Lucene search
+L
ZdiMost viewed

16763 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•40 views

Apple macOS ImageIO EXR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

7.8CVSS7.2AI score0.00282EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•40 views

Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Samba. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of Spotlight RPC arguments. Crafted arguments can force the server into ...

5.9CVSS6.6AI score0.61199EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/23 12:00 a.m.•40 views

Ivanti Avalanche decodeToMap XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the decodeToMap method. Due to the improper restriction of XML External Entity...

6.5CVSS6.2AI score0.02503EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/14 12:00 a.m.•40 views

Adobe Acrobat Reader DC PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS5.7AI score0.02104EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/08 12:00 a.m.•40 views

(0Day) (Pwn2Own) Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Inductive Automation Ignition. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of OPC UA ConditionRefresh requests. By sending...

7.5CVSS6.6AI score0.01538EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/04 12:00 a.m.•40 views

Apple Safari DFG Fixup Phase Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the DFG fixup...

4.3CVSS5.9AI score0.00926EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/06/15 12:00 a.m.•40 views

(0Day) Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS6.8AI score0.00399EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/05/17 12:00 a.m.•40 views

(Pwn2Own) Lexmark MC3224i putinterval Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the PostScript putinterval command. The issue...

8.8CVSS7.5AI score0.00708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/10 12:00 a.m.•40 views

Microsoft Windows PE Parsing Integer Overflow Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

6.5CVSS8.3AI score0.24622EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/04 12:00 a.m.•40 views

Sante DICOM Viewer Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS6.9AI score0.00916EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/05/04 12:00 a.m.•40 views

(Pwn2Own) Canon imageCLASS MF743Cdw cmNetBiosParseName Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF743Cdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of NetBIOS names. The issue results from the la...

8.8CVSS7.3AI score0.01163EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/04 12:00 a.m.•40 views

D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of requests to the /cgi-bin/webupg endpoint. The issue...

8.8CVSS7.5AI score0.01134EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/01 12:00 a.m.•40 views

Foxit PDF Editor XLS File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XL...

7.8CVSS6.9AI score0.00538EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/01 12:00 a.m.•40 views

(Pwn2Own) VMware Workstation UHCI Component Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS6.9AI score0.00375EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/04/24 12:00 a.m.•40 views

Microsoft Excel 3MF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3MF...

7.8CVSS7.7AI score0.00784EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/04/24 12:00 a.m.•40 views

Microsoft Windows win32kfull Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

6.5CVSS7.3AI score0.00519EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/04/11 12:00 a.m.•40 views

Microsoft Windows Remote Desktop Connection Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must open a remote desktop session to a host that has been compromised or otherwise under...

4.3CVSS7.7AI score0.02086EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/03/31 12:00 a.m.•40 views

Microsoft 3D Builder GLTF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6.7AI score0.00939EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/03/16 12:00 a.m.•40 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.6AI score0.00223EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/02/24 12:00 a.m.•40 views

Trend Micro Apex One Improper Access Control Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Apex One...

7.8CVSS7.7AI score0.00304EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•40 views

VMware vRealize Operations CaSA Improper Privilege Management Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of VMware vRealize Operations. Authentication is required to exploit this vulnerability. The specific flaw exists within the configuration of CaSA. A crafted administrator command can trigger execution of ...

7.2CVSS3.9AI score0.00962EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•40 views

Microsoft Word SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS5.3AI score0.00824EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•40 views

Delta Electronics InfraSuite Device Master ExeCommandInCommandLineMode Exposed Dangerous Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics InfraSuite Device Master. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within t...

8.8CVSS3.6AI score0.01293EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•40 views

Microsoft Office SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SK...

7.8CVSS7.8AI score0.00915EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/12/28 12:00 a.m.•40 views

X.Org Server ProcXIPassiveUngrabDevice Improper Validation of Array Index Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

7.8CVSS8.5AI score0.02516EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/11/22 12:00 a.m.•40 views

Microsoft Exchange FileDependency Exposed Dangerous Function Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the FileDependency class. The issue results from the exposure of a dangerous...

