Lucene search
+L

10627 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.23 views

Siemens Solid Edge Viewer STL File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS4.3AI score0.00218EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.25 views

Siemens Solid Edge Viewer DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.00226EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.20 views

Siemens Solid Edge Viewer SLDPRT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS5.7AI score0.0021EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.18 views

Siemens Solid Edge Viewer SLDPRT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS5.7AI score0.0021EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.24 views

Siemens Solid Edge Viewer STL File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.1AI score0.00201EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:0 a.m.20 views

Siemens Solid Edge Viewer SLDPRT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS5.7AI score0.0021EPSS
SaveExploits0References1
Snyk
Snyk
added 2023/02/21 8:16 a.m.4 views

Malicious Package

Overview react-wp-viewer is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

9.8CVSS7.1AI score
SaveExploits0References3
Citrix
Citrix
added 2023/02/21 12:0 a.m.27 views

Cannot join Server Group - Error occurred running the command: Start-DSClusterJoinService

When trying to add Storefront server to existing group, getting error: When checking event viewer logs on Storefront server, we see: An error occurred running the command: 'Start-DSClusterJoinService' Exception of type...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2023/02/20 12:0 a.m.61 views

Adobe Bridge out-of-bounds write vulnerability (CNVD-2023-13728)

Adobe Bridge is a file viewer from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Bridge, which can be exploited to execute arbitrary code in the context of the current user...

7.8CVSS3.6AI score0.00291EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2023/02/17 12:0 a.m.14 views

Simple PDF Viewer <= 1.9 - Contributor+ XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6.5CVSS5.1AI score0.00361EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2023/02/17 12:0 a.m.44 views

Adobe Bridge Stack Buffer Overflow Vulnerability (CNVD-2023-13735)

Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a stack buffer overflow vulnerability that could be exploited to execute arbitrary code in the context of the current user...

7.8CVSS4.4AI score0.00396EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/02/17 12:0 a.m.47 views

Adobe Bridge out-of-bounds write vulnerability (CNVD-2023-13734)

Adobe Bridge is a file viewer from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Bridge, which can be exploited to execute arbitrary code in the context of the current user...

7.8CVSS3.6AI score0.00302EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2023/02/17 12:0 a.m.11 views

WordPress Simple PDF Viewer Plugin <= 1.9 is vulnerable to Cross Site Scripting (XSS)

Software Simple PDF Viewer Type Plugin Vulnerable versions = 1.9 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23817 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 65a3708bedaf Credits István Márton Required...

6.5CVSS5.8AI score0.00361EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2023/02/17 12:0 a.m.52 views

Adobe Bridge Out-of-Bounds Read Vulnerability (CNVD-2023-17018)

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

5.5CVSS5.7AI score0.00325EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 6:19 a.m.7 views

SUSE CVE-2004-1725

Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file...

7.5CVSS8.3AI score0.03809EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:18 a.m.3 views

SUSE CVE-2005-0665

Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename...

5.1CVSS8AI score0.01926EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:16 a.m.6 views

SUSE CVE-2005-3759

Multiple cross-site scripting XSS vulnerabilities in Horde before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 gzip/tar and 2 css MIME viewers, which do not filter or escape dangerous HTML when extracting and displaying attachments...

5.8CVSS6AI score0.01437EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:16 a.m.6 views

SUSE CVE-2006-1060

Heap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted attackers to execute arbitrary code via a JPEG image with more than 3 output components, such as a CMYK or YCCK color space, which causes less memory to be allocated than required...

7.5CVSS8.2AI score0.04073EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:15 a.m.7 views

SUSE CVE-2006-1491

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer...

7.5CVSS8.4AI score0.38441EPSS
SaveExploits3References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:14 a.m.5 views

SUSE CVE-2006-3119

The fbgs framebuffer Postscript/PDF viewer in fbi before 2.01 has a typo that prevents a filter from working correctly, which allows user-assisted attackers to bypass the filter and execute malicious Postscript commands...

5.1CVSS7.2AI score0.01727EPSS
SaveExploits0References4
Rows per page
Query Builder