Lucene search
+L

13834 matches found

Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:00 a.m.37 views

Adobe Acrobat Pro DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

9.3CVSS4.3AI score0.06918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:00 a.m.27 views

Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.5CVSS2.3AI score0.07449EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:00 a.m.45 views

Adobe Acrobat Pro DC ImageConversion JPEG Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

9.3CVSS5.8AI score0.27071EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:00 a.m.36 views

Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

9.3CVSS4.5AI score0.0885EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:00 a.m.23 views

Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.5CVSS2.3AI score0.07594EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:00 a.m.39 views

Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS2.3AI score0.06918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:00 a.m.37 views

Adobe Acrobat Pro DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS2AI score0.06566EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:00 a.m.30 views

Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.5CVSS3AI score0.07594EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:00 a.m.34 views

Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

9.3CVSS2.6AI score0.06918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:00 a.m.38 views

Adobe Acrobat Pro DC ImageConversion EMF Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

9.3CVSS5.1AI score0.06918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:00 a.m.28 views

Adobe Acrobat Pro DC JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.5CVSS2.2AI score0.10067EPSS
SaveExploits0References1
Prion
Prion
added 2017/08/07 6:29 a.m.26 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA 9.16.11 and 9.41.2 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device, aka WebVPN XSS...

4.3CVSS6AI score0.0171EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2017/08/07 12:00 a.m.24 views

(0Day) Advantech WebAccess nvA1Media Connect MediaURL Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within nvA1Media.oc...

7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/07 12:00 a.m.37 views

(0Day) Eaton ELCSoft Project File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Eaton ELCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of EPC...

7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/07 12:00 a.m.27 views

Hewlett Packard Enterprise Intelligent Management Center dbman Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens by default o...

10CVSS9.4AI score0.10236EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2017/08/05 3:00 p.m.36 views

CVE-2017-12439

SocuSoft Flash Slideshow Maker Professional through v5.20, when the advanced configuration is used, has an xmlpath HTTP parameter that trusts user-supplied input, in conjunction with an unsafe XML configuration file. This has resultant content forgery, cross site scripting, and unvalidated...

7.6AI score0.00639EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/02 12:00 a.m.27 views

Trend Micro OfficeScan Proxy Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro OfficeScan. Authentication is required to exploit this vulnerability. The specific flaw exists within the Web Console, which listens on TCP port 4343 by default. When parsing the T...

10CVSS4.8AI score0.66774EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/02 12:00 a.m.49 views

Trend Micro Control Manager cmdHandlerStatusMonitor SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within cmdHandlerStatusMonitor.dll when executing opcode 0x6b1b. The issue results...

9.8CVSS4.2AI score0.3874EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/02 12:00 a.m.40 views

Trend Micro Control Manager cmdHandlerLicenseManager SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within cmdHandlerLicenseManager.dll when executing opcode 0x3b21. The issue result...

9.8CVSS1.6AI score0.3874EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/02 12:00 a.m.264 views

Dell Storage Manager EmWebsiteServlet Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Dell Storage Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the doGet method of the EmWebsiteServlet class, which listens on TCP port...

7.5CVSS1.3AI score0.054EPSS
SaveExploits0References1
Rows per page
Query Builder