Lucene search
+L

16763 matches found

Zero Day Initiative
Zero Day Initiative
•added 2020/11/22 12:00 a.m.•73 views

Microsoft Windows WebM Video Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

8.8CVSS7.2AI score0.04664EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/22 12:00 a.m.•39 views

Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue resul...

5.3CVSS1.2AI score0.03245EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/22 12:00 a.m.•49 views

Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue resul...

5.3CVSS1.2AI score0.03245EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/22 12:00 a.m.•31 views

Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 4343 by default. The issue resul...

5.3CVSS1.2AI score0.03245EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/22 12:00 a.m.•81 views

Linux Kernel Performance Counters Race Condition Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation of...

7.8CVSS4.7AI score0.00306EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/11 12:00 a.m.•48 views

Microsoft Windows bindflt Driver Missing Authentication Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the bindflt.sys...

7.8CVSS5.4AI score0.00785EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/11 12:00 a.m.•36 views

Microsoft Internet Explorer array Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS1.7AI score0.03171EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/11 12:00 a.m.•32 views

Microsoft Excel XLS File Parsing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XLS...

7.8CVSS4.3AI score0.03545EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/11 12:00 a.m.•46 views

Microsoft Internet Explorer array Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS2.1AI score0.03171EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/11 12:00 a.m.•43 views

Microsoft Windows DirectComposition Uninitialized Pointer Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation...

8.8CVSS6.4AI score0.01867EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/11 12:00 a.m.•54 views

Microsoft Chakra Array Iterator Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.5CVSS2.7AI score0.01647EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/11 12:00 a.m.•42 views

SAP 3D Visual Enterprise Viewer HPGL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4AI score0.01243EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/11/11 12:00 a.m.•42 views

Microsoft Windows Print Spooler Directory Junction Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

6.1CVSS4.6AI score0.00948EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•45 views

Adobe Acrobat Pro DC PDF Export Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the exporting...

7.8CVSS2.5AI score0.1702EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•45 views

Adobe Acrobat Reader DC ID Parameter Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS1.6AI score0.0306EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•39 views

WECON LeviStudioU HFT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of H...

7.8CVSS5.5AI score0.12007EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•36 views

Adobe Acrobat Reader DC AVDocumentLocal Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS2.1AI score0.03892EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•43 views

WECON PLC Editor WCP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS5.6AI score0.02058EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•44 views

WECON PLC Editor WCP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS5.6AI score0.02058EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•34 views

Cisco WebEx Network Recording Player ARF File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS5.3AI score0.02748EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•36 views

WECON LeviStudioU HFT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of H...

7.8CVSS5.5AI score0.12007EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•35 views

WECON PLC Editor WCP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS5.6AI score0.01825EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•25 views

WECON LeviStudioU HSC File Parsing CharSize Attribute Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of H...

7.8CVSS4.8AI score0.12007EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•32 views

Cisco WebEx Network Recording Player ARF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.3AI score0.02615EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•28 views

Adobe Acrobat Pro DC PDF Export Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.5AI score0.0306EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•58 views

Cisco WebEx Network Recording Player ARF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS5.7AI score0.02537EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•45 views

Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2AI score0.02865EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•53 views

Foxit Studio Photo ARW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS4.9AI score0.0372EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•29 views

Micro Focus Operations Bridge Manager LocationService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.7AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•38 views

Micro Focus Operations Bridge Manager RegistrationServlet Deserialization Of Untrusted Data Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Micro Focus Operations Bridge Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the RegistrationServlet endpoint. The issue results from the lack of prop...

8.8CVSS3.4AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•21 views

Micro Focus Operations Bridge Manager AutomationMappingService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.7AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•18 views

Micro Focus Operations Bridge Manager DataAcquisitionService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.7AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•36 views

Micro Focus Operations Bridge Manager CommonService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.9AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•31 views

Micro Focus Operations Bridge Manager ClassModelService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.6AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•43 views

Foxit Studio Photo NEF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.3AI score0.03797EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•37 views

Micro Focus Operations Bridge Manager LicensingService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.6AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•19 views

Micro Focus Operations Bridge Manager ResourceManagementService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.5AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•44 views

Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.4AI score0.0372EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•34 views

Foxit Studio Photo NEF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS3.7AI score0.0372EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•32 views

Micro Focus Operations Bridge Manager WatchServerAPI Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.6AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•41 views

Foxit Studio Photo SR2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2AI score0.02865EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•38 views

Foxit Studio Photo CR2 File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS4.1AI score0.03534EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•23 views

Micro Focus Operations Bridge Manager SnapshotService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.6AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Micro Focus Operations Bridge Manager ServiceDiscoveryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.8AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2AI score0.02865EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•29 views

Micro Focus Operations Bridge Manager FolderService Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS5.4AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•39 views

Micro Focus Operations Bridge Manager diagnostics Use of Hard-coded Credentials Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the product's authentication mechanism. The product contains a...

9.8CVSS4.2AI score0.74449EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•36 views

Foxit Studio Photo CMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.1AI score0.02848EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•25 views

Micro Focus Operations Bridge Manager BusinessModelFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.5AI score0.7699EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•46 views

Foxit Studio Photo EPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.2AI score0.03671EPSS
SaveExploits0References1
Total number of security vulnerabilities16763