Lucene search
+L
ZdiMost viewed

17156 matches found

Zero Day Initiative
Zero Day Initiative
•added 2012/03/22 12:00 a.m.•47 views

RealNetworks RealPlayer RealAudio coded_frame_size Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required in that a target must visit a malicious page or open a malicious file. The flaw exists within cook.dll, specifically the handling of a RealAudi...

9.3CVSS5.1AI score0.03682EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2012/02/08 12:00 a.m.•47 views

Adobe Reader BMP Resource Signedness Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within 2d.x3d, which is...

9.8CVSS3.9AI score0.30253EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/10/27 12:00 a.m.•47 views

Apple Quicktime Empty URL Data Handler Remote Code Execution Vulnerability

This vulnerability allows remote attackers to potentially disclose memory addresses on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.3CVSS3.1AI score0.0189EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2011/08/17 12:00 a.m.•47 views

Mozilla Firefox SVGTextElement.getCharNumAtPosition Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the code...

10CVSS5.7AI score0.04805EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2011/08/16 12:00 a.m.•47 views

HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Easy Printer Care. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS6.5AI score0.7374EPSS
SaveExploits9References2
Zero Day Initiative
Zero Day Initiative
•added 2011/06/08 12:00 a.m.•47 views

Oracle Java ICC Profile MultiLanguage 'mluc' Tag Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the way Java handles color profiles. When parsing a...

10CVSS6AI score0.06329EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/03/18 12:00 a.m.•47 views

Novell Netware NWFTPD.NLM DELE Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authentication is required to exploit this vulnerability. The flaw exists within NWFTPD.NLM. When handling the argument provided to the DELE command the application copies user...

9CVSS3.2AI score0.14658EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
•added 2011/02/15 12:00 a.m.•47 views

Oracle Java Applet Clipboard Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Oracle Java Runtime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw is due to insufficient defenses against system...

10CVSS2.6AI score0.04132EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2011/02/07 12:00 a.m.•47 views

(0Day) IBM Lotus Domino IMAP/POP3 Non-Printable Character Expansion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the POP3 and IMAP services while processing malformed e-mails. The...

10CVSS5.9AI score0.05912EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/01/18 12:00 a.m.•47 views

Oracle Beehive voice-servlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Beehive. Authentication is not required to exploit this vulnerability. The specific flaw exists within 'voice-servlet/prompt-qa/Index.jspf'. During the creation of a file used for storing an...

7.5CVSS3.4AI score0.76308EPSS
SaveExploits4References1
Zero Day Initiative
Zero Day Initiative
•added 2010/08/24 12:00 a.m.•47 views

Adobe Shockwave Player Director File FFFFFF88 Record Processing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS7AI score0.06051EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2010/08/11 12:00 a.m.•47 views

Apple Webkit Button First-Letter Style Rendering Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. Authentication is not required to exploit this vulnerability. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope...

9.3CVSS8.8AI score0.06691EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2010/07/20 12:00 a.m.•47 views

Novell Groupwise WebAccess Multiple Cross-Site Scripting Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary client side script on vulnerable installations of Novell Groupwise WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within handling html messages sent to a Novell Groupwise WebAccess...

6.4AI score
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2010/04/02 12:00 a.m.•47 views

Apple QuickTime QDMC/QDM2 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the...

6.8CVSS4.9AI score0.0284EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2009/11/05 12:00 a.m.•47 views

Hewlett-Packard Power Manager Administration Web Server Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Power Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of URL parameters when posting to the login form of the web bas...

10CVSS4.6AI score0.76706EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
•added 2009/08/18 12:00 a.m.•47 views

Oracle Secure Backup Administration Server Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Oracle Secure Backup. User interaction is not required to exploit this vulnerability. The specific flaw exists in the logic used to authenticate a user to the administration server running on port...

10CVSS4.9AI score0.72638EPSS
SaveExploits7References1
Zero Day Initiative
Zero Day Initiative
•added 2007/03/28 12:00 a.m.•47 views

IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the CRAM-MD5 authentication mechanism of nimap.exe which binds by default to TCP...

10CVSS3.6AI score0.6122EPSS
SaveExploits8References1
Zero Day Initiative
Zero Day Initiative
•added 2006/08/08 12:00 a.m.•47 views

Microsoft Internet Explorer Multiple CSS Imports Memory Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists due to improper garbage collection when...

7.5CVSS2.3AI score0.41215EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2026/02/05 12:00 a.m.•46 views

(Pwn2Own) Lexmark CX532adwe libesffls Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark CX532adwe printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the libesffls binary. The issue results from the lack of proper...

8.8CVSS6.2AI score0.00807EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/08/06 12:00 a.m.•46 views

(0Day) Microsoft Edge PDF NTLM Response Information Disclosure Vulnerability

This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of lin...

