Lucene search
K

7638 matches found

OSV
OSV
added 2019/09/12 7:15 p.m.4 views

CVE-2019-8076

Adobe application manager installer version 10.0 have an Insecure Library Loading DLL hijacking vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user...

7.8CVSS7.4AI score0.04111EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/11 12:0 a.m.20 views

Fuji Electric Alpha5 WPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Alpha5. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS5.8AI score0.02947EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/11 12:0 a.m.25 views

Delta Industrial Automation TPEditor TPE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation TPEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.6AI score0.01906EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/11 12:0 a.m.1 views

Microsoft Internet Explorer VBScript Engine Buffer Overflow Vulnerability (CNVD-2019-39016)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A buffer overflow vulnerability exists in the way the VBScript Engine handles memory objects in Microsoft IE 9...

7.6CVSS7.5AI score0.13172EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/11 12:0 a.m.2 views

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2019-39009)

Internet Explorer is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer prior to version 6 and Windows Internet Explorer versions 7, 8, 9, 10, 11, or IE for short. A memory corruption vulnerability exists in the Microsoft Internet Explorer scripting engine. The...

7.6CVSS7AI score0.15409EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/11 12:0 a.m.3 views

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-36876)

Edge is Microsoft's browser for Windows 10, characterized as fast and secure.Chakra JScript engine is a JavaScript engine developed by Microsoft for its Internet Explorer 9, Internet Explorer 10, Internet Explorer 11, and Microsoft Edge web browsers. A memory corruption vulnerability in the Chakr...

7.6CVSS6.8AI score0.08107EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/11 12:0 a.m.2 views

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-36877)

Edge is Microsoft's browser for Windows 10, characterized as fast and secure.Chakra JScript engine is a JavaScript engine developed by Microsoft for its Internet Explorer 9, Internet Explorer 10, Internet Explorer 11, and Microsoft Edge web browsers. A memory corruption vulnerability in the Chakr...

7.6CVSS6.8AI score0.08107EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/11 12:0 a.m.3 views

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-36637)

Edge is Microsoft's browser for Windows 10, Chakra JScript engine is a JavaScript engine developed by Microsoft for its Internet Explorer 9, Internet Explorer 10, Internet Explorer 11 and Microsoft Edge and other web browsers. Microsoft Edge suffers from a Chakra Scripting Engine memory corruptio...

7.6CVSS7AI score0.08107EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/11 12:0 a.m.2 views

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-36879)

Edge is Microsoft's browser for Windows 10, characterized as fast and secure.Chakra JScript engine is a JavaScript engine developed by Microsoft for its Internet Explorer 9, Internet Explorer 10, Internet Explorer 11, and Microsoft Edge web browsers. A memory corruption vulnerability in the Chakr...

7.6CVSS6.8AI score0.08107EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/09 12:0 a.m.20 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.6AI score0.12042EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/08/27 12:0 a.m.28 views

Apple Safari InlineBox Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the InlineBox rendere...

5CVSS2.4AI score0.01804EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/08/27 12:0 a.m.35 views

Apple Safari Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS4.1AI score0.04068EPSS
Exploits1References1
OSV
OSV
added 2019/08/26 3:15 p.m.3 views

DEBIAN-CVE-2019-15551

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity...

9.8CVSS7.3AI score0.01862EPSS
Exploits0References1
Prion
Prion
added 2019/08/26 3:15 p.m.9 views

Double free

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity...

7.5CVSS9.3AI score0.01862EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2019/08/23 5:15 p.m.1 views

DEBIAN-CVE-2019-10751

All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in his or hers control...

8.8CVSS8.1AI score0.02045EPSS
Exploits1References1
PyPA
PyPA
added 2019/08/23 5:15 p.m.5 views

PYSEC-2019-23

All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in his or hers control...

8.8CVSS7AI score0.02045EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2019/08/23 5:15 p.m.1 views

UBUNTU-CVE-2019-10751

All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in his or hers control...

8.8CVSS7.4AI score0.02045EPSS
Exploits1References5
CNVD
CNVD
added 2019/08/21 12:0 a.m.2 views

Microsoft Outlook Memory Corruption Vulnerability (CNVD-2019-40557)

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A memory corruption vulnerability exists in Microsoft Outlook, which can be exploited by an attacker to run arbitrary code in the context of the current user...

9.3CVSS7.4AI score0.04646EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/21 12:0 a.m.4 views

Microsoft Word Remote Code Execution Vulnerability (CNVD-2019-40558)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker with the help of a specially crafted file to perform an operation in the security context...

9.3CVSS7.9AI score0.0486EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/21 12:0 a.m.2 views

Microsoft Word Remote Code Execution Vulnerability (CNVD-2019-40537)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker with a specially crafted file to perform an operation in the security context of the...

9.8CVSS7.9AI score0.03968EPSS
Exploits0References1
Rows per page
Query Builder