(Pwn2Own) Apple Safari ProcessingInstruction Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

ICS-CERT Releases WannaCry Fact Sheet

The Industrial Control Systems Cyber Emergency Response Team ICS-CERT has released a short overview of the WannaCry ransomware infections. This fact sheet provides information on how the WannaCry program spreads, what users should do if they have been infected, and how to protect against similar...

Apple Safari RenderInline Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Apple Safari RenderElement Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

(Pwn2Own) Apple Safari Array concat Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Microsoft Office Memory Corruption Vulnerability (CNVD-2017-06604)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. The Office software does not properly handle memory objects and is implemented with a memory corruption vulnerability that allows an attacker to run arbitrary code in the current user...

Dolibarr ERP/CRM Arbitrary Password Change Vulnerability

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A security vulnerability exists in Dolibarr ERP/CRM version...

Microsoft Edge Remote Code Execution Vulnerability

Microsoft Edge is the web browser built into the Windows 10 version. A remote code execution vulnerability exists in the scripting engine presentation when Microsoft Edge handles in-memory objects, where an attacker could execute arbitrary code in the current user context...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06587)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge does not properly access memory objects and is implemented with a remote memory corruption vulnerability that allows an attacker to execute arbitrary code in the current user context...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2017-06601)

Internet Explorer is a web browser from Microsoft. Internet Explorer does not properly access memory objects and is implemented with a memory corruption vulnerability that could allow an attacker to execute arbitrary code in the current user context...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06590)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge does not properly access memory objects, and a remote memory corruption vulnerability exists in the JavaScript engine rendering implementation, where an attacker could execute arbitrary code in the current user...

Microsoft Internet Explorer/Edge Remote Memory Corruption Vulnerability (CNVD-2017-06599)

Internet Explorer is a web browser from Microsoft. Internet Explorer does not properly access memory objects and is implemented with a memory corruption vulnerability that could allow an attacker to execute arbitrary code in the current user context...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06595)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists in the Chakra JavaScript engine rendering when Microsoft Edge handles in-memory objects, where an attacker could execute arbitrary code in the current user context...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06589)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge does not properly access memory objects, and a remote memory corruption vulnerability exists in the JavaScript engine rendering implementation, where an attacker could execute arbitrary code in the current user...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2017-06600)

Internet Explorer is a web browser from Microsoft. Internet Explorer does not properly access memory objects and is implemented with a remote memory corruption vulnerability that could allow an attacker to execute arbitrary code in the current user context...

UBUNTU-CVE-2017-8879

Dolibarr ERP/CRM 4.0.4 allows password changes without supplying the current password, which makes it easier for physically proximate attackers to obtain access via an unattended workstation...

(Pwn2Own) Microsoft Edge AudioBuffer Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

(Pwn2Own) Microsoft Chakra Array Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

PT-2017-18601 · Dolibarr · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM version 4.0.4 Description: The issue allows password changes without requiring the current password, making it easier for attackers with physical access to obtain access via an unattended workstation. Recommendations: For...

PT-2017-2141 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: The issue is related to improper access to objects in memory, which could lead to memory corruption. This corruption may allow an attacker to execute arbitrary code in the context...