Lucene search
+L
ZdiMost viewed

17156 matches found

Zero Day Initiative
Zero Day Initiative
•added 2017/11/14 12:00 a.m.•42 views

Foxit Reader App response Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the app.response...

8.8CVSS8.7AI score0.0259EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/11/14 12:00 a.m.•42 views

Adobe Acrobat Pro DC XPS JPEG APP13 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS8AI score0.06655EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/11/06 12:00 a.m.•42 views

Hewlett Packard Enterprise Intelligent Management Center AccessMgrServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

9CVSS9AI score0.02091EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/09/15 12:00 a.m.•42 views

Microsoft Windows PDF Library JPEG2000 Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows PDF Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.6CVSS8.3AI score0.21531EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/09/12 12:00 a.m.•42 views

Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows PDF Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.6CVSS7.4AI score0.21531EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/09/12 12:00 a.m.•42 views

Microsoft Windows Uniscribe Bidirectional Text Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS2.1AI score0.16911EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/08/08 12:00 a.m.•42 views

Adobe Acrobat Pro DC ImageConversion EMF Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

6.5CVSS4.6AI score0.07608EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/08/08 12:00 a.m.•42 views

Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS2.6AI score0.07449EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/08/08 12:00 a.m.•42 views

Adobe Acrobat Pro DC ImageConversion XPS Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS2.4AI score0.11468EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/08/08 12:00 a.m.•42 views

Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows PDF Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.6CVSS5.5AI score0.14416EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/08/01 12:00 a.m.•42 views

Mitsubishi Electric E-Designer BEComliSlave Driver Configuration Status_bit Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mitsubishi Electric E-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

10CVSS9.1AI score0.03589EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/07/11 12:00 a.m.•42 views

(Pwn2Own) Microsoft Windows win32kfull CopyOutputString Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

4.7CVSS6.5AI score0.02214EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
•added 2017/06/21 12:00 a.m.•42 views

(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCVIEWER RotateFromCenter Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of UCanCode E-XD++ Visualization Enterprise Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

7.1AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/05/30 12:00 a.m.•42 views

(Pwn2Own) Apple Safari WebSQL matchinfo Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

8.8CVSS8.7AI score0.01779EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/05/12 12:00 a.m.•42 views

Adobe Reader DC PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Reader's...

9.3CVSS2.7AI score0.03362EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/05/10 12:00 a.m.•42 views

(Pwn2Own) Microsoft Edge AudioBuffer Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.6CVSS2.8AI score0.14728EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/04/11 12:00 a.m.•42 views

Adobe Reader DC XFA Array Index Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within XFA's...

9.3CVSS4.2AI score0.05215EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/04/11 12:00 a.m.•42 views

Adobe Acrobat Pro DC ImageConversion TIFF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS2.4AI score0.14452EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/03/31 12:00 a.m.•42 views

Apple iOS legacy-diagnostics Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Apple iOS. User interaction is required to exploit this vulnerability in that the target must connect to a WiFi access point. The specific flaw exists within the usage of the legacy-diagnostics protoc...

9.8CVSS2.6AI score0.0131EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/03/30 12:00 a.m.•42 views

Trend Micro InterScan Web Security Virtual Appliance PacFileManagement delete_pac_files Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro InterScan Web Security Virtual Appliance. Authentication is required to exploit this vulnerability. The specific flaw exists within the delete operation of the PacFileManagement servlet...

5.7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/03/30 12:00 a.m.•42 views

Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration datagateIPv6Changed Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro InterScan Web Security Virtual Appliance. Authentication is required to exploit this vulnerability. The specific flaw exists within ConfigIPNetwork's saveNetworkConfiguration method. A...

5.2AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/03/09 12:00 a.m.•42 views

Foxit Reader JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

5.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/03/09 12:00 a.m.•42 views

Hewlett Packard Enterprise LoadRunner libxdrutil mxdr_string Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise LoadRunner. Authentication is not required to exploit this vulnerability. The specific flaw exists within the libxdrutil.dll mxdrstring method. The issue results from the...

9.8CVSS2.3AI score0.17864EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/03/01 12:00 a.m.•42 views

Trend Micro SafeSync for Enterprise dead_iscsi_device Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro SafeSync for Enterprise. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

7.7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/03/01 12:00 a.m.•42 views

Trend Micro SafeSync for Enterprise get_device_info SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Trend Micro SafeSync for Enterprise. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists withi...

7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/01/20 12:00 a.m.•42 views

Bitdefender Internet Security NSIS Pages Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2017/01/10 12:00 a.m.•42 views

Adobe Reader DC XSLT sort Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within XSLT's...

