVE-2021-3410

A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in cacaresize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context...

7.8CVSS7.3AI score0.00565EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2021/02/23 10:22 p.m.28 views

CVE-2021-3410

A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in cacaresize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context...

8.2AI score0.00565EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2021/02/09 12:0 a.m.7 views

The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

9.3CVSS6.6AI score0.03951EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/09 12:0 a.m.6 views

The vulnerability of the Adobe Animate program for creating multimedia and computer animations lies in its uncontrolled search element, which allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially craft...

9.3CVSS7.5AI score0.0235EPSS
SaveExploits0References3Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2021/02/09 12:0 a.m.4 views

VulnCheck KEV: CVE-2021-21017

Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user...

8.8CVSS8AI score0.8621EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:0 a.m.7 views

The vulnerability of Adobe Premiere Rush software for video editing lies in the recording of data beyond the buffer limit in memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe Premiere Rush relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

9.3CVSS7.9AI score0.04107EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder