Lucene search
+L
ZdiMost viewed

16763 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/01/29 12:00 a.m.•39 views

Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue resul...

5.3CVSS1.2AI score0.02153EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/29 12:00 a.m.•39 views

Schneider Electric IGSS CGF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.1AI score0.02499EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•39 views

Microsoft Windows InstallService Directory Junction Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

6.1CVSS4.7AI score0.0081EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•39 views

Microsoft Word DOC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DOC...

7.8CVSS4.2AI score0.03614EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•39 views

SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01199EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/12/09 12:00 a.m.•39 views

X.Org Server XRecordRegisterClients Integer Underflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

7.8CVSS5.2AI score0.00589EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/22 12:00 a.m.•39 views

Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue resul...

5.3CVSS1.2AI score0.03206EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Micro Focus Operations Bridge Manager diagnostics Use of Hard-coded Credentials Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the product's authentication mechanism. The product contains a...

9.8CVSS4.2AI score0.74449EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2AI score0.02865EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Micro Focus Operations Bridge Manager ServiceDiscoveryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.8AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Foxit Studio Photo CMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.9AI score0.02865EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Micro Focus Operations Bridge Manager PackageFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.6AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Micro Focus Operations Bridge Manager HistoryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.2AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/29 12:00 a.m.•39 views

Foxit PhantomPDF GIF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GI...

7.8CVSS4.6AI score0.09084EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/25 12:00 a.m.•39 views

Trend Micro Apex One Authentication Bypass Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...

7.8CVSS5AI score0.00482EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/21 12:00 a.m.•39 views

Apple macOS process_token_BlitFramebuffer Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AppleIntelKBLGraphic...

7.8CVSS4.2AI score0.00226EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•39 views

SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.5AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•39 views

SAP 3D Visual Enterprise Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

5.3CVSS5.5AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/27 12:00 a.m.•39 views

Apple macOS Intel Graphics Driver Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS3.1AI score0.00299EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/27 12:00 a.m.•39 views

Advantech iView DeviceTreeTable exportTaskMgrReport Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the exportTaskMgrReport method of the DeviceTreeTable class...

9.8CVSS5.3AI score0.07717EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/18 12:00 a.m.•39 views

Parallels Desktop VGA Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS2.9AI score0.00553EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/10 12:00 a.m.•39 views

Delta Industrial Automation TPEditor TPE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation TPEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS5.8AI score0.02248EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/10 12:00 a.m.•39 views

Advantech WebAccess/HMI Designer PM3 File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

7.8CVSS4.7AI score0.02924EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/22 12:00 a.m.•39 views

Adobe Prelude MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Prelude. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS2.8AI score0.04848EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/22 12:00 a.m.•39 views

Adobe Prelude 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Prelude. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of 3G...

7.8CVSS4.3AI score0.04528EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/21 12:00 a.m.•39 views

Apple Safari getAnimations Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

4.3CVSS1.3AI score0.02837EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/20 12:00 a.m.•39 views

Oracle VirtualBox LsiLogicSCSI Time-Of-Check Time-Of-Use Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

5.3CVSS2.4AI score0.00538EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/20 12:00 a.m.•39 views

Oracle VirtualBox BusLogicSCSI Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS3.9AI score0.0056EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/20 12:00 a.m.•39 views

Oracle VirtualBox e1000 Unintialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS3.9AI score0.00553EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/16 12:00 a.m.•39 views

Advantech iView NetworkServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet servlet. The issue results from the lack of proper validation of a...

9.8CVSS2.6AI score0.04922EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/10 12:00 a.m.•39 views

Phoenix Contact Automationworx PLCOpen XML File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Phoenix Contact Automationworx. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.1AI score0.14668EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/07 12:00 a.m.•39 views

C-MORE HMI EA9 EA-HTTP Improper Input Validation Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-More HMI EA9 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lac...

