Lucene search
+L
ZdiMost viewed

17156 matches found

Zero Day Initiative
Zero Day Initiative
•added 2018/10/11 12:00 a.m.•44 views

Adobe Acrobat ImageConversion EMF EMR_STRETCHBLT BI_BITFIELDS Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS2.6AI score0.05034EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/10/11 12:00 a.m.•44 views

Foxit Reader XFA loadXML Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS2AI score0.03918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/10/10 12:00 a.m.•44 views

Microsoft Internet Explorer CSS Style Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.6CVSS2.4AI score0.20668EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/10/10 12:00 a.m.•44 views

Microsoft Internet Explorer CSS Style Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.6CVSS2.6AI score0.20668EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/10/08 12:00 a.m.•44 views

Cisco WebEx Network Recording Player PROVIDER ARF File Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

9.3CVSS4.3AI score0.02015EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/09/28 12:00 a.m.•44 views

Foxit Reader Link setAction Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Lin...

8.8CVSS1.8AI score0.03279EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/09/05 12:00 a.m.•44 views

Delta Industrial Automation CNCSoft ScreenEditor DPB File SystemAlarm wMessage Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation CNCSoft ScreenEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

9.3CVSS4.8AI score0.09536EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/07/26 12:00 a.m.•44 views

(Pwn2Own) Oracle Virtualbox HGCM Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

8.2CVSS2.2AI score0.00453EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2018/07/19 12:00 a.m.•44 views

Foxit Reader exportAsFDF Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

8.8CVSS1.8AI score0.02773EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/05/18 12:00 a.m.•44 views

Advantech WebAccess Node BWSCADASoap GetAlarms SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Advantech WebAccess Node. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

7.5CVSS1AI score0.01617EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/05/15 12:00 a.m.•44 views

Adobe Acrobat Pro DC Catalog Index Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

10CVSS5.6AI score0.15406EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/04/20 12:00 a.m.•44 views

Foxit Reader addField Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

8.8CVSS1.9AI score0.0264EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/03/23 12:00 a.m.•44 views

Microsoft Windows JavaScript Typed Array JIT Optimization Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

7.6CVSS2.7AI score0.08546EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/03/19 12:00 a.m.•44 views

Microsoft Chakra Array.splice Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing ...

7.6CVSS3.2AI score0.16992EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/01/05 12:00 a.m.•44 views

Advantech WebAccess DelIcon Directory Traversal File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DelIcon method in gmicons.asp. The issue results from the lack of proper...

10CVSS8.8AI score0.50321EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2018/01/05 12:00 a.m.•44 views

Advantech WebAccess bwmail Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of the command line in the bwmail utility. The issue results from the...

9.8CVSS9.4AI score0.0259EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/01/05 12:00 a.m.•44 views

Advantech WebAccess makensis Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of the command line in the makensis utility. The issue results from th...

9.8CVSS9.4AI score0.0259EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/12/15 12:00 a.m.•44 views

Quest NetVault Backup Server Process Manager Service NVBUBackupTargetSet Get Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupTargetSet Get method requests. The issue results from...

9.8CVSS1.2AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2017/12/15 12:00 a.m.•44 views

Quest NetVault Backup Server Process Manager Service NVBUBackup JobList Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup JobList method requests. The issue results from the...

9.8CVSS1.3AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2017/11/20 12:00 a.m.•44 views

Microsoft Windows EngLockSurface Time-Of-Check Time-Of-Use Race Condition Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

4.7CVSS4.7AI score0.02091EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/11/20 12:00 a.m.•44 views

Cisco Prime Network Analysis Module graph sfile Parameter Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Cisco Prime Network Analysis Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within graph.php. When parsing the sfile parameter, the script does not...

6.4CVSS3.3AI score0.37192EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/11/20 12:00 a.m.•44 views

Microsoft Windows JavaScript Array Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within jscript9. By...

7.6CVSS3.4AI score0.05634EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/11/14 12:00 a.m.•44 views

Foxit Reader XFA Layout page Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the page method of...

8.8CVSS8.6AI score0.0259EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/10/11 12:00 a.m.•44 views

Microsoft Chakra asm.js ArrayBuffer Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

9.3CVSS2.7AI score0.4726EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/10/10 12:00 a.m.•44 views

Microsoft Windows XLS File Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Microsoft...

9.3CVSS8.8AI score0.23982EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/10/10 12:00 a.m.•44 views

Microsoft Windows Submenu Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing o...

