Lucene search
+L

17156 matches found

Zero Day Initiative
Zero Day Initiative
•added 2024/12/09 12:00 a.m.•18 views

Samsung MagicINFO 9 Server getFileFromMultipartFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung MagicINFO Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getFileFromMultipartFile method. The issue results from the lack of proper...

9.8CVSS7.4AI score0.91941EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/06 12:00 a.m.•16 views

Progress Software WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the WriteDataFile method. The issue results from th...

9.8CVSS7.4AI score0.48945EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/04 12:00 a.m.•22 views

Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product...

7.8CVSS7.1AI score0.00197EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/03 12:00 a.m.•21 views

Linux Kernel nftables Type Confusion Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

3.8CVSS6.3AI score0.00282EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/03 12:00 a.m.•10 views

Intel Computing Improvement Program PyInstaller Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Intel Computing Improvement Program. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

7.8CVSS7AI score0.00324EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:00 a.m.•13 views

XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

7.8CVSS6.9AI score0.00492EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:00 a.m.•17 views

Hewlett Packard Enterprise Insight Remote Support setInputStream XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the setInputStream metho...

7.3CVSS6.3AI score0.01515EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:00 a.m.•18 views

Hewlett Packard Enterprise Insight Remote Support processAtatchmentDataStream Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the processAtatchmentDataStream...

9.8CVSS7.4AI score0.56287EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:00 a.m.•14 views

Hewlett Packard Enterprise AutoPass License Server SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 58...

7.5CVSS6.6AI score0.00363EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:00 a.m.•15 views

Hewlett Packard Enterprise Insight Remote Support validateAgainstXSD XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the validateAgainstXSD...

7.3CVSS6.2AI score0.83629EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:00 a.m.•18 views

Hewlett Packard Enterprise Insight Remote Support getDocumentRootElement XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the getDocumentRootEleme...

7.3CVSS6.3AI score0.46671EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:00 a.m.•16 views

Hewlett Packard Enterprise Insight Remote Support DESTA Service Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DESTA service, which listens on TCP port 7901 by...

8.1CVSS7.6AI score0.00718EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:00 a.m.•14 views

Hewlett Packard Enterprise AutoPass License Server hsqldb Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise AutoPass License Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific fl...

8CVSS7.5AI score0.00387EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:00 a.m.•13 views

Hewlett Packard Enterprise AutoPass License Server Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 5814 by...

7.3CVSS7.1AI score0.01138EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/02 12:00 a.m.•15 views

Hewlett Packard Enterprise AutoPass License Server XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 58...

7.5CVSS6.2AI score0.00363EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•16 views

(0Day) Fuji Electric Monitouch V-SFT V10 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00263EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•16 views

(0Day) Fuji Electric Monitouch V-SFT V9C File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00263EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•11 views

(0Day) Fuji Electric Monitouch V-SFT V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00263EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•24 views

(0Day) Fuji Electric Monitouch V-SFT V8C File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00267EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•11 views

(0Day) Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00267EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•18 views

(0Day) Fuji Electric Monitouch V-SFT X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00263EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•17 views

(0Day) Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00267EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•13 views

(0Day) Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00267EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•14 views

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00263EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•12 views

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00263EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•10 views

(0Day) Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00267EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•10 views

(0Day) Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00286EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•19 views

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00267EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•16 views

(0Day) Fuji Electric Monitouch V-SFT V9C File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00263EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•15 views

(0Day) Fuji Electric Monitouch V-SFT X1 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00267EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•15 views

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00267EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/27 12:00 a.m.•16 views

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00267EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•15 views

Luxion KeyShot JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of jt...

7.8CVSS6.8AI score0.00329EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•18 views

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS7AI score0.00425EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•20 views

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS7AI score0.00401EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•17 views

IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ECW files...

7.8CVSS6.9AI score0.00436EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•18 views

IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RLE files...

7.8CVSS7AI score0.00425EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•24 views

IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files...

7.8CVSS6.8AI score0.00438EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•17 views

IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS6.8AI score0.00405EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•19 views

IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files...

7.8CVSS6.8AI score0.00393EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•20 views

IrfanView CGM File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CGM files...

7.8CVSS7AI score0.00393EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•20 views

IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS6.9AI score0.00393EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•22 views

IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ECW files...

7.8CVSS6.9AI score0.00436EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•20 views

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS6.8AI score0.00393EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•22 views

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS6.8AI score0.00401EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•16 views

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS6.8AI score0.00419EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•15 views

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS6.8AI score0.00363EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•21 views

IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS6.9AI score0.00393EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•16 views

IrfanView XCF Plugin XCF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XCF files...

7.8CVSS6.8AI score0.00352EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/11/21 12:00 a.m.•18 views

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS7AI score0.00393EPSS
SaveExploits0
Total number of security vulnerabilities17156