Lucene search
+L
Zero Day InitiativeRecent

17282 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•195 views

Siemens JT2Go JT File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.7AI score0.03174EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•55 views

Microsoft Windows Print Spooler Directory Junction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Print Spooler...

7.8CVSS5.9AI score0.00867EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•44 views

Siemens JT2Go CG4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CG4...

7.8CVSS4.6AI score0.03213EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•44 views

Microsoft Word DOC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DOC...

7.8CVSS4.2AI score0.03888EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•51 views

Siemens JT2Go PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

7.8CVSS4.6AI score0.03174EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•56 views

Siemens JT2Go JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.6AI score0.03213EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•80 views

Microsoft Windows splwow64 Out-Of-Bounds Read Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...

7CVSS4.7AI score0.01249EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•42 views

Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS4.9AI score0.02643EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•40 views

Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS4.7AI score0.02643EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•35 views

Panasonic Control FPWIN Pro Project File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Panasonic Control FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.7AI score0.01243EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•28 views

Delta Industrial Automation DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Delta Industrial Automation DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS4.7AI score0.0339EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•35 views

Delta Industrial Automation DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Delta Industrial Automation DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS4.7AI score0.0339EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•118 views

Siemens JT2Go PLMXML File Parsing XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

5.5CVSS2.4AI score0.02618EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•45 views

Microsoft Windows AppX Deployment Service Directory Junction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AppX Deploymen...

7CVSS5.8AI score0.00943EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•44 views

Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS5.1AI score0.02643EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•50 views

Siemens JT2Go JT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of JT...

7.8CVSS5.5AI score0.03423EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•53 views

Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft ScreenEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

7.8CVSS5.9AI score0.02105EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•34 views

Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS5.2AI score0.02643EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•44 views

Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS5.2AI score0.02643EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•50 views

Siemens JT2Go CG4 and CGM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CG4 a...

7.8CVSS4.7AI score0.03174EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•47 views

Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS5.3AI score0.01979EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•43 views

Siemens JT2Go PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PAR...

7.8CVSS5.6AI score0.02956EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•35 views

Delta Industrial Automation CNCSoft-B DOPSoft DPA File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS5.3AI score0.01996EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/14 12:00 a.m.•51 views

Siemens JT2Go RGB and SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of RG...

7.8CVSS5.9AI score0.04483EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•49 views

SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•88 views

SAP 3D Visual Enterprise Viewer RLE File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•33 views

SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.7AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•44 views

SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.6AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•44 views

SAP 3D Visual Enterprise Viewer RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.7AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•51 views

SAP 3D Visual Enterprise Viewer IFF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5.1AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•49 views

SAP 3D Visual Enterprise Viewer IFF File Parsing Memory Corruption Remote Code Execution Vulnerabililty

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5.1AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•48 views

SAP 3D Visual Enterprise Viewer BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.6AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•47 views

Adobe Bridge TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4.3AI score0.03725EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•44 views

Adobe Bridge TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4.3AI score0.03725EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•44 views

SAP 3D Visual Enterprise Viewer DIB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.8AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•50 views

SAP 3D Visual Enterprise Viewer PSD File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.9AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•46 views

SAP 3D Visual Enterprise Viewer IFF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5.1AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•42 views

SAP 3D Visual Enterprise Viewer SGI File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•36 views

SAP 3D Visual Enterprise Viewer IFF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.6AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•48 views

SAP 3D Visual Enterprise Viewer DIB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5.7AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•43 views

SAP 3D Visual Enterprise Viewer DIB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5.7AI score0.01214EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/08 12:00 a.m.•373 views

(0Day) Microsoft Windows splwow64 Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

2.5CVSS3.7AI score0.01249EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/04 12:00 a.m.•57 views

Linux Kernel io_uring Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of file...

8.8CVSS2.4AI score0.00436EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/12/29 12:00 a.m.•102 views

Qognify Ocularis EventCoordinator ConnectedChannel_GotMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of serialized objects provided to the EventCoordinator endpoint. The issue...

9.8CVSS3.6AI score0.81753EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/12/21 12:00 a.m.•57 views

NETGEAR Multiple Routers mini_httpd Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Although authentication is required to exploit...

6.8CVSS2.9AI score0.02234EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/12/21 12:00 a.m.•35 views

(0Day) Microsoft 3D Builder GLB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS5.4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/12/18 12:00 a.m.•81 views

Hewlett Packard Enterprise Systems Insight Manager AMF Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Systems Insight Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the AMF protocol. Crafted data in an...

9.8CVSS2.9AI score0.8189EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2020/12/18 12:00 a.m.•51 views

VMware Workstation SetGuestInfo Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...

6.5CVSS2.2AI score0.00383EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/12/18 12:00 a.m.•107 views

NETGEAR Multiple Routers mini_httpd Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Authentication is not required to exploit this...

8.8CVSS1.7AI score0.08656EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
•added 2020/12/16 12:00 a.m.•67 views

(Pwn2Own) Western Digital MyCloud PR4100 nasAdmin Incorrect Authorization Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Western Digital MyCloud PR4100. Authentication is not required to exploit this vulnerability. The specific flaw exists within the nasAdmin service, which listens on TCP port 80 and 443 by...

2.3AI score0.03944EPSS
SaveExploits0References1
Total number of security vulnerabilities17282