Lucene search
+L
ZdiMost viewed

16763 matches found

Zero Day Initiative
Zero Day Initiative
•added 2010/03/09 12:00 a.m.•48 views

Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the decompression of XLSX files. The XL...

10CVSS4.4AI score0.25692EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2010/02/18 12:00 a.m.•48 views

IBM Cognos Server Backdoor Account Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute remote code on vulnerable installations of IBM Cognos Server. Proper authentication is not required to exploit this vulnerability. The specific flaw exists due to a hidden manager-level account with a default password defined in the user...

9CVSS8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2009/11/04 12:00 a.m.•48 views

Sun Java Runtime AWT setDifflCM Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun Java Runtime Environment. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the processing of arguments to t...

9.3CVSS5.1AI score0.65461EPSS
SaveExploits9References1
Zero Day Initiative
Zero Day Initiative
•added 2008/10/30 12:00 a.m.•48 views

IBM Tivoli Storage Manager Express for Microsoft SQL Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager Express for Microsoft SQL. Authentication is not required to exploit this vulnerability. The specific flaw resides in the Data Protection for SQL CAD service, dsmcat.exe, which...

10CVSS3.9AI score0.11379EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2008/05/27 12:00 a.m.•48 views

Motorola RAZR JPG Processing Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable Motorola RAZR firmware based cell phones. User interaction is required to exploit this vulnerability in that the target must accept a malicious image sent via MMS. The specific flaw exists in the JPEG thumbprint...

9.3CVSS7.3AI score0.05837EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2006/03/27 12:00 a.m.•48 views

Symantec VERITAS NetBackup Database Manager Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable Symantec VERITAS NetBackup installations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetBackup Database Manager service bpdbm.exe due to insufficient bounds...

9CVSS3.9AI score0.07927EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/05/09 12:00 a.m.•47 views

Microsoft Windows Bluetooth AVDTP Protocol Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must connect a malicious Bluetooth device. The specific flaw exists within the processing of...

7.6CVSS7.2AI score0.00953EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•47 views

Linux Kernel nf_tables_expr_destroy Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the nftablesexprdestroy...

8.8CVSS7.5AI score0.02914EPSS
SaveExploits6References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/31 12:00 a.m.•47 views

(Pwn2Own) Samsung Galaxy S22 InstantPlaysDeepLink Permissive List of Allowed Inputs Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S22 smartphones. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.9AI score0.00521EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/15 12:00 a.m.•47 views

D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the SOAP A...

6.8CVSS7.4AI score0.0176EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/04 12:00 a.m.•47 views

(Pwn2Own) Canon imageCLASS MF743Cdw IPP sides Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF743Cdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Internet Printing Protocol IPP service. The issue resul...

8.8CVSS7.4AI score0.01139EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/04/24 12:00 a.m.•47 views

(Pwn2Own) TP-Link Archer AX21 merge_country_config Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mergecountryconfig function. The issue results from the lack o...

8.8CVSS8.7AI score0.99999EPSS
SaveExploits7References1
Zero Day Initiative
Zero Day Initiative
•added 2023/04/14 12:00 a.m.•47 views

(Pwn2Own) Sonos One Speaker msprox Endpoint Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker. Authentication is not required to exploit this vulnerability. The specific flaw exists within the msprox endpoint. The issue results from the lack of proper...

5.4CVSS6.1AI score0.0063EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/04/11 12:00 a.m.•47 views

Microsoft Office Word SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

7.8CVSS7.8AI score0.03011EPSS
SaveExploits4References1
Zero Day Initiative
Zero Day Initiative
•added 2023/03/14 12:00 a.m.•47 views

Microsoft Print 3D WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS7.6AI score0.00657EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/02/09 12:00 a.m.•47 views

VMware vRealize Log Insight RemotePakDownloadCommand Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMware vRealize Log Insight. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RemotePakDownloadCommand function. The issue results from the lack of...

9.8CVSS5.4AI score0.87077EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
•added 2023/02/09 12:00 a.m.•47 views

Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS7.7AI score0.00355EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•47 views

Microsoft Windows IKEEXT Service Vendor ID Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft Windows. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IKEEXT service, which listens on UDP ports 500 and 4500. A crafted...

3.7CVSS7.7AI score0.89276EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/12/28 12:00 a.m.•47 views

D-Link DIR-825/EE xupnpd Upload Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpd service, which listens on TCP port 4044. The issue result...

