Lucene search
+L

115 matches found

Tenable Nessus
Tenable Nessus
added 2018/03/12 12:0 a.m.28 views

Solaris 10 (x86) : 139501-02

SunOS 5.10x86: openssl patch. Date this patch was last updated by Sun : Feb/24/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

7.5CVSS7.9AI score0.05146EPSS
SaveExploits6References12
OSV
OSV
added 2018/02/22 12:29 a.m.4 views

CVE-2018-0124

A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to bypass security protections, gain elevated privileges, and execute arbitrary code. The vulnerability is due to insecure key generation during application configuration. An attacker...

9.8CVSS6.1AI score0.05151EPSS
SaveExploits0References3
CVE
CVE
added 2018/02/22 12:0 a.m.57 views

CVE-2018-0124

CVE-2018-0124 concerns Cisco Unified Communications Domain Manager. A remote, unauthenticated attacker could bypass protections, elevate privileges, and execute arbitrary code due to insecure key generation during application configuration. Exploitation involves sending requests with the known in...

9.8CVSS9.8AI score0.05151EPSS
SaveExploits0References3Affected Software1
Circl
Circl
added 2017/03/20 12:0 a.m.11 views

CVE-2017-0124

creationtimestamp| type| source ---|---|--- 2017-03-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41655...

4.3CVSS6.8AI score0.22471EPSS
SaveExploits2References1
OSV
OSV
added 2017/03/17 12:59 a.m.5 views

CVE-2017-0123

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

4.3CVSS5.8AI score0.22471EPSS
SaveExploits2References4
OSV
OSV
added 2017/03/17 12:59 a.m.4 views

CVE-2017-0124

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

4.3CVSS5.8AI score0.22471EPSS
SaveExploits2References4
Prion
Prion
added 2017/03/17 12:59 a.m.29 views

Information disclosure

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a...

4.3CVSS4.3AI score0.42124EPSS
SaveExploits4References4Affected Software3
Prion
Prion
added 2017/03/17 12:59 a.m.35 views

Information disclosure

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

4.3CVSS4.3AI score0.42124EPSS
SaveExploits4References4Affected Software1
CVE
CVE
added 2017/03/17 12:0 a.m.85 views

CVE-2017-0124

Technical details for CVE-2017-0124 are not publicly available in the provided connected documents. The materials reference Uniscribe-related issues and related CVEs, but do not reveal affected software versions, root cause, impact, or fixes for this CVE. Monitor for updates.

4.3CVSS4.5AI score0.22471EPSS
SaveExploits2References4Affected Software3
Tenable Nessus
Tenable Nessus
added 2017/03/14 12:0 a.m.221 views

MS17-011: Security Update for Microsoft Uniscribe (4013076)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in Windows Uniscribe due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit these to execut...

9.3CVSS6.9AI score0.57338EPSS
SaveExploits22References30
OpenVAS
OpenVAS
added 2016/03/31 12:0 a.m.31 views

Mageia: Security Advisory (MGASA-2016-0124)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8AI score0.06058EPSS
SaveExploits1References20
CVE
CVE
added 2016/03/09 11:0 a.m.62 views

CVE-2016-0124

Microsoft Edge contains a memory corruption vulnerability that can be exploited by a crafted web site to execute arbitrary code or cause a denial of service. The CNVD entries describe a remote attacker able to run code in the context of the current user due to improper memory handling in Edge, al...

7.6CVSS7.7AI score0.13354EPSS
SaveExploits0References3Affected Software1
Check Point Advisories
Check Point Advisories
added 2016/03/08 12:0 a.m.14 views

Microsoft Edge Memory Corruption (MS16-024: CVE-2016-0124)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could...

7.6CVSS7.8AI score0.13354EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/03/08 12:0 a.m.35 views

MS16-024: Cumulative Security Update for Microsoft Edge (3142019)

The version of Microsoft Edge installed on the remote host is missing Cumulative Security Update 3142019. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to improper handling of objects in memory. An attacker can exploit these...

7.6CVSS7.3AI score0.43643EPSS
SaveExploits2References12
Tenable Nessus
Tenable Nessus
added 2016/02/05 12:0 a.m.41 views

RHEL 6 : jboss-ec2-eap (RHSA-2016:0124)

Updated jboss-ec2-eap packages that add one enhancement and resolve one security issue are now available for Red Hat JBoss Enterprise Application Platform 6.4.6 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerabilit...

7.5CVSS7.4AI score0.1326EPSS
SaveExploits0References5
Prion
Prion
added 2015/03/18 10:59 a.m.14 views

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix4, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0124...

3.5CVSS5.3AI score0.01402EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2015/03/18 10:0 a.m.47 views

CVE-2015-0124

CVE-2015-0124 is an XSS vulnerability in IBM Rational Quality Manager affecting 2.x/3.x (pre-3.0.1.6 iFix4), 4.x (pre-4.0.7 iFix3), and 5.x (pre-5.0.2). It allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This set is related to CVE-2015-0128 (another XSS...

3.5CVSS5.2AI score0.01402EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2014/11/26 12:0 a.m.33 views

Fedora Update for moodle FEDORA-2014-15102

Check the version of moodle SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868521";...

7.5CVSS6.7AI score0.04667EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2014/10/01 12:0 a.m.30 views

Fedora Update for moodle FEDORA-2014-10802

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.04667EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2014/08/05 12:0 a.m.23 views

Fedora Update for moodle FEDORA-2014-8609

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.6AI score0.04667EPSS
SaveExploits3References2
Rows per page
Query Builder