Lucene search
+L

1602 matches found

CNNVD
CNNVD
added 2025/03/11 12:0 a.m.7 views

Adobe Substance3D 安全漏洞

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.9AI score0.00286EPSS
SaveExploits0References2
NVD
NVD
added 2025/02/26 1:15 p.m.5 views

CVE-2025-0731

An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account. The code can only be executed in the security context of the user...

6.5CVSS0.00699EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.10 views

The vulnerability of the 7Z File Parser component, a archive file processor for the WinZip archive manager, allows a hacker to execute arbitrary code.

The vulnerability of the 7Z File Parser component, a archive file processor for the WinZip archive manager, is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, by sending a...

7.8CVSS8.1AI score0.10395EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/02/11 6:15 p.m.2 views

CVE-2025-21160

Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.3AI score0.00368EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/11 12:0 a.m.5 views

Adobe Illustrator 安全漏洞

Adobe Illustrator is a professional vector graphic design software developed by Adobe, widely used in graphic design, illustration creation, web design and other fields. A stack buffer overflow vulnerability exists in Adobe Illustrators in versions 29.1, 28.7.3 and earlier. The vulnerability is...

7.8CVSS7.8AI score0.00374EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/02/10 12:0 a.m.9 views

IBM ApplinX Cross-Site Request Forgery Vulnerability (CNVD-2025-06206)

IBM ApplinX is an International Business Machines IBM company focused on converting green screen interfaces into modern web-based applications. IBM ApplinX suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to construct a malicious URI, bait a request, an...

4.3CVSS6.4AI score0.00142EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/02/10 12:0 a.m.38 views

IBM ApplinX Cross-Site Request Forgery Vulnerability

IBM ApplinX is an International Business Machines IBM company focused on converting green screen interfaces into modern web-based applications. IBM ApplinX suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to construct a malicious URI, bait a request, an...

4.3CVSS6.4AI score0.00142EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/06 12:0 a.m.6 views

IBM ApplinX 跨站请求伪造漏洞

IBM ApplinX is an International Business Machines IBM company focused on converting green screen interfaces into modern web-based applications. IBM ApplinX suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to construct a malicious URI, bait a request, an...

4.3CVSS6.6AI score0.00142EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/06 12:0 a.m.5 views

IBM ApplinX 跨站请求伪造漏洞

IBM ApplinX is an International Business Machines IBM company focused on converting green screen interfaces into modern web-based applications. IBM ApplinX suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to construct a malicious URI, bait a request, an...

4.3CVSS6.6AI score0.00142EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 2:56 a.m.11 views

CVE-2024-6596

An unauthenticated remote attacker can run malicious c code included in curve files and execute commands in the users context...

9.8CVSS7.8AI score0.00791EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2025/02/04 12:0 a.m.5 views

VulnCheck KEV: CVE-2025-0411

7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user...

7CVSS7.5AI score0.67071EPSS
SaveExploits8References1
Zero Day Initiative
Zero Day Initiative
added 2025/02/04 12:0 a.m.11 views

Microsoft Edge ms-its: Scheme Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file while in Internet Explorer mode. The specific flaw...

7.5CVSS7.3AI score
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/30 6:24 p.m.20 views

CVE-2025-24502

An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client IP address...

5.3CVSS0.00217EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.11 views

The vulnerability of the Substance 3D Stager software lies in buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in buffer overflow attacks within the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created malicious file...

7.8CVSS6.3AI score0.00259EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.8 views

The vulnerability of the Adobe Framemaker desktop publishing system arises from buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the desktop publishing system Adobe Framemaker arises from an overflow in the buffer of the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00484EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.9 views

The vulnerability of the Adobe Bridge file manager, caused by a loss of precision for an integer, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager arises from a loss of precision for a whole number. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS5.9AI score0.00459EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.6 views

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially created...

7.8CVSS6.4AI score0.00212EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.14 views

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created malware file...

7.8CVSS6.4AI score0.00212EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.6 views

Adobe Illustrator 数字错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator that can be exploited by an attacker to cause arbitrary code to be executed in the current user's context...

7.8CVSS7.1AI score0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.6 views

Adobe Illustrator 数字错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator that can be exploited by an attacker to cause arbitrary code to be executed in the current user's context...

7.8CVSS7.1AI score0.00251EPSS
SaveExploits0References1
Rows per page
Query Builder