Lucene search
K

7636 matches found

Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.24 views

Foxit Reader TextBox Calculate Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS1.9AI score0.03814EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.28 views

Foxit Reader ListBox Selection Change Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

5.1CVSS1.7AI score0.03279EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.26 views

Foxit Reader TextBox Validate Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

5.1CVSS1.7AI score0.03814EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.27 views

Foxit Reader CheckBox onBlur Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

5.1CVSS1.6AI score0.03814EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.28 views

Foxit Reader TextBox Format Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

5.1CVSS2AI score0.0358EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/24 12:0 a.m.34 views

Apple Safari performProxyCall Internal Object Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of pro...

6.8CVSS2.3AI score0.02168EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/24 12:0 a.m.31 views

Apple Safari Array Concat Uninitialized Buffer Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

4.3CVSS2AI score0.02168EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2018/09/21 12:0 a.m.3 views

The vulnerability of Microsoft Excel spreadsheet editors in the Microsoft Office 2016 software suite allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of Microsoft Excel in the Microsoft Office 2016 software suite is related to errors in processing objects in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user...

4.5CVSS8.1AI score0.19546EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2018/09/19 12:0 a.m.27 views

Microsoft Chakra Array.splice Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra as well as Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

6.8CVSS2.9AI score0.15139EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2018/09/18 12:0 a.m.3 views

The vulnerability of the Internet Explorer browser, caused by errors in memory object handling, allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

7.6CVSS8.3AI score0.12895EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/09/18 12:0 a.m.3 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

4.2CVSS8.2AI score0.14633EPSS
Exploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2018/09/14 12:0 a.m.30 views

Microsoft Internet Explorer Table Row NULL Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS3.2AI score0.12895EPSS
Exploits0References1
Slackware Linux
Slackware Linux
added 2018/09/13 10:3 p.m.76 views

[slackware-security] ghostscript

New ghostscript packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/ghostscript-9.25-i586-1slack14.2.txz: Upgraded. This release fixes problems with argument handling, some unintended results of th...

9.3CVSS0.2AI score0.92499EPSS
Exploits4
CNVD
CNVD
added 2018/09/13 12:0 a.m.2 views

Microsoft Word Remote Code Execution Vulnerability (CNVD-2018-18623)

Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Word, which can be exploited by a remote attacker to execute arbitrary code in the context of the current user...

9.3CVSS8AI score0.23044EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/12 12:0 a.m.12 views

Cisco WebEx Network Recording Player ARF File Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

2.6CVSS2.5AI score
Exploits0
CNVD
CNVD
added 2018/09/12 12:0 a.m.2 views

Microsoft ChakraCore Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-21204)

Microsoft ChakraCore is a core part of an open source JavaScript engine used in Edge. A remote memory corruption vulnerability exists in Microsoft ChakraCore Scripting Engine. A remote attacker can exploit this vulnerability to corrupt memory by executing arbitrary code in the context of the...

7.6CVSS7.5AI score0.1482EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/12 12:0 a.m.23 views

Fuji Electric V-Server Lite File Parsing Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS5.4AI score0.01849EPSS
Exploits0References1
CNVD
CNVD
added 2018/09/12 12:0 a.m.2 views

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-26971)

Microsoft Windows 10 and Windows Server 2019 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

7.6CVSS7.9AI score0.69019EPSS
Exploits2References1
CNVD
CNVD
added 2018/09/12 12:0 a.m.3 views

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-26983)

Microsoft Windows 10 and Windows Server 2019 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

7.6CVSS7.9AI score0.14749EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2018/09/11 7:0 a.m.28 views

Internet Explorer Memory Corruption Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabilit...

7.6CVSS1.5AI score0.12895EPSS
Exploits0
Rows per page
Query Builder