Lucene search
+L

13833 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/01/27 12:00 a.m.32 views

Microsoft Windows Event Tracing Out-Of-Bounds Access Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation...

7.8CVSS5.9AI score0.00647EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2021/01/26 12:00 a.m.7 views

Zoho ManageEngine Applications Manager SQL Injection

A SQL injection vulnerability exists in the Zoho ManageEngine Applications Manager. The vulnerability is due to improper validation of user-supplied input when processing the request in getAssociateMonitors method...

4.7AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/01/21 12:00 a.m.138 views

Microsoft Windows splwow64 Out-Of-Bounds Read Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...

7.8CVSS4.7AI score0.01229EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2021/01/19 12:00 a.m.42 views

Advantech iView exportTaskMgrReport Directory Traversal (CVE-2020-16245)

A directory traversal vulnerability exists in Advantech iView. The vulnerability is due to improper validation of user-supplied path before using in exportTaskMgrReport method...

7.5CVSS3.8AI score0.07717EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:00 a.m.30 views

Delta Industrial Automation DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Delta Industrial Automation DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS4.7AI score0.0325EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:00 a.m.43 views

Siemens JT2Go TGA File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of TG...

7.8CVSS5.7AI score0.04297EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:00 a.m.38 views

Siemens JT2Go TGA File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of TG...

7.8CVSS5.7AI score0.04297EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:00 a.m.68 views

Microsoft Windows splwow64 Out-Of-Bounds Read Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...

7CVSS4.7AI score0.01229EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:00 a.m.42 views

Siemens JT2Go PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

7.8CVSS4.6AI score0.03042EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:00 a.m.186 views

Siemens JT2Go JT File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.7AI score0.03042EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:00 a.m.34 views

Siemens JT2Go PAR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PAR...

7.8CVSS4.5AI score0.03439EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:00 a.m.43 views

Siemens JT2Go RGB and SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of RG...

7.8CVSS5.9AI score0.04297EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:00 a.m.36 views

Siemens JT2Go PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PAR...

7.8CVSS5.6AI score0.02833EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/13 10:15 p.m.25 views

CVE-2021-1360

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

9CVSS7.3AI score0.02194EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/13 10:15 p.m.31 views

CVE-2021-1214

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

9CVSS7.3AI score0.02194EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/13 10:15 p.m.31 views

CVE-2021-1206

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

9CVSS7.3AI score0.02194EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/13 10:15 p.m.25 views

CVE-2021-1204

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

9CVSS7.3AI score0.02194EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/13 10:15 p.m.28 views

CVE-2021-1202

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

9CVSS7.3AI score0.02194EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/13 10:15 p.m.24 views

CVE-2021-1199

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

9CVSS7.3AI score0.02194EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/13 10:15 p.m.33 views

CVE-2021-1181

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

9CVSS7.3AI score0.02194EPSS
SaveExploits0References1
Rows per page
Query Builder