Lucene search
+L
ZdiMost viewed

16763 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•39 views

Microsoft Windows Setup Directory Junction Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

6.1CVSS4.7AI score0.00924EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•39 views

SAP 3D Visual Enterprise Viewer SVG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.4AI score0.01242EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•39 views

SAP 3D Visual Enterprise Viewer U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.7AI score0.01382EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•39 views

Siemens JT2Go PAR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PAR...

7.8CVSS4.8AI score0.00653EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•39 views

Apple macOS process_token_BindQueryBufferMultiple Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AppleIntelKBLGraphic...

7.8CVSS4.2AI score0.01143EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•39 views

Siemens JT2Go PCT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCT...

7.8CVSS5.2AI score0.0067EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/11 12:00 a.m.•39 views

Advantech iView UserServlet SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UserServlet class. The issue results from the lack of proper validation of a...

7.5CVSS1.8AI score0.11791EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/10 12:00 a.m.•39 views

Adobe Photoshop DCM File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4.9AI score0.02879EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/10 12:00 a.m.•39 views

Adobe Illustrator DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of D...

7.8CVSS4.4AI score0.02249EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/04 12:00 a.m.•39 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ModelIO...

7.8CVSS5.5AI score0.01084EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/01 12:00 a.m.•39 views

Schneider Electric IGSS CGF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.1AI score0.01654EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/29 12:00 a.m.•39 views

Trend Micro Apex One Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

2.5CVSS3.2AI score0.00887EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/29 12:00 a.m.•39 views

Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console. The issue results from improper access control. An attacke...

6.5CVSS1.5AI score0.01742EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/29 12:00 a.m.•39 views

Schneider Electric IGSS CGF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.1AI score0.02499EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•39 views

Microsoft Windows InstallService Directory Junction Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

6.1CVSS4.7AI score0.0081EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•39 views

Microsoft Word DOC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DOC...

7.8CVSS4.2AI score0.03614EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•39 views

SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01199EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/12/09 12:00 a.m.•39 views

X.Org Server XRecordRegisterClients Integer Underflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

7.8CVSS5.2AI score0.00589EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/22 12:00 a.m.•39 views

Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue resul...

5.3CVSS1.2AI score0.03206EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Micro Focus Operations Bridge Manager diagnostics Use of Hard-coded Credentials Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the product's authentication mechanism. The product contains a...

9.8CVSS4.2AI score0.74449EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Micro Focus Operations Bridge Manager ServiceDiscoveryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.8AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2AI score0.02865EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Foxit Studio Photo CMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.9AI score0.02865EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Micro Focus Operations Bridge Manager PackageFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.6AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Micro Focus Operations Bridge Manager HistoryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.2AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/25 12:00 a.m.•39 views

Trend Micro Apex One Authentication Bypass Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...

7.8CVSS5AI score0.00482EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•39 views

SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.5AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•39 views

SAP 3D Visual Enterprise Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

5.3CVSS5.5AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/27 12:00 a.m.•39 views

Apple macOS Intel Graphics Driver Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS3.1AI score0.00299EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/27 12:00 a.m.•39 views

Advantech iView DeviceTreeTable exportTaskMgrReport Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the exportTaskMgrReport method of the DeviceTreeTable class...

9.8CVSS5.3AI score0.07717EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/18 12:00 a.m.•39 views

Parallels Desktop VGA Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS2.9AI score0.00553EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/10 12:00 a.m.•39 views

Delta Industrial Automation TPEditor TPE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation TPEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS5.8AI score0.02248EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/10 12:00 a.m.•39 views

Advantech WebAccess/HMI Designer PM3 File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

7.8CVSS4.7AI score0.02924EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/05 12:00 a.m.•39 views

Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta Industrial Automation CNCSoft ScreenEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

3.3CVSS3.4AI score0.01434EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/22 12:00 a.m.•39 views

Adobe Prelude MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Prelude. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS2.8AI score0.04848EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/22 12:00 a.m.•39 views

Adobe Prelude 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Prelude. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of 3G...

7.8CVSS4.3AI score0.04528EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/20 12:00 a.m.•39 views

Oracle VirtualBox LsiLogicSCSI Time-Of-Check Time-Of-Use Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

5.3CVSS2.4AI score0.00538EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/20 12:00 a.m.•39 views

Oracle VirtualBox e1000 Unintialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS3.9AI score0.00553EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/20 12:00 a.m.•39 views

Oracle VirtualBox BusLogicSCSI Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS3.9AI score0.0056EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/16 12:00 a.m.•39 views

Advantech iView NetworkServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet servlet. The issue results from the lack of proper validation of a...

9.8CVSS2.6AI score0.04922EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/10 12:00 a.m.•39 views

Phoenix Contact Automationworx PLCOpen XML File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Phoenix Contact Automationworx. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.1AI score0.14668EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/07/07 12:00 a.m.•39 views

C-MORE HMI EA9 EA-HTTP Improper Input Validation Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-More HMI EA9 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lac...

7.5CVSS0.7AI score0.03674EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/06/25 12:00 a.m.•39 views

(0Day) CentOS Web Panel ajax_dashboard service_start Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxdashboard.php. When parsing the servicestart parameter, the process does not proper...

9.8CVSS6.1AI score0.08411EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/06/25 12:00 a.m.•39 views

(0Day) CentOS Web Panel ajax_disk_usage folderName Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxdiskusage.php. When parsing the folderName parameter, the process does not properly...

9.8CVSS5.8AI score0.08083EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/06/25 12:00 a.m.•39 views

(0Day) CentOS Web Panel ajax_list_accounts username Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxlistaccounts.php. When parsing the username parameter, the process does not properl...

9.8CVSS5.9AI score0.08083EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/06/09 12:00 a.m.•39 views

Microsoft Windows Media Foundation Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Media...

8.8CVSS4.1AI score0.06988EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/05/28 12:00 a.m.•39 views

(Pwn2Own) Apple Safari Symbolic Link Arbitrary Application Execution Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple Safari. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of symboli...

5.3CVSS3.5AI score0.01382EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
•added 2020/05/28 12:00 a.m.•39 views

Apple Safari HasIndexedProperty Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of...

8.8CVSS2.2AI score0.01648EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/05/19 12:00 a.m.•39 views

(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...

7CVSS4.3AI score0.00821EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/05/12 12:00 a.m.•39 views

Eaton Intelligent Power Manager mc2 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Eaton Intelligent Power Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within systemsrv.js. The issue results from the lack of proper validation of a...

8.8CVSS4.4AI score0.02147EPSS
SaveExploits0References1
Total number of security vulnerabilities5000