Lucene search
+L

16763 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•22 views

Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS6AI score0.00334EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•19 views

D-Link DAP-2622 DDP Change ID Password Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•30 views

D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CLI service, which listens on TCP port 23. The server program...

8.8CVSS6.9AI score0.00865EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•42 views

LG LED Assistant updateFile Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/download/updateFile endpoint. The issue results from the lack of prope...

7.5CVSS6.1AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•29 views

D-Link DAP-2622 DDP Set SSID List PSK Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00872EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•24 views

D-Link DAP-2622 DDP Configuration Restore Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00895EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•14 views

LG LED Assistant thumbnail Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/thumbnail endpoint. The issue results from the lack of proper validati...

7.5CVSS6.1AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•20 views

D-Link DAP-2622 DDP Set Device Info Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•21 views

D-Link DAP-2622 DDP Set SSID List SSID Name Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•19 views

D-Link DAP-2622 DDP Set Date-Time Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•30 views

D-Link DAP-2622 DDP Firmware Upgrade Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•40 views

Apple macOS ImageIO EXR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

7.8CVSS7.2AI score0.00282EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•20 views

D-Link DAP-2622 DDP Set AG Profile NMS URL Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•22 views

D-Link DAP-2622 DDP Firmware Upgrade Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS6.9AI score0.00593EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•23 views

D-Link DAP-2622 DDP Set Date-Time Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•25 views

D-Link DAP-2622 DDP Set IPv6 Address Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•22 views

D-Link DAP-2622 DDP Set SSID List RADIUS Secret Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•26 views

D-Link DAP-2622 DDP Set IPv4 Address Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•25 views

D-Link DAP-2622 DDP Set IPv6 Address Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•29 views

D-Link DAP-2622 DDP Set Device Info Device Name Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•27 views

D-Link DAP-2622 DDP User Verification Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•26 views

D-Link DAP-2622 DDP Set AG Profile UUID Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•27 views

D-Link DAP-2622 DDP Reboot Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•19 views

D-Link DAP-2622 DDP Configuration Backup Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•27 views

Apple macOS EXR Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS6.2AI score0.00247EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•20 views

D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00605EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•40 views

Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Samba. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of Spotlight RPC arguments. Crafted arguments can force the server into ...

5.9CVSS6.6AI score0.61199EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•26 views

D-Link DAP-2622 DDP Set SSID List RADIUS Server Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•21 views

D-Link DAP-2622 DDP Reboot Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•21 views

D-Link DAP-2622 DDP Configuration Backup Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•22 views

D-Link DAP-2622 DDP Set IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•21 views

D-Link DAP-2622 DDP Configuration Restore Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.02447EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•20 views

D-Link DAP-2622 DDP Configuration Backup Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•25 views

LG LED Assistant upload Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/settings/upload endpoint. The issue results from the lack of proper validation...

9.8CVSS7.3AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•28 views

D-Link DAP-2622 DDP Set Wireless Info Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•27 views

D-Link DAP-2622 DDP Set Device Info Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•29 views

D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability

This vulnerability allows network-adjacent attackers to make unauthorized changes to device configuration on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the...

5.4CVSS6.7AI score0.00335EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•25 views

D-Link DAP-2622 DDP Configuration Backup Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•64 views

Samba Spotlight mdssvc RPC Request Type Confusion Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Samba. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of Spotlight RPC arguments. The issue results from the lack of proper validati...

6.5CVSS6.5AI score0.62402EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•31 views

D-Link DAP-2622 DDP Set AG Profile Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•31 views

D-Link DAP-2622 DDP Configuration Backup Server Address Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•30 views

D-Link DAP-2622 DDP Set Date-Time Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00872EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•32 views

D-Link DAP-2622 DDP Reset Factory Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•27 views

D-Link DAP-2622 DDP Set IPv6 Address Primary DNS Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•34 views

D-Link DAP-2622 DDP Set IPv6 Address Default Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

8.8CVSS7.3AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/24 12:00 a.m.•23 views

(0Day) LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of LG Simple Editor. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product...

7.8CVSS7.2AI score0.0023EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/08/24 12:00 a.m.•33 views

(Pwn2Own) HP LaserJet Pro M479fdw bksettings Hardcoded Cryptographic Key Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of HP LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Backup and Restore functionality. The issue results from a...

8.8CVSS7.5AI score0.0043EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/24 12:00 a.m.•24 views

(0Day) LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.4AI score0.02733EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/08/24 12:00 a.m.•25 views

(0Day) LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the copyContent command. Due to the improper restriction ...

7.5CVSS6.2AI score0.01271EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/08/24 12:00 a.m.•24 views

Microsoft Excel SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS6.7AI score0.00841EPSS
SaveExploits0References1
Total number of security vulnerabilities16763