6.5CVSS6.4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/06/21 12:00 a.m.•46 views

(Pwn2Own) Ubiquiti Networks EV Station EVCLauncher Improper Certificate Validation Vulnerability

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of Ubiquiti Networks EV Station. User interaction is not required to exploit this vulnerability. The specific flaw exists within the EVCLauncher application. The...

6.3CVSS6.4AI score0.00325EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/05/13 12:00 a.m.•46 views

Delta Electronics InfraSuite Device Master ActiveMQ Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics InfraSuite Device Master. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Apache ActiveMQ broker, which listens on TCP port 61616 b...

9.8CVSS7.7AI score0.99891EPSS
SaveExploits33References1
Zero Day Initiative
Zero Day Initiative
•added 2024/04/26 12:00 a.m.•46 views

(Pwn2Own) Oracle VirtualBox AHCI Controller Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS6.3AI score0.00392EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/02/06 12:00 a.m.•46 views

(Pwn2Own) Canon imageCLASS MF753Cdw CADM setResource Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF753Cdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CADM service. The issue results from the lack of proper...

8.8CVSS7.5AI score0.01383EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/02/05 12:00 a.m.•46 views

(Pwn2Own) TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DHCP options. The issue results from the lack of...

7.5CVSS7.5AI score0.00912EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/01/04 12:00 a.m.•46 views

X.Org Server DeepCopyPointerClasses Out-Of-Bounds Access Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Button...

7.8CVSS7.7AI score0.01574EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•46 views

(0Day) Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

5.5CVSS6.2AI score0.00784EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/11/15 12:00 a.m.•46 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.2AI score0.01846EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/10/11 12:00 a.m.•46 views

Microsoft Windows UMPDDrvCopyBits Type Confusion Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additionally, the target system must have multiple...

7.8CVSS7.5AI score0.11648EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:00 a.m.•46 views

D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00874EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/17 12:00 a.m.•46 views

PDF-XChange Editor JavaScript String Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.8AI score0.00394EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/15 12:00 a.m.•46 views

D-Link DIR-2150 GetFirmwareStatus Target Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the SOAP A...

6.8CVSS7.4AI score0.0176EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/03/17 12:00 a.m.•46 views

Trend Micro TXOne StellarOne Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Trend Micro TXOne StellarOne. Authentication is required to exploit this vulnerability. The specific flaw exists within the Account endpoint. The issue results from the lack of proper access control. An...

8.3CVSS8.4AI score0.00993EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/03/15 12:00 a.m.•46 views

Unity Technologies Unity Editor FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unity Technologies Unity Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5.4AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/02/24 12:00 a.m.•46 views

Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS7.7AI score0.00302EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/02/24 12:00 a.m.•46 views

Trend Micro Apex One Improper Access Control Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Apex One...

7.8CVSS7.7AI score0.00304EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•46 views

Microsoft Print 3D PLY File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS7.6AI score0.00939EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/10/07 12:00 a.m.•46 views

PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.2AI score0.00386EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/06 12:00 a.m.•46 views

Microsoft Windows Active Directory Certificate Services Improper Authorization Privilege Escalation Vulnerability

This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of Microsoft Windows Active Directory Certificate Services. Authentication is required to exploit this vulnerability. The specific flaw exists within the issuance of certificates. By including...

8.4CVSS4.7AI score0.02103EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/07/12 12:00 a.m.•46 views

Microsoft Windows win32kfull UMPDDrvGradientFill Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

8.8CVSS5.6AI score0.06248EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/07/12 12:00 a.m.•46 views

Microsoft Windows win32kfull UMPDDrvBitBlt Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

8.8CVSS5.5AI score0.06248EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/05/26 12:00 a.m.•46 views

Ivanti Avalanche Web File Server Service Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Web File Server service...

9.8CVSS3.9AI score0.84454EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/12 12:00 a.m.•46 views

Bentley MicroStation CONNECT IFC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score0.00938EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/12 12:00 a.m.•46 views

Bentley MicroStation CONNECT IFC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5AI score0.00959EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/08 12:00 a.m.•46 views

Rockwell Automation Connected Components Workbench CCWARC File Parsing Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Connected Components Workbench. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

7.8CVSS4.7AI score0.11103EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/11 12:00 a.m.•46 views

Microsoft Windows User Profile Picture Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

6.1CVSS5.5AI score0.01282EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/11 12:00 a.m.•46 views

Schneider Electric IGSS IGSSdataServer Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IGSSDataServer process, which listens on TCP port 12401 by default. The issu...

9.8CVSS9.4AI score0.03505EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•46 views

Bentley View JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.5AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•46 views

Bentley View JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5AI score0.02293EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•46 views

Bentley MicroStation CONNECT JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score0.02041EPSS
SaveExploits0References1
Total number of security vulnerabilities5000