7.5CVSS0.7AI score0.03674EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/06/25 12:00 a.m.•39 views

(0Day) CentOS Web Panel ajax_dashboard service_start Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxdashboard.php. When parsing the servicestart parameter, the process does not proper...

9.8CVSS6.1AI score0.08411EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/06/25 12:00 a.m.•39 views

(0Day) CentOS Web Panel ajax_disk_usage folderName Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxdiskusage.php. When parsing the folderName parameter, the process does not properly...

9.8CVSS5.8AI score0.08083EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/06/25 12:00 a.m.•39 views

(0Day) CentOS Web Panel ajax_list_accounts username Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxlistaccounts.php. When parsing the username parameter, the process does not properl...

9.8CVSS5.9AI score0.08083EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/06/09 12:00 a.m.•39 views

Microsoft Windows Media Foundation Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Media...

8.8CVSS4.1AI score0.06988EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/05/28 12:00 a.m.•39 views

(Pwn2Own) Apple Safari Symbolic Link Arbitrary Application Execution Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple Safari. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of symboli...

5.3CVSS3.5AI score0.01382EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
•added 2020/05/28 12:00 a.m.•39 views

Apple Safari HasIndexedProperty Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of...

8.8CVSS2.2AI score0.01648EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/05/19 12:00 a.m.•39 views

(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...

7CVSS4.3AI score0.00821EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/05/12 12:00 a.m.•39 views

Eaton Intelligent Power Manager mc2 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Eaton Intelligent Power Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within systemsrv.js. The issue results from the lack of proper validation of a...

8.8CVSS4.4AI score0.02147EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/05/08 12:00 a.m.•39 views

Advantech WebAccess/SCADA ViewSrv IOCTL 0x00002722 Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of IOCTL 0x00002722 in ViewSrv.dll. The issue resul...

7.5CVSS1.7AI score0.01529EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/05/08 12:00 a.m.•39 views

Advantech WebAccess/SCADA DrawSrv IOCTL 0x0000277d Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of IOCTL 0x0000277d in DrawSrv.dll. The issue results fro...

9.8CVSS4.2AI score0.02312EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/04/30 12:00 a.m.•39 views

LAquis SCADA LGX File Insufficient UI Warning Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

5.5CVSS0.7AI score0.00809EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/04/28 12:00 a.m.•39 views

Adobe Bridge TTF File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.2AI score0.03577EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/04/16 12:00 a.m.•39 views

Oracle E-Business Suite Human Resources Organization Hierarchy Viewer PosServer SQL Injection Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Oracle E-Business Suite Human Resources. Authentication is required to exploit this vulnerability. The specific flaw exists within the Organization Hierarchy Viewer. The issue results from the lack of...

8.1CVSS2AI score0.01956EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/04/16 12:00 a.m.•39 views

Cisco UCS Director saveWindowsNetworkConfig Directory Traversal Denial-of-Service Vulnerability

This vulnerability allows remote attackers to overwrite arbitrary files on affected installations of Cisco UCS Director. Authentication is not required to exploit this vulnerability. The specific flaw exists within the saveWindowsNetworkConfig method. The issue results from the lack of proper...

8.2CVSS3.3AI score0.23056EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/04/16 12:00 a.m.•39 views

Foxit PhantomPDF AddWatermark Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of t...

7.8CVSS2.1AI score0.04689EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/04/16 12:00 a.m.•39 views

Oracle VirtualBox xHCI Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the xHCI...

8.2CVSS5.1AI score0.00636EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/04/15 12:00 a.m.•39 views

Eaton HMiSoft VU3 File Parsing LinkSize Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Eaton HMiSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.5AI score0.00805EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/04/03 12:00 a.m.•39 views

Schneider Electric IGSS IGSSupdateservice Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Schneider Electric IGSS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IGSSupdateservice service, which listens on TCP port 12414 by defaul...

7.5CVSS2.3AI score0.04066EPSS
SaveExploits0References1
Total number of security vulnerabilities5000