8.8CVSS4.5AI score0.00962EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/11/22 12:00 a.m.•47 views

Microsoft Exchange G711Reader Exposed Dangerous Function Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the G711Reader class. The issue results from the exposure of a dangerous function...

4.3CVSS1AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
•added 2022/11/21 12:00 a.m.•47 views

TP-Link TL-WR940N httpd Incorrect Implementation of Authentication Algorithm Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default...

6.5CVSS0.5AI score0.00587EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2022/08/18 12:00 a.m.•47 views

Microsoft Windows Untrusted Script Execution Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

7.8CVSS2.8AI score0.01449EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/07/15 12:00 a.m.•47 views

(Pwn2Own) Inductive Automation Ignition Missing Authentication for Critical Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authenticateAdSso method. The issue results from the lack of...

8.1CVSS4.4AI score0.39194EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/07/15 12:00 a.m.•47 views

Siemens Simcenter Femap NEU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.00801EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/07/15 12:00 a.m.•47 views

(Pwn2Own) Inductive Automation Ignition Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.8AI score0.00696EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/29 12:00 a.m.•47 views

ABB e-Design Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of ABB e-Design. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.1CVSS4.4AI score0.00274EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/05/26 12:00 a.m.•47 views

Ivanti Avalanche Certificate Management Server Service Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Certificate Management...

9.8CVSS4AI score0.06708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/05/10 12:00 a.m.•47 views

Cisco RV340 JSON RPC set-snmp Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling o...

4.3CVSS4.2AI score0.02081EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/12 12:00 a.m.•47 views

Bentley MicroStation CONNECT DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5AI score0.00938EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/03/29 12:00 a.m.•47 views

KOYO Screen Creator SCA2 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.3AI score0.00885EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/22 12:00 a.m.•47 views

(Pwn2Own) Cisco RV340 upload.cgi JSON Command Injection Privilege Escalation Vulnerability

This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of Cisco RV340 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of...

4.3CVSS3.7AI score0.75322EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/15 12:00 a.m.•47 views

Siemens JT2Go PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

7.8CVSS4.8AI score0.0127EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/15 12:00 a.m.•47 views

(Pwn2Own) Lexmark MC3224i PJL Exposed Dangerous Function Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of PJL commands. The issue results from an exposed...

8.8CVSS4.8AI score0.01435EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/11 12:00 a.m.•47 views

Siemens Simcenter Femap NEU File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.9AI score0.01564EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•47 views

Bentley MicroStation CONNECT JT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

3.3CVSS2.5AI score0.01654EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•47 views

Bentley View 3DS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.6AI score0.01815EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•47 views

Bentley MicroStation CONNECT DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

3.3CVSS2.6AI score0.01699EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/13 12:00 a.m.•47 views

Fatek Automation WinProladder PDW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.01926EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•47 views

Bentley View JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5AI score0.01937EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•47 views

Bentley View BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS5.9AI score0.02123EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:00 a.m.•47 views

Bentley ContextCapture OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley ContextCapture. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.6AI score0.01699EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/05 12:00 a.m.•47 views

Hewlett Packard Enterprise iLO Amplifier Pack backup Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise iLO Amplifier Pack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the backup endpoint. The issue results from the lack of...

9.8CVSS9.4AI score0.13478EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:00 a.m.•47 views

Microsoft Windows storport Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the storport.sys...

8.8CVSS6AI score0.01002EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/09/16 12:00 a.m.•47 views

Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.4AI score0.65249EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/09/14 12:00 a.m.•47 views

(0Day) Autodesk Navisworks DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.8AI score0.00988EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/08/03 12:00 a.m.•47 views

(Pwn2Own) Parallels Desktop Toolgate Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within t...

6.5CVSS3.7AI score0.00267EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/07/28 12:00 a.m.•47 views

Adobe After Effects PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

7.8CVSS4.1AI score0.02199EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•47 views

Siemens JT2Go J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS3AI score0.01421EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/06/25 12:00 a.m.•47 views

(Pwn2Own) Apple Safari Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the LLIntGenerator...

8.8CVSS4AI score0.02006EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2021/06/22 12:00 a.m.•47 views

Autodesk AutoCAD DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

3.3CVSS3AI score0.02743EPSS
SaveExploits0References1
Total number of security vulnerabilities5000