Lucene search
K

16763 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•14 views

Fatek Automation WinProladder PDW File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.9AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•25 views

Fatek Automation WinProladder PDW File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score0.00959EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•31 views

Fatek Automation Communication Server Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation Communication Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of data sent to the Facon Server, which listens on...

9.8CVSS4.6AI score0.01758EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•28 views

Microsoft Windows storport Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the storport.sys...

7.8CVSS5.9AI score0.00818EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•27 views

Fatek Automation WinProladder PDW File Parsing Unexpected Sign Extension Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.7AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•48 views

Microsoft Office Word Converter Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DO...

7.8CVSS4.7AI score0.05692EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•40 views

Microsoft Office Visio EMF File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS4.9AI score0.05421EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•22 views

Schneider Electric IGSS Missing Authentication Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of Schneider Electric IGSS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of commands sent to the server. The issue results from the lack o...

5.3CVSS2.6AI score0.00836EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•17 views

Fatek Automation WinProladder PDW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•25 views

Microsoft Windows AppX Deployment Service Directory Junction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AppX Deploymen...

7CVSS6AI score0.00689EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•35 views

Microsoft Office Visio WMF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.1AI score0.05565EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•22 views

Fatek Automation WinProladder PLC Configuration Data Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must access a compromised device or a device on a compromised network. The specific flaw...

8.8CVSS6.2AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•19 views

Fatek Automation WinProladder PDW File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.9AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•25 views

Schneider Electric IGSS Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of TCP traffic by the dc.exe process. The issue results from the...

9.8CVSS3.2AI score0.20165EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•48 views

Microsoft Windows storport Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the storport.sys...

8.8CVSS6AI score0.00922EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•17 views

Schneider Electric IGSS dc.exe Missing Authentication Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Schneider Electric IGSS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of TCP traffic by the dc.exe process. The issue results...

7.5CVSS2AI score0.01274EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•38 views

Microsoft Windows storport Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the storport.sys...

8.8CVSS6AI score0.00978EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•39 views

Microsoft Windows storport Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the storport.sys...

7.8CVSS6AI score0.00818EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•26 views

Fatek Automation WinProladder PDW File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS2.7AI score0.00569EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•22 views

Fatek Automation WinProladder PDW File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•50 views

Microsoft Windows storport Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the storport.sys...

8.8CVSS5.9AI score0.00807EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•29 views

Schneider Electric IGSS Unrestricted File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of TCP traffic by the dc.exe process. The issue results from the...

9.8CVSS2.9AI score0.0187EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•28 views

Fatek Automation WinProladder PDW File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.00973EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•22 views

Fatek Automation WinProladder PDW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•28 views

Fatek Automation WinProladder PDW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•18 views

Fatek Automation WinProladder PDW File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•31 views

Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.5AI score0.08005EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/14 12:0 a.m.•23 views

Adobe Acrobat Reader DC JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS3.2AI score0.03774EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/13 12:0 a.m.•45 views

Linux Kernel eBPF Type Confusion Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF...

8.8CVSS3.7AI score0.00972EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/10/13 12:0 a.m.•31 views

Adobe Illustrator PDF File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.7AI score0.02512EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/13 12:0 a.m.•28 views

Adobe Illustrator PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

7.8CVSS5.2AI score0.02976EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/13 12:0 a.m.•36 views

Adobe Acrobat Pro DC getAnnots Type Confusion Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.3AI score0.02721EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•16 views

Microsoft Project MPT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Project. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.8AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•15 views

Autodesk Design Review TGA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.7AI score0.01708EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•16 views

Autodesk Design Review DWF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS6AI score0.02208EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•10 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.01708EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•9 views

Autodesk Design Review PICT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.5AI score0.01708EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•19 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.02208EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•14 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.02208EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•19 views

Autodesk Design Review PICT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.1AI score0.01708EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•14 views

Autodesk Design Review PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.01708EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•16 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.01708EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•18 views

Autodesk Design Review TGA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.7AI score0.02208EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•16 views

Autodesk Design Review TGA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.7AI score0.01708EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•25 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.02208EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•19 views

Autodesk Design Review TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.3AI score0.02208EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•16 views

Autodesk Design Review PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.1AI score0.01708EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•23 views

Autodesk Design Review RLC File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.02208EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•14 views

Autodesk Design Review TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.7AI score0.02208EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/10/06 12:0 a.m.•20 views

Autodesk Design Review PICT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.5AI score0.01708EPSS
Exploits0References1
Total number of security vulnerabilities16763