9.3CVSS2.8AI score0.2042EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/12/13 12:00 a.m.•42 views

Adobe Flash MovieClip swapDepth Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within MovieClip's swapDept...

8.8CVSS2.3AI score0.07679EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/11/02 12:00 a.m.•42 views

Hewlett Packard Enterprise System Management Homepage SSO TKN Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise System Management Homepage. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of /proxy/sso requests. When parsin...

7.8CVSS5.1AI score0.04111EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/10/11 12:00 a.m.•42 views

Acrobat Reader DC XFA CPDField Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

10CVSS2.5AI score0.05813EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/09/16 12:00 a.m.•42 views

Microsoft Windows MSXML IDispatch Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within MSXML...

9.3CVSS1.5AI score0.12816EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2016/07/12 12:00 a.m.•42 views

Adobe Flash StyleSheet Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the StyleSheet...

9.3CVSS5.5AI score0.0604EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/07/12 12:00 a.m.•42 views

Microsoft Edge CGeolocationManager Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how Microsoft Edge...

7.6CVSS3.1AI score0.14006EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/06/22 12:00 a.m.•42 views

Microsoft Edge CBaseScriptable PrivateQueryInterface Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementatio...

9.3CVSS3.2AI score0.56767EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
•added 2016/06/22 12:00 a.m.•42 views

SolarWinds Storage Resource Monitor Profiler Server RulesMetaData addNewRule SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RulesMetaData's addNewRule method which is reachable through t...

7.9AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/05/10 12:00 a.m.•42 views

Adobe Acrobat Pro DC FileAttachment point Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the handling of...

10CVSS3.3AI score0.0641EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/05/10 12:00 a.m.•42 views

Adobe Acrobat Reader DC CBSharedReviewIfOfflineDialog Javascript API Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

10CVSS4.2AI score0.06911EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/05/10 12:00 a.m.•42 views

Adobe Acrobat Pro DC ImageConversion JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

10CVSS4.5AI score0.05825EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/05/10 12:00 a.m.•42 views

Adobe Acrobat Pro DC WillSave Action Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat DC Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

10CVSS3.5AI score0.11467EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/04/28 12:00 a.m.•42 views

SolarWinds Storage Resource Monitor Profiler Module QuantumMonitorServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the QuantumMonitorServlet servlet in...

10CVSS6.8AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/04/12 12:00 a.m.•42 views

Microsoft Edge Proxy Object Universal Cross Site Scripting Vulnerability

This vulnerability allows remote attackers to inject arbitrary script code into arbitrary domains on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

6.5CVSS3.3AI score0.15078EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/04/12 12:00 a.m.•42 views

Ecava IntegraXor Report summary_opt SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Ecava IntegraXor. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of summaryopt report requests. The vulnerability is caused by the lack of...

7.5CVSS3.3AI score0.01425EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2016/03/23 12:00 a.m.•42 views

Foxit Reader FlateDecode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within FlateDecode. A...

7.8CVSS3.9AI score0.0441EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/02/05 12:00 a.m.•42 views

Advantech WebAccess webvrpcs Service ViewSrv.dll Path BwBuildPath Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x27B0 IOCTL in the ViewSrv subsystem. A stack-based buffer...

10CVSS4.6AI score0.16655EPSS
SaveExploits9References1
Zero Day Initiative
Zero Day Initiative
•added 2016/02/05 12:00 a.m.•42 views

Advantech WebAccess datacore Service datacore.exe Path strcat Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x791E IOCTL in the Kernel subsystem. A stack-based buffer...

10CVSS4.2AI score0.16655EPSS
SaveExploits9References1
Zero Day Initiative
Zero Day Initiative
•added 2016/01/25 12:00 a.m.•42 views

Oracle Application Testing Suite DownloadServlet exportFileName Parameter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to exfiltrate arbitrary files on vulnerable installations of Oracle Application Testing Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet servlet. By providing an exportFileName...

5CVSS7.2AI score0.27519EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/01/12 12:00 a.m.•42 views

Microsoft Internet Explorer NewMessage Protected Mode Sandbox Escape Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.9AI score0.01957EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2015/12/18 12:00 a.m.•42 views

Mozilla Firefox HTMLVideoElement Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.5CVSS9.3AI score0.0608EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2015/12/14 12:00 a.m.•42 views

(0Day) Microsoft Office Excel Binary Worksheet Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS3AI score0.22162EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2015/11/10 12:00 a.m.•42 views

Microsoft Office Word TTF Size Miscalculation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS6.4AI score0.20969EPSS
SaveExploits0References1
Total number of security vulnerabilities5000