Lucene search
+L
ZdiMost viewed

17156 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/05/07 12:00 a.m.•42 views

Foxit Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

3.3CVSS2AI score0.02018EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/05/07 12:00 a.m.•42 views

Foxit Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.2AI score0.02778EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/05/04 12:00 a.m.•42 views

Microsoft Windows Raw Image Extension X3F File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Raw Image Extension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5.3CVSS5.8AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/04/29 12:00 a.m.•42 views

Microsoft Windows Print Spooler Time-Of-Check Time-Of-Use Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

6.1CVSS4.7AI score0.00867EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/04/21 12:00 a.m.•42 views

Parallels Desktop Toolgate Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS3.7AI score0.00448EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/04/21 12:00 a.m.•42 views

Parallels Desktop IDE Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS2.9AI score0.00448EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/04/15 12:00 a.m.•42 views

Adobe Bridge TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4.3AI score0.03868EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/22 12:00 a.m.•42 views

Foxit PhantomPDF U3DBrowser Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U...

7.8CVSS2.5AI score0.03304EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/16 12:00 a.m.•42 views

Siemens Solid Edge Viewer 3DS File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.1AI score0.02241EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/16 12:00 a.m.•42 views

Siemens Solid Edge Viewer JT File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score0.02241EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•42 views

SAP 3D Visual Enterprise Viewer SVG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.4AI score0.01242EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•42 views

SAP 3D Visual Enterprise Viewer GIF File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5.7AI score0.01398EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•42 views

Siemens JT2Go HPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS2.1AI score0.02548EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•42 views

Parallels Desktop Toolgate Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate...

8.8CVSS3.5AI score0.00271EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•42 views

Siemens JT2Go PCT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCT...

7.8CVSS5.2AI score0.0067EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/11 12:00 a.m.•42 views

Advantech iView UserServlet SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UserServlet class. The issue results from the lack of proper validation of a...

7.5CVSS1.8AI score0.12196EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/11 12:00 a.m.•42 views

Advantech iView NetworkServlet ztp_config_name SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet class. When parsing the ztpconfigname parameter, the process...

7.5CVSS2.3AI score0.12196EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/10 12:00 a.m.•42 views

Adobe Photoshop DCM File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4.9AI score0.02982EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/10 12:00 a.m.•42 views

Adobe Illustrator DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of D...

7.8CVSS4.4AI score0.02329EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/10 12:00 a.m.•42 views

Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.5AI score0.03537EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/29 12:00 a.m.•42 views

Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console. The issue results from improper access control. An attacke...

6.5CVSS1.5AI score0.01742EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•42 views

Microsoft Windows InstallService Directory Junction Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

6.1CVSS4.7AI score0.0081EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•42 views

SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01199EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/12/11 12:00 a.m.•42 views

Microsoft Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XLS...

7.8CVSS4.4AI score0.03461EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/12/08 12:00 a.m.•42 views

Apple macOS Kernel Command 0x10007 Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AppleIntelKBLGraphic...

7.8CVSS4.5AI score0.00578EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/12/03 12:00 a.m.•42 views

Apple macOS CoreGraphics JBIG2Stream Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the CoreGraphics library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within t...

3.3CVSS3.7AI score0.05961EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•42 views

Micro Focus Operations Bridge Manager diagnostics Use of Hard-coded Credentials Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the product's authentication mechanism. The product contains a...

9.8CVSS4.2AI score0.74449EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•42 views

Micro Focus Operations Bridge Manager LicensingService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.6AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•42 views

Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2AI score0.02865EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•42 views

Micro Focus Operations Bridge Manager RegistrationServlet Deserialization Of Untrusted Data Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Micro Focus Operations Bridge Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the RegistrationServlet endpoint. The issue results from the lack of prop...

8.8CVSS3.4AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•42 views

Micro Focus Operations Bridge Manager PackageFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.6AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•42 views

Micro Focus Operations Bridge Manager HistoryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.2AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/22 12:00 a.m.•42 views

Adobe Illustrator PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of P...

7.8CVSS4.6AI score0.04247EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/19 12:00 a.m.•42 views

SAP 3D Visual Enterprise Viewer PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.4AI score0.01243EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/25 12:00 a.m.•42 views

Trend Micro Apex One Authentication Bypass Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...

7.8CVSS5AI score0.00482EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/15 12:00 a.m.•42 views

VMware Workstation ThinPrint EMF Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6.5CVSS2.3AI score0.00301EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•42 views

SAP 3D Visual Enterprise Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

5.3CVSS5.5AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•42 views

Cisco RV340 upload.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the fileparam parameter provided to the upload.cgi endpoint. T...

6.8CVSS3.6AI score0.03083EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/27 12:00 a.m.•42 views

Advantech iView DeviceTreeTable exportTaskMgrReport Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the exportTaskMgrReport method of the DeviceTreeTable class...

9.8CVSS5.3AI score0.07717EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/18 12:00 a.m.•42 views

Parallels Desktop prl_hypervisor Exposed Dangerous Method Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handler for...

6.5CVSS2.2AI score0.0053EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/18 12:00 a.m.•42 views

Parallels Desktop VGA Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS2.9AI score0.00553EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/10 12:00 a.m.•42 views

Advantech WebAccess/HMI Designer PM3 File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

7.8CVSS4.7AI score0.02924EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/10 12:00 a.m.•42 views

Delta Industrial Automation TPEditor TPE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation TPEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS5.8AI score0.02248EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/04 12:00 a.m.•42 views

NETGEAR R6700 httpd strtblupgrade Format String Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue results from the la...

6.3CVSS1.3AI score0.01386EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/22 12:00 a.m.•42 views

Adobe Prelude 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Prelude. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of 3G...

7.8CVSS4.3AI score0.04528EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/20 12:00 a.m.•42 views

Oracle VirtualBox BusLogicSCSI Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS3.9AI score0.0056EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/09 12:00 a.m.•42 views

(0Day) (Pwn2Own) Rockwell Automation Studio 5000 AML File Parsing XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Rockwell Automation Studio 5000. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of AML files. Due to the improper restriction of XML...

3.3CVSS2.5AI score0.01545EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/07/08 12:00 a.m.•42 views

Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.12375EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/08 12:00 a.m.•42 views

Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.09274EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/08 12:00 a.m.•42 views

Veeam ONE SSRSReport GetCustomElementText XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSRSReport class. Due to the improper restriction of XML External Entity XXE...

7.5CVSS2.4AI score0.09402EPSS
SaveExploits0References1
Total number of security vulnerabilities5000