Lucene search
+L
ZdiMost viewed

17156 matches found

Zero Day Initiative
Zero Day Initiative
•added 2020/03/31 12:00 a.m.•51 views

IBM Spectrum Protect Plus serveradmin Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of IBM Spectrum Protect Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Administrative Console Framework service. The service uses a hard-coded...

7.3CVSS2.9AI score0.01799EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/12/13 12:00 a.m.•51 views

Microsoft Windows GreSetMagicColors Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS5.5AI score0.01419EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/12/11 12:00 a.m.•51 views

Microsoft Windows Font Subsetting Library Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the font...

7.8CVSS3.3AI score0.16568EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/09/17 12:00 a.m.•51 views

Advantech WebAccess Node bwrunmie Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within bwrunmie.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs proces...

9.8CVSS2.8AI score0.02658EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/04/29 12:00 a.m.•51 views

Foxit PhantomPDF HTML2PDF HTML Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1AI score0.02551EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/04/17 12:00 a.m.•51 views

Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing wMessageLen Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation CNCSoft ScreenEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

7.8CVSS5.4AI score0.03666EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/05/04 12:00 a.m.•51 views

Foxit Reader U3D Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

6.5CVSS2.3AI score0.02414EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/01/05 12:00 a.m.•51 views

Advantech WebAccess webvrpcs drawsrv SQLSetConnectOption Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x27de IOCTL in the webvrpcs process. The issue results...

7.5CVSS8AI score0.02079EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/11/14 12:00 a.m.•51 views

Foxit Reader XFA Layout w Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the w method of XFA...

8.8CVSS8.7AI score0.0259EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/09/26 12:00 a.m.•51 views

Dell EMC VNX Monitoring and Reporting Scheduler Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Dell EMC VNX Monitoring and Reporting. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within...

8.8CVSS8.9AI score0.02956EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/08/10 12:00 a.m.•51 views

Fuji Electric Monitouch V-SFT Insecure Configuration Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate their privileges on vulnerable installations of Fuji Electric Monitouch V-SFT. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists withi...

5.3CVSS6.3AI score0.00447EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/08/08 12:00 a.m.•51 views

Microsoft Windows Error Reporting Manager Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute medium-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows...

8.5CVSS8AI score0.03889EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/08/02 12:00 a.m.•51 views

Trend Micro Control Manager cmdHandlerStatusMonitor SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within cmdHandlerStatusMonitor.dll when executing opcode 0x6b1b. The issue results...

9.8CVSS4.2AI score0.38483EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/07/14 12:00 a.m.•51 views

Microsoft Windows OTL Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5CVSS3.6AI score0.02973EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
•added 2017/07/07 12:00 a.m.•51 views

Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

6.5CVSS2.2AI score0.02456EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/05/15 12:00 a.m.•51 views

Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10007 Arbitrary File Deletion Denial of Service Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

7.8CVSS1.6AI score0.11762EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/03/28 12:00 a.m.•51 views

Apple Safari ElementData Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

8.8CVSS1.8AI score0.01872EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/03/11 12:00 a.m.•51 views

Hewlett Packard Enterprise Intelligent Management Center RMI Registry Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the euplat RMI registry. The issue lies in th...

9.8CVSS2.9AI score0.3433EPSS
SaveExploits4References1
Zero Day Initiative
Zero Day Initiative
•added 2017/01/20 12:00 a.m.•51 views

Samba NDR Parsing ndr_pull_dnsp_name Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samba. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NDR data. The issue results from the lack of proper validation of the length of...

8.8CVSS8.8AI score0.06226EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/01/10 12:00 a.m.•51 views

Adobe Reader DC XSLT namespace-alias Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within XSLT's...

9.3CVSS3.5AI score0.2042EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/09/20 12:00 a.m.•51 views

Apple OS X AppleHSSPIHIDDriver Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

9.3CVSS5.2AI score0.01255EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/03/11 12:00 a.m.•51 views

Mozilla Firefox nsHTMLDocument SetBody Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

8.8CVSS2.5AI score0.0289EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/03/08 12:00 a.m.•51 views

Adobe Acrobat Pro DC DLL Planting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists within the handling of DLL search paths. In...

8.4CVSS2.8AI score0.01098EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/02/09 12:00 a.m.•51 views

Microsoft Internet Explorer CAttrArray Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS3.7AI score0.27147EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/02/05 12:00 a.m.•51 views

Advantech WebAccess webvrpcs Service BwpAlarm.dll ProjectName/NodeName sprintf Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x11367 IOCTL in the BwpAlarm subsystem. A stack-based buffe...

10CVSS5.8AI score0.16655EPSS
SaveExploits9References1
Zero Day Initiative
Zero Day Initiative
•added 2015/10/13 12:00 a.m.•51 views

Adobe Reader Arbitrary File Deletion Sandbox Escape Vulnerability

This vulnerability allows local attackers to delete arbitrary files on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

1.9CVSS5.6AI score0.01124EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2015/07/14 12:00 a.m.•51 views

Microsoft Internet Explorer Enhanced Protected Mode Read-Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to partially escape AppContainer limitations on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

4.3CVSS5.9AI score0.17855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2015/05/19 12:00 a.m.•51 views

Google Chrome SpeechRecognitionClient Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Google Chrome. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.8CVSS6.4AI score0.02422EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
•added 2015/05/12 12:00 a.m.•51 views

Microsoft Internet Explorer CElement::DelMarkupPtr Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

9.3CVSS6.5AI score0.15525EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2015/04/22 12:00 a.m.•51 views

Novell ZENworks Preboot Policy Service Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENWorks. Authentication is not required to exploit this vulnerability. The specific flaw exists within ZENworks Preboot Policy Service, which listens on port 13331. The vulnerability is in...

