Lucene search
+L

8251 matches found

Positive Technologies
Positive Technologies
•added 2018/03/13 12:00 a.m.•12 views

PT-2018-16624 · Adobe +2 · Flash Player +2

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 28.0.0.161 and earlier Description: The issue is related to a use-after-free vulnerability that could lead to arbitrary code execution in the context of the current user. This vulnerability allows attackers to...

10CVSS8.6AI score0.9028EPSS
SaveExploits61References140
Malwarebytes
Malwarebytes
•added 2018/03/09 5:06 p.m.•80 views

How artificial intelligence and machine learning will impact cybersecurity

Artificial intelligence AI and machine learning ML are hot topics in technology. New use cases and applications are discussed daily—from search results recommendations to smart cars. But what are cybersecurity organizations doing with this tech? What does it take to render additional security out...

6.8AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2018/03/07 12:00 a.m.•40 views

Adobe Acrobat Pro DC ImageConversion EMF BMP Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

10CVSS5.6AI score0.08011EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/02/27 12:00 a.m.•28 views

Adobe Acrobat Pro DC XPS Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.5CVSS2.1AI score0.1121EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/02/27 12:00 a.m.•35 views

Adobe Acrobat Pro DC ImageConversion XPS Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

8.8CVSS4.2AI score0.15051EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/02/27 12:00 a.m.•31 views

Adobe Acrobat Pro DC ImageConversion TIFF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

8.8CVSS5.7AI score0.15051EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/02/27 12:00 a.m.•36 views

Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS2.3AI score0.09782EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/02/27 12:00 a.m.•31 views

Adobe Acrobat Pro DC ImageConversion BMP Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

10CVSS2.2AI score0.06208EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/02/27 12:00 a.m.•28 views

Adobe Acrobat Pro DC ImageConversion JPEG Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

9.3CVSS5.6AI score0.12847EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/02/26 12:00 a.m.•120 views

Microsoft StructuredQuery Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft.StructuredQuery is one of the structured query components. A remote code execution vulnerability exists in Microsoft StructuredQuery, which stems from the program failing to properly handle objects in memory. A remote attack...

7.6CVSS8.3AI score0.16479EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/02/26 12:00 a.m.•21 views

Microsoft ChakraCore Remote Code Execution Vulnerability (CNVD-2018-05734)

Microsoft ChakraCore is the core of the JavaScript engine used by Edge, a web browser from Microsoft. A remote code execution vulnerability exists in Microsoft ChakraCore. A remote attacker could exploit this vulnerability to execute arbitrary code in the context of the current user, causing memo...

9.3CVSS8.3AI score0.1483EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/02/21 12:00 a.m.•48 views

Adobe Acrobat Pro DC XFA picture Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

8.8CVSS2.2AI score0.13503EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/02/21 12:00 a.m.•38 views

Microsoft Office Excel Formula Type Confusion Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

9.3CVSS1.2AI score0.23257EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/02/21 12:00 a.m.•30 views

Adobe Acrobat Pro DC ImageConversion XPS TIFF dir count Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

8.8CVSS5.9AI score0.42796EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/02/21 12:00 a.m.•51 views

Microsoft Chakra String Concatenation Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the generation ...

7.6CVSS3.7AI score0.80799EPSS
SaveExploits4References1
BDU FSTEC
BDU FSTEC
•added 2018/02/21 12:00 a.m.•23 views

ChakraCore Script Handler Code Execution

The vulnerability of the JavaScript script handler ChakraCore in browsers Internet Explorer and Microsoft Edge is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS7.6AI score0.11932EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/02/21 12:00 a.m.•24 views

ChakraCore Microsoft Edge RCE

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS7.6AI score0.78434EPSS
SaveExploits5References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/02/21 12:00 a.m.•21 views

ChakraCore Microsoft Edge RCE

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS7.7AI score0.08643EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/02/21 12:00 a.m.•23 views

ChakraCore Script Handler Code Execution

The vulnerability of the JavaScript script handler ChakraCore in browsers Internet Explorer and Microsoft Edge is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS7.6AI score0.11932EPSS
SaveExploits0References5
Friends Of PHP
Friends Of PHP
•added 2018/02/20 9:35 p.m.•43 views

External link injection on 404 pages when linking to the current page.

More info at https://www.drupal.org/SA-CORE-2018-001...

5.8CVSS7.2AI score0.01174EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder