Lucene search
K

16763 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/12/03 12:0 a.m.•15 views

OpenText Brava! Desktop DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/12/03 12:0 a.m.•16 views

OpenText Brava! Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS2.6AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/12/03 12:0 a.m.•12 views

OpenText Brava! Desktop DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/12/02 12:0 a.m.•24 views

Delta Industrial Automation CNCSoft DPB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.1AI score0.09594EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/02 12:0 a.m.•15 views

Jenkins Report Info XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Jenkins Report Info. Authentication is required to exploit this vulnerability. The specific flaw exists within the PMD class. Due to the improper restriction of XML External Entity XXE...

6.5CVSS2.6AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:0 a.m.•35 views

Apple macOS AudioCodecs LOAS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Deserializ...

3.3CVSS3.7AI score0.01113EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:0 a.m.•67 views

Bentley ContextCapture OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley ContextCapture. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.6AI score0.01699EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:0 a.m.•26 views

Trend Micro Worry-Free Business Security Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Worry-Free Business Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

7CVSS5.6AI score0.00339EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:0 a.m.•20 views

Open Design Alliance (ODA) ODAViewer DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6AI score0.01627EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:0 a.m.•27 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.8AI score0.03517EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:0 a.m.•18 views

Open Design Alliance (ODA) ODAViewer DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6AI score0.01641EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:0 a.m.•16 views

Trend Micro Worry-Free Business Security Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Worry-Free Business Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

7CVSS5.6AI score0.00339EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:0 a.m.•39 views

Bentley ContextCapture OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley ContextCapture. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.6AI score0.01699EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:0 a.m.•26 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.8AI score0.03517EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:0 a.m.•16 views

(0Day) Esri ArcReader PMF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.6AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:0 a.m.•10 views

(0Day) Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS6.4AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:0 a.m.•33 views

Apple macOS ModelIO ABC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.01078EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:0 a.m.•20 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.8AI score0.03517EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:0 a.m.•21 views

Trend Micro Worry-Free Business Security Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Worry-Free Business Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

7CVSS5.6AI score0.00339EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•16 views

Open Design Alliance (ODA) Drawings Explorer DWFX File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.3AI score0.00855EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•25 views

Open Design Alliance (ODA) Drawings Explorer DXF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

3.3CVSS3.6AI score0.01627EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•18 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.5AI score0.01837EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•10 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01837EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•18 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01837EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•22 views

Open Design Alliance (ODA) Drawings Explorer DGN File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

3.3CVSS3.6AI score0.01405EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•12 views

Open Design Alliance (ODA) ODAViewer U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.1AI score0.01293EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•37 views

Panda Security Free Antivirus Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the us...

7CVSS5.8AI score0.00369EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•35 views

Open Design Alliance (ODA) Drawings Explorer DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.4AI score0.00814EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•31 views

Open Design Alliance (ODA) ODAViewer U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.1AI score0.00814EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•20 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01837EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•19 views

Open Design Alliance (ODA) Drawings Explorer TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.6AI score0.00814EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•23 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Out-Of-Based Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.5AI score0.01837EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•22 views

Open Design Alliance (ODA) Drawings Explorer DGN File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

3.3CVSS3.6AI score0.01405EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•24 views

Open Design Alliance (ODA) Drawings Explorer DWG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.3AI score0.01339EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•22 views

Open Design Alliance (ODA) ODAViewer DWFX File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6AI score0.00855EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•25 views

Open Design Alliance (ODA) Drawings Explorer DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.4AI score0.01641EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•14 views

Open Design Alliance (ODA) ODAViewer DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6AI score0.01641EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•35 views

Open Design Alliance (ODA) Drawings Explorer JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.4AI score0.00814EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•19 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01837EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•64 views

Kaspersky Password Manager Improper Privilege Management Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Kaspersky Password Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS7.4AI score0.00328EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•19 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01837EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:0 a.m.•20 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

3.3CVSS3.2AI score0.00855EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/24 12:0 a.m.•22 views

Microsoft Windows Update Assistant Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability. The specific flaw exists within Windows Update Assistant. By creating a symbolic link, an attacker can abuse the Update...

6.7CVSS7.2AI score0.01454EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/24 12:0 a.m.•21 views

Adobe Creative Cloud Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product...

7.8CVSS7.6AI score0.02109EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/22 12:0 a.m.•43 views

Commvault CommCell CVSearchService Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Commvault CommCell. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CVSearchService service. The issue results from the lack of proper validation prio...

9.8CVSS9.1AI score0.05424EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/22 12:0 a.m.•47 views

Commvault CommCell AppStudioUploadHandler Arbitrary File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the AppStudioUploadHandle...

8.8CVSS9AI score0.04248EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/11/22 12:0 a.m.•38 views

Commvault CommCell Demo_ExecuteProcessOnGroup Exposed Dangerous Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS8.9AI score0.82258EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/11/22 12:0 a.m.•46 views

Commvault CommCell DataProvider JavaScript Sandbox Escape Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the DataProvider class. T...

8.8CVSS8.9AI score0.05789EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/11/22 12:0 a.m.•38 views

Commvault CommCell DownloadCenterUploadHandler Arbitrary File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS9AI score0.68864EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/11/19 12:0 a.m.•24 views

Ivanti Avalanche MapShare Service Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the mapShare method. The...

9.8CVSS8.9AI score0.77259EPSS
Exploits0
Total number of security vulnerabilities16763