10CVSS9.2AI score0.23643EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2015/01/07 12:00 a.m.•51 views

ManageEngine Desktop Central MSP StatusUpdateServlet fileName File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine Desktop Central MSP. Authentication is not required to exploit this vulnerability. The specific flaw exists within the StatusUpdateServlet servlet. The issue lies in the failure to...

7.5CVSS9.4AI score0.77848EPSS
SaveExploits12References1
Zero Day Initiative
Zero Day Initiative
•added 2014/10/14 12:00 a.m.•51 views

Panasonic Network Camera View GetImageDataPrint Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic Network Camera View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

6.8CVSS6.6AI score0.02612EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2014/08/27 12:00 a.m.•51 views

SolarWinds Storage Manager AuthenticationFilter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AuthenticationFilter class. The issue lies in the ability to subvert th...

1.9AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2014/08/12 12:00 a.m.•51 views

(0Day) F5 Data Manager discoverFilerBasicInfo.jsft filerName SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of F5 Data Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the discoverFilerBasicInfo.jsft page. An attacker is able to inject SQL through the...

6.5CVSS7.7AI score0.01421EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2014/08/12 12:00 a.m.•51 views

Microsoft Internet Explorer CPhraseElement Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS7.6AI score0.16528EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2014/08/07 12:00 a.m.•51 views

(0Day) (Pwn2Own) Microsoft Internet Explorer PresentationHost.exe Protected Mode Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.5AI score0.11697EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2014/06/11 12:00 a.m.•51 views

Microsoft Internet Explorer CMarkup Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS6.3AI score0.30292EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
•added 2014/05/30 12:00 a.m.•51 views

(0Day) VMware vCenter Server Appliance Ruby vSphere Console Privilege Escalation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of VMware vCenter Appliance. Authentication is required to exploit this vulnerability. The specific flaw exists within the usage of the Ruby vSphere Console RVC provided by the vCenter Server Applianc...

9CVSS7.4AI score0.02351EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2014/04/03 12:00 a.m.•51 views

Mozilla Firefox imgRequestProxy Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

10CVSS9AI score0.07072EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2013/08/13 12:00 a.m.•51 views

Hewlett-Packard SiteScope SOAP Call runOMAgentCommand Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists within APIBSMIntegrationImpl's processing of the runOMAgentCommand which can be invoked through...

10CVSS3.3AI score0.68895EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
•added 2013/08/13 12:00 a.m.•51 views

Hewlett-Packard System Management iprange Parameter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP System Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the iprange parameter when passed to /proxy/DataValidation in an...

2.1CVSS2.5AI score0.00527EPSS
SaveExploits4References1
Zero Day Initiative
Zero Day Initiative
•added 2013/07/26 12:00 a.m.•51 views

Hewlett-Packard LeftHand Virtual SAN Appliance Hydra Login Remote Command Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LeftHand Virtual SAN Appliance. Authentication is not required to exploit this vulnerability. The flaw exists within the hydra service, specifically with the LHNSessionManager component. This...

10CVSS3.8AI score0.61813EPSS
SaveExploits8References1
Zero Day Initiative
Zero Day Initiative
•added 2013/05/10 12:00 a.m.•51 views

Oracle Java setICMpixels Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

10CVSS3.4AI score0.06917EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2012/06/21 12:00 a.m.•51 views

HP OpenView Performance Manager PMParamHandler Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Performance Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the PMParamHandler component of Performance Manager, which is served v...

10CVSS4.6AI score0.23619EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
•added 2011/08/17 12:00 a.m.•51 views

(0Day) FlexNet License Server Manager Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Flexnet License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the license server manager which listens on TCP port 27000. There are multiple...

7.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/06/15 12:00 a.m.•51 views

Adobe Shockwave Shockwave 3d Asset.x32 DEMX 0xFFFFFF45 Field Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS4.4AI score0.03575EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/04/19 12:00 a.m.•51 views

Webkit Undefined DOM Prototype Attach Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS2.9AI score0.03923EPSS
SaveExploits2
Zero Day Initiative
Zero Day Initiative
•added 2011/04/12 12:00 a.m.•51 views

Microsoft Office XP Data Validation Record Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS5.6AI score0.70166EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
•added 2011/03/02 12:00 a.m.•51 views

Mozilla Firefox JSON.stringify Dangling Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within js3250.dll. In the...

10CVSS4.3AI score0.072EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2010/12/07 12:00 a.m.•51 views

Apple QuickTime FPX Subimage Count Out-of-bounds Counter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required in that a user must be coerced into opening up a malicious document or visiting a malicious website. The specific flaw exists within the way the...

9.3CVSS6.9AI score0.04937EPSS
SaveExploits0References1
Total number of security vulnerabilities5000