Lucene search
+L

5509 matches found

Positive Technologies
Positive Technologies
added 2024/04/01 12:0 a.m.8 views

PT-2024-18541 · Imgsys · Imgsys

Name of the Vulnerable Software and Affected Versions: imgsys affected versions not specified Description: The issue is related to a missing bounds check in imgsys, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user interaction is...

6.3CVSS5.9AI score0.00079EPSS
SaveExploits0References4
OSV
OSV
added 2024/04/01 12:0 a.m.9 views

PUB-A-318345650

In dvfsgetlv of dvfs.c, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9CVSS6.2AI score0.00087EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/01 12:0 a.m.10 views

PUB-A-315322436

In tmugetgovtimewindows, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.2AI score0.00088EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/01 12:0 a.m.11 views

PUB-A-318507188

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS7.2AI score0.0068EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/28 12:0 a.m.5 views

PT-2024-23320 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...

7.1CVSS7.7AI score0.00662EPSS
SaveExploits0References9
Zero Day Initiative
Zero Day Initiative
added 2024/03/28 12:0 a.m.17 views

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS7.2AI score0.00914EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/28 12:0 a.m.5 views

PT-2024-23318 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...

3.3CVSS5.5AI score0.00711EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2024/03/27 12:0 a.m.26 views

Autodesk DWG TrueView DWG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk DWG TrueView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

7.8CVSS7.2AI score0.0047EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/18 4:15 p.m.5 views

CVE-2024-20752

Bridge versions 13.0.5, 14.0.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.3AI score0.07758EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:0 a.m.30 views

Adobe Acrobat Reader DC PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.1AI score0.00562EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:0 a.m.19 views

Dassault Systèmes eDrawings IPT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/08 12:0 a.m.23 views

Dassault Systèmes eDrawings JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.00338EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/05 12:0 a.m.5 views

PT-2024-8064 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the...

7.8CVSS8AI score0.00817EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/03/05 12:0 a.m.9 views

PT-2024-8059 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: The issue is related to a use-after-free vulnerability in the handling of AcroForms, which can be exploited by remote attackers to...

7.8CVSS8AI score0.0081EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/03/04 12:0 a.m.8 views

PT-2024-21832 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this issue, where the targ...

5.5CVSS6.7AI score0.00385EPSS
SaveExploits0References5
OSV
OSV
added 2024/03/01 12:0 a.m.11 views

PUB-A-315313468

In configgovtimewindows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.1AI score0.00084EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/02/28 12:0 a.m.36 views

PT-2024-18358 · Dassault Systèmes · Dassault Systèmes Edrawings

Name of the Vulnerable Software and Affected Versions: Dassault Systèmes eDrawings affected versions not specified Description: The issue allows remote code execution via various file parsing vulnerabilities, including heap-based buffer overflow, memory corruption, out-of-bounds read, out-of-boun...

7.8CVSS8.2AI score0.00338EPSS
SaveExploits0References42
Positive Technologies
Positive Technologies
added 2024/02/23 12:0 a.m.9 views

PT-2024-21823 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...

5.5CVSS7AI score0.00403EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/17 2:15 a.m.8 views

CVE-2024-20913

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

5.4CVSS7.3AI score0.00308EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/15 1:15 p.m.6 views

CVE-2024-20726

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.3AI score0.02379EPSS
SaveExploits0References1
Rows per page
Query Builder