Lucene search
+L
Zero Day InitiativeRecent

17282 matches found

Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•58 views

Microsoft Windows Camera Codec Pack Image Processing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the camera codec...

7.8CVSS3.7AI score0.04905EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•74 views

Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dxtex...

7CVSS6.2AI score0.04285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•64 views

Microsoft Word DOCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DOCX...

7.8CVSS6.3AI score0.03851EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•62 views

Microsoft Windows Media Player HEVC Stream Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows Media Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.7AI score0.04181EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•58 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7.8CVSS4AI score0.46034EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•83 views

Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dxtex...

7.8CVSS6.2AI score0.04369EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•69 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7.8CVSS4AI score0.04266EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•86 views

Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Multiple Vulnerabilities

These vulnerabilities allow remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit these vulnerabilities in that the target must visit a malicious page or open a malicious file. The specific flaws exist within the...

7CVSS6.2AI score0.04285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•62 views

SAP 3D Visual Enterprise Viewer U3D File Parsing 3difr Plugin Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7CVSS5.6AI score0.01629EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•95 views

Microsoft Windows WebM Video Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

8.8CVSS7.2AI score0.04664EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•51 views

SAP 3D Visual Enterprise Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

4.5CVSS5.3AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•61 views

SAP 3D Visual Enterprise Viewer CGM File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7CVSS4.9AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•53 views

SAP 3D Visual Enterprise Viewer HPGL File Parsing hpgl Plugin Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7CVSS3.4AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•60 views

SAP 3D Visual Enterprise Viewer HPGL File Parsing hpgl Plugin Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7CVSS3.6AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•58 views

Microsoft Windows State Repository Service Race Condition Use-After-Free Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Sta...

2.5CVSS4.2AI score0.01079EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•66 views

Adobe FrameMaker FM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of FM...

7.8CVSS5.7AI score0.03595EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•48 views

SAP 3D Visual Enterprise Viewer EPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.4AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•48 views

SAP 3D Visual Enterprise Viewer U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.5AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•48 views

SAP 3D Visual Enterprise Viewer PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.9AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•46 views

SAP 3D Visual Enterprise Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

5.3CVSS5.5AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•50 views

SAP 3D Visual Enterprise Viewer BMP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•60 views

SAP 3D Visual Enterprise Viewer BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5.3AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/10 12:00 a.m.•56 views

SAP 3D Visual Enterprise Viewer HDR File Parsing Memory Corruption Remote Code Execution Vulnerabililty

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•39 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•35 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•42 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•32 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•27 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•30 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•59 views

(0Day) Hewlett Packard Enterprise Pay per use UCS Meter ReceiverServlet doGet Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise Pay per use UCS Meter. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ReceiverServlet class. The issue results fr...

7.5CVSS1.4AI score0.01588EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•89 views

Cisco RV340 upload.cgi Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the fileparam parameter provided to the upload.cgi endpoint. T...

5.5CVSS3.2AI score0.02175EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•55 views

(0Day) Hewlett Packard Enterprise Pay per use UCS Meter DownloadServlet execute Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise Pay per use UCS Meter. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet class. The issue results fr...

7.5CVSS2.1AI score0.01588EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•50 views

Mitsubishi Electric MELSEC iQ-F Predictable TCP Sequence Number Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mitsubishi Electric MELSEC iQ-F. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of ACK packets. When generating ACK packets, the...

9.8CVSS2.4AI score0.0227EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•30 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•33 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•24 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•23 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•29 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•31 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•26 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•59 views

(0Day) Hewlett Packard Enterprise Pay per use UCS Meter ReceiverServlet doPost Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Pay per use UCS Meter. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ReceiverServlet class. The issue results from the...

9.8CVSS4.1AI score0.0304EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•36 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•30 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•48 views

Cisco RV340 upload.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the fileparam parameter provided to the upload.cgi endpoint. T...

6.8CVSS3.6AI score0.03083EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/09/08 12:00 a.m.•41 views

NEC ExpressCluster ApplyConfig XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressCluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the clpwebmc executable. Due to the improper restriction of XML External Enti...

7.5CVSS3AI score0.71338EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/31 12:00 a.m.•53 views

Trend Micro Apex One Hard Link Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...

7.8CVSS4AI score0.00783EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/31 12:00 a.m.•56 views

Trend Micro Apex One Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...

7.8CVSS4.4AI score0.02666EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/31 12:00 a.m.•68 views

Trend Micro Apex One Hard Link Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...

7.8CVSS3.8AI score0.00795EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/31 12:00 a.m.•65 views

Trend Micro Apex One Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

2.5CVSS3AI score0.00633EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/08/27 12:00 a.m.•34 views

Advantech iView NetworkServlet findCfgDeviceListExport Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the findCfgDeviceListExport method of the NetworkServlet clas...

9.8CVSS5.5AI score0.07717EPSS
SaveExploits0References1
Total number of security vulnerabilities17282