Lucene search
K

16763 matches found

Zero Day Initiative
Zero Day Initiative
•added 2024/12/10 12:0 a.m.•6 views

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS7.8AI score0.00242EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/10 12:0 a.m.•12 views

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS6.8AI score0.00296EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/10 12:0 a.m.•5 views

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS7.8AI score0.00242EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/10 12:0 a.m.•10 views

Rockwell Automation Arena Simulation DOE File Parsing Use of Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS6.8AI score0.00229EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/10 12:0 a.m.•8 views

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS7.8AI score0.00242EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/10 12:0 a.m.•4 views

Linux Kernel Bluetooth HCI Request Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

7.5CVSS7.5AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/09 12:0 a.m.•10 views

Samsung MagicINFO 9 Server getFileFromMultipartFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung MagicINFO Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getFileFromMultipartFile method. The issue results from the lack of proper...

9.8CVSS7.4AI score0.91941EPSS
Exploits3References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/06 12:0 a.m.•9 views

Progress Software WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the WriteDataFile method. The issue results from th...

9.8CVSS7.4AI score0.49171EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/04 12:0 a.m.•9 views

Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product...

7.8CVSS7.1AI score0.00188EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/03 12:0 a.m.•3 views

Intel Computing Improvement Program PyInstaller Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Intel Computing Improvement Program. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

7.8CVSS7AI score0.00324EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/03 12:0 a.m.•5 views

Linux Kernel nftables Type Confusion Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

3.8CVSS6.3AI score0.00284EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:0 a.m.•5 views

XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

7.8CVSS6.9AI score0.0049EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:0 a.m.•8 views

Hewlett Packard Enterprise Insight Remote Support processAtatchmentDataStream Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the processAtatchmentDataStream...

9.8CVSS7.4AI score0.51343EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:0 a.m.•8 views

Hewlett Packard Enterprise Insight Remote Support getDocumentRootElement XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the getDocumentRootEleme...

7.3CVSS6.3AI score0.47387EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:0 a.m.•8 views

Hewlett Packard Enterprise Insight Remote Support validateAgainstXSD XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the validateAgainstXSD...

7.3CVSS6.2AI score0.8394EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:0 a.m.•6 views

Hewlett Packard Enterprise Insight Remote Support setInputStream XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the setInputStream metho...

7.3CVSS6.3AI score0.01517EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:0 a.m.•8 views

Hewlett Packard Enterprise Insight Remote Support DESTA Service Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DESTA service, which listens on TCP port 7901 by...

8.1CVSS7.6AI score0.00717EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:0 a.m.•7 views

Hewlett Packard Enterprise AutoPass License Server XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 58...

7.5CVSS6.2AI score0.00363EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:0 a.m.•6 views

Hewlett Packard Enterprise AutoPass License Server Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 5814 by...

7.3CVSS7.1AI score0.01138EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:0 a.m.•4 views

Hewlett Packard Enterprise AutoPass License Server SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 58...

7.5CVSS6.6AI score0.00363EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:0 a.m.•7 views

Hewlett Packard Enterprise AutoPass License Server hsqldb Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise AutoPass License Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific fl...

8CVSS7.5AI score0.00368EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•9 views

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00268EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•6 views

(0Day) Fuji Electric Monitouch V-SFT X1 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00268EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•5 views

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00264EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•7 views

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00264EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•10 views

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00268EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•5 views

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00268EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•14 views

(0Day) Fuji Electric Monitouch V-SFT X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00264EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•10 views

(0Day) Fuji Electric Monitouch V-SFT V9C File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00264EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•7 views

(0Day) Fuji Electric Monitouch V-SFT V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00264EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•6 views

(0Day) Fuji Electric Monitouch V-SFT V10 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00264EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•5 views

(0Day) Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00268EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•16 views

(0Day) Fuji Electric Monitouch V-SFT V8C File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00268EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•8 views

(0Day) Fuji Electric Monitouch V-SFT V9C File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00264EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•4 views

(0Day) Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00288EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•9 views

(0Day) Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00268EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•9 views

(0Day) Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00268EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:0 a.m.•7 views

(0Day) Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00268EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:0 a.m.•17 views

IrfanView WBZ Plugin WB1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WB1 files...

7.8CVSS6.9AI score0.0039EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:0 a.m.•6 views

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS7AI score0.00403EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:0 a.m.•9 views

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS7AI score0.00427EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:0 a.m.•6 views

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS7AI score0.00394EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:0 a.m.•6 views

Adobe InDesign JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

3.3CVSS6AI score0.00277EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:0 a.m.•9 views

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS7AI score0.00394EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:0 a.m.•13 views

7-Zip Qcow Handler Infinite Loop Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processin...

6.5CVSS6.3AI score0.01689EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:0 a.m.•7 views

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS6.8AI score0.00364EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:0 a.m.•8 views

Luxion KeyShot JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of jt...

7.8CVSS6.8AI score0.0033EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:0 a.m.•7 views

Intel Driver & Support Assistant Log Folder Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS7.2AI score0.00163EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:0 a.m.•15 views

Luxion KeyShot ABC File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of abc...

7.8CVSS6.9AI score0.00365EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:0 a.m.•5 views

Luxion KeyShot OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of obj...

7.8CVSS6.9AI score0.0033EPSS
Exploits0References1
Total number of security vulnerabilities16763