Microsoft Internet Explorer and Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2018-16175)

Internet Explorer is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer prior to version 6 and Windows Internet Explorer versions 7, 8, 9, 10, and 11, or IE for short.Edge is a browser built by Microsoft for Windows 10, characterized by being fast and secure. A scripting...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2018-19393)

Microsoft Internet Explorer is a popular WEB browser. A remote memory corruption vulnerability exists in Microsoft Internet Explorer. A remote attacker can exploit this vulnerability to corrupt memory by executing arbitrary code in the context of the current user...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-16841)

Microsoft Excel is a spreadsheet processing software in the Office suite of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Excel, which results from the program failing to properly handle objects in memory. A remote attacker can exploit the...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2018-19392)

Microsoft Internet Explorer is a popular WEB browser. A remote memory corruption vulnerability exists in Microsoft Internet Explorer. A remote attacker can exploit this vulnerability to corrupt memory by executing arbitrary code in the context of the current user...

Microsoft Internet Explorer and Edge Memory Corruption Vulnerability (CNVD-2018-18477)

Microsoft Internet Explorer is a popular WEB browser.Microsoft Edge is a Web browser developed by Microsoft Corporation USA. A memory corruption vulnerability exists in Microsoft Internet Explorer and Edge. The vulnerability stems from a problem in the way the browser accesses objects in memory. ...

Slackware 14.2 / current : openssl (SSA:2018-226-01)

New openssl packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-226-01. The text itself is copyright C Slackware Linux, Inc...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2018-18005)

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft Corporation, U.S.A. Internet Explorer IE is one of the web browsers that comes with the Windows operating system. A remote code execution vulnerability exists in the way the scripting engine handles...

Windows Shell Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths. An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the current user. If the current user is logged on as an administrator, an attacker could...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

Microsoft Chakra Floating Point Array Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Microsoft Windows VBScript Class_Terminate Use After Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows VBScript. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Windows LNK File Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

Microsoft Windows LNK File Uninitialized Pointer Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit Reader PDF File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of P...

Microsoft DirectX SDK 'Xact.exe' Remote Code Execution Vulnerability

Microsoft DirectX SDK is software for DirectX programming. A remote code execution vulnerability exists in Microsoft DirectX SDK 'Xact.exe'. An attacker can exploit this vulnerability to execute arbitrary code via the Trojan horse file "xbdm.dll" in the current working directory...

PHP Scripts Mall Naukri/Shine/Jobsite Clone Script Denial of Service Vulnerability

PHP Scripts Mall Naukri/Shine/Jobsite Clone Script is a PHP and MySQL based job site system script by PHP Scripts Mall India. A denial of service vulnerability exists in PHP Scripts Mall Naukri/Shine/Jobsite Clone Script version 3.0.4. A remote attacker can exploit this vulnerability to cause a...

PT-2018-1466

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Microsoft Windows affected versions not specified Description The issue is caused by a buffer overflow in the JavaScript handler of Internet Explorer, allowing a remote attacker to execute...

PT-2018-18567

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to the scripting engine's handling of objects in memory. This could lead to memory corruption, allowing an attacker to execute arbitrary cod...

CVE-2018-15185

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...

CVE-2018-15185

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...