4.3CVSS0.8AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
•added 2022/11/22 12:00 a.m.•40 views

Microsoft Exchange FormattedTextWriterTraceListener Exposed Dangerous Function Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the FormattedTextWriterTraceListener class. The issue results from the...

7.1CVSS1.4AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
•added 2022/11/22 12:00 a.m.•40 views

Microsoft Exchange StreamWriterWrapper Exposed Dangerous Function Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the StreamWriterWrapper class. The issue results from the exposure of a...

7.6CVSS1.6AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
•added 2022/11/03 12:00 a.m.•40 views

D-Link DIR-1935 SetStaticRouteIPv6Settings Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handli...

6.8CVSS3.2AI score0.01085EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/11/03 12:00 a.m.•40 views

D-Link DIR-1935 SetStaticRouteIPv4Settings StaticRouteIPv4Data Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handli...

6.8CVSS3.2AI score0.01085EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/11/03 12:00 a.m.•40 views

D-Link DIR-1935 SetSysEmailSettings Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handli...

6.8CVSS3.3AI score0.01085EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/11/03 12:00 a.m.•40 views

D-Link DIR-1935 SetSysLogSettings IPAddress Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handli...

6.8CVSS3.5AI score0.01085EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/11/03 12:00 a.m.•40 views

SAP 3D Visual Enterprise Author CGM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Author. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.00519EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/10/21 12:00 a.m.•40 views

Oracle VirtualBox VRDP Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle VirtualBox. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of smartcard I/O messages. The issue results from the lack of validating...

8.1CVSS1.8AI score0.01211EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/10/17 12:00 a.m.•40 views

Microsoft Exchange PowerShell Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the PowerShell endpoint. The issue results from the lack of proper validation of...

8.8CVSS6AI score0.9997EPSS
SaveExploits11References1
Zero Day Initiative
Zero Day Initiative
•added 2022/10/14 12:00 a.m.•40 views

Microsoft Windows win32kfull UMPD Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

8.8CVSS5.4AI score0.00613EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/14 12:00 a.m.•40 views

D-Link DIR-2150 anweb action_handler Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue results...

8.8CVSS5.2AI score0.00615EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/08/23 12:00 a.m.•40 views

(Pwn2Own) Softing Secure Integration Server wbemcomn Uncontrolled Search Path Element Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Softing Secure Integration Server. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

7.2CVSS3.9AI score0.12194EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
•added 2022/08/18 12:00 a.m.•40 views

(Pwn2Own) Apple Safari Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the B3 JIT compiler. ...

8.8CVSS2.4AI score0.00603EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/08/05 12:00 a.m.•40 views

Foxit PDF Reader newConnection Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.4AI score0.00872EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/07/12 12:00 a.m.•40 views

Microsoft Windows win32kfull UMPDDrvBitBlt Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

8.8CVSS5.5AI score0.06092EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•40 views

Parallels Desktop ACPI Out-Of-Bounds Read Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the ACPI...

8.2CVSS3.5AI score0.00352EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•40 views

Parallels Desktop Tools Untrusted Pointer Dereference Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within t...

7.3CVSS3.3AI score0.00339EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/05/26 12:00 a.m.•40 views

Ivanti Avalanche EnterpriseServer Service SQL Injection Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche. The specific flaw exists within the ProfileDaoImpl class. A crafted request can trigger execution of SQL queries composed from a user-supplied string. An attacker can leverage this...

9.1CVSS3.3AI score0.06534EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/05/26 12:00 a.m.•40 views

Trend Micro Maximum Security Link Following Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.1CVSS4.5AI score0.00375EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/05/26 12:00 a.m.•40 views

Autodesk 3DS Max ABC File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk 3DS Max. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of AB...

7.8CVSS5.7AI score0.00385EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/28 12:00 a.m.•40 views

Apple macOS SCPT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AppleScrip...

3.3CVSS3AI score0.01319EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/28 12:00 a.m.•40 views

Adobe Acrobat Reader DC zoomType Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.1AI score0.02988EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/28 12:00 a.m.•40 views

Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.7AI score0.14665EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/12 12:00 a.m.•40 views

Bentley MicroStation CONNECT DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.3AI score0.00959EPSS
SaveExploits0References1
Total number of security vulnerabilities5000