Lucene search
+L

10753 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/01/12 12:00 a.m.34 views

SAP 3D Visual Enterprise Viewer DIB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.8AI score0.01199EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/01/12 12:00 a.m.37 views

SAP 3D Visual Enterprise Viewer BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.6AI score0.01199EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/01/12 12:00 a.m.34 views

SAP 3D Visual Enterprise Viewer DIB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5.7AI score0.01199EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/01/12 12:00 a.m.33 views

SAP 3D Visual Enterprise Viewer SGI File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01199EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/01/12 12:00 a.m.35 views

SAP 3D Visual Enterprise Viewer IFF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5.1AI score0.01199EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/01/12 12:00 a.m.13 views

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

4.3CVSS6.3AI score0.01024EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/01/12 12:00 a.m.16 views

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

8.8CVSS6.3AI score0.01199EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/01/12 12:00 a.m.14 views

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

8.8CVSS6.3AI score0.01199EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2021/01/12 12:00 a.m.25 views

SAP 3D Visual Enterprise Viewer IFF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.6AI score0.01199EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/01/12 12:00 a.m.41 views

SAP 3D Visual Enterprise Viewer PSD File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.9AI score0.01199EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/01/12 12:00 a.m.37 views

SAP 3D Visual Enterprise Viewer DIB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5.7AI score0.01199EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/01/12 12:00 a.m.11 views

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

8.8CVSS6.3AI score0.01199EPSS
SaveExploits0References6
CNVD
CNVD
added 2021/01/11 12:00 a.m.10 views

Krpano Panorama Viewer Cross-Site Scripting Vulnerability (CNVD-2021-02617)

krpano Panorama Viewer is a software for viewing panorama files from the German company krpano. The software supports high-resolution images, interactive virtual roaming, custom-designed user interface, and other features. A cross-site scripting vulnerability exists in Krpano Panorama Viewer in...

6.1CVSS6.4AI score0.01015EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/01/09 12:00 a.m.8 views

Krpano Panorama Viewer Cross-Site Scripting Vulnerability

krpano Panorama Viewer is a software for viewing panorama files from the German company krpano. The software supports high-resolution images, interactive virtual roaming, custom-designed user interface, and other features. A cross-site scripting vulnerability exists in Krpano Panorama Viewer 1.20...

6.1CVSS6.2AI score0.00858EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2021/01/08 5:52 p.m.43 views

CVE-2020-16029

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...

8.8CVSS8.6AI score0.00934EPSS
SaveExploits0
CNVD
CNVD
added 2021/01/08 12:00 a.m.9 views

Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04401)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF, which can be exploited by attackers to cause a stack buffer overflow or an out-of-bounds read...

8.1CVSS7.3AI score0.00816EPSS
SaveExploits1References1
Prion
Prion
added 2021/01/07 6:15 p.m.21 views

Design/Logic Flaw

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations that are not detected...

5CVSS5.7AI score0.03688EPSS
SaveExploits0References4Affected Software17
Cvelist
Cvelist
added 2021/01/07 5:38 p.m.38 views

CVE-2018-18688

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

5.9AI score0.01133EPSS
SaveExploits0References4
OSV
OSV
added 2021/01/07 1:15 p.m.5 views

CVE-2020-24900

The default installation of Krpano Panorama Viewer version =1.20.8 is prone to Reflected XSS due to insecure XML load in file /viewer/krpano.html, parameter xml...

6.1CVSS6.4AI score0.00858EPSS
SaveExploits1References1
OSV
OSV
added 2021/01/07 1:15 p.m.7 views

CVE-2020-24901

The default installation of Krpano Panorama Viewer version =1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugintest.url...

6.1CVSS6.6AI score
SaveExploits0References1
Rows per page
Query Builder