7CVSS8.1AI score0.01149EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/10/03 12:00 a.m.•44 views

Hewlett Packard Enterprise Intelligent Management Center mibFileServlet Directory Traversal Denial of Service Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

6.8CVSS2.2AI score0.02545EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/09/26 12:00 a.m.•44 views

Hewlett Packard Enterprise Application Performance Management Staging Data Replicator hpbsmsdr Missing Authentication for Critical Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Application Performance Management Staging Data Replicator. The specific flaw exists within the hpbsmsdr web service, which listens on TCP port 29921 by default. The...

10CVSS2.3AI score0.06958EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/09/15 12:00 a.m.•44 views

Microsoft Chakra Array Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.6CVSS7.9AI score0.08716EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/09/07 12:00 a.m.•44 views

Foxit Reader XFA gotoURL Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the gotoURL method...

8.8CVSS3.4AI score0.03195EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/08/11 12:00 a.m.•44 views

Hewlett Packard Enterprise Intelligent Management Center compareFilesResult Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

9CVSS3.2AI score0.05614EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/08/10 12:00 a.m.•44 views

Fuji Electric Monitouch V-SFT Project File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

8.8CVSS8.7AI score0.051EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/07/07 12:00 a.m.•44 views

Joyent Smart Data Center Docker API Zone Escape Privilege Escalation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Joyent Smart Data Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

9CVSS5.1AI score0.05423EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/07/07 12:00 a.m.•44 views

Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

6.5CVSS2.2AI score0.02456EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/06/27 12:00 a.m.•44 views

(Pwn2Own) Microsoft Windows WarpKMSubmitCommandVirtual Uninitialized Memory Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within BasicRender.sys,...

7CVSS8.1AI score0.01246EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/06/26 12:00 a.m.•44 views

Cisco Prime Collaboration Provisioning Logs Directory Improper Access Control Information Disclosure Vulnerability

This vulnerability allows disclose sensitive information on vulnerable installations of Cisco Prime Collaboration Provisioning. Authentication is not required to exploit this vulnerability. The specific flaw exists within the service that listens on TCP port 443 by default. Access to the /logs/cu...

6.5CVSS2.2AI score0.05883EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/05/18 12:00 a.m.•44 views

(Pwn2Own) Apple macOS authd Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the authd service. The...

7.8CVSS4.3AI score0.00825EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/05/18 12:00 a.m.•44 views

(Pwn2Own) Apple macOS WindowServer Dragging Space Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the WindowServer. The...

9.3CVSS4.8AI score0.01169EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/05/15 12:00 a.m.•44 views

(Pwn2Own) Apple macOS WindowServer _XGetConnectionPSN Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

5.5CVSS4.1AI score0.00969EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/04/11 12:00 a.m.•44 views

Adobe Reader DC XSLT Namespace Node Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

4.3CVSS1.6AI score0.03159EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/04/11 12:00 a.m.•44 views

Microsoft Windows ADO Array-Type Parameter Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.6CVSS1.4AI score0.12793EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/04/11 12:00 a.m.•44 views

(Pwn2Own) Adobe Reader DC JPEG2000 Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within JPEG2000...

9.3CVSS5.6AI score0.14452EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/03/01 12:00 a.m.•44 views

Trend Micro SafeSync for Enterprise count_ad_members SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Trend Micro SafeSync for Enterprise. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists withi...

7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/01/20 12:00 a.m.•44 views

Bitdefender Internet Security SIS Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2017/01/10 12:00 a.m.•44 views

Adobe Reader DC XFA hyphenation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within XFA's hyphenatio...

9.3CVSS2.4AI score0.03783EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/12/15 12:00 a.m.•44 views

Microsoft Windows Icon File Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file or folder. The specific flaw exists within the...

9.3CVSS4.1AI score0.39261EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/10/11 12:00 a.m.•44 views

Adobe Acrobat Pro DC XObject stream Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within handling of...

10CVSS2.2AI score0.05813EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/05/10 12:00 a.m.•44 views

Adobe Acrobat Reader DC ANAuthenticateResource Javascript API Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

10CVSS3.4AI score0.06293EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/05/10 12:00 a.m.•44 views

Adobe Acrobat Pro DC Signature signatureSetSeed Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

10CVSS4.2AI score0.06386EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/03/02 12:00 a.m.•44 views

Adobe Flash MPEG Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within MPEG-4 parsing. A...

9.3CVSS6.5AI score0.07152EPSS
SaveExploits0References1
Total number of security vulnerabilities5000