Lucene search
+L

145 matches found

Kaspersky
Kaspersky
added 2022/02/14 12:0 a.m.491 views

KLA12462 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in File Manager can be exploited t...

8.8CVSS10AI score0.23546EPSS
Exploits0References3
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2022/02/14 12:0 a.m.161 views

Stable Channel Update for Desktop

The Stable channel has been updated to 98.0.4758.102 for Windows, Mac and Linux which will roll out over the coming days/weeks. Extended stable channel has also been updated to 98.0.4758.102 for Windows and Mac which will roll out over the coming days/weeks A full list of changes in this build is...

8.8CVSS10AI score0.23546EPSS
Exploits0Affected Software1
Circl
Circl
added 2021/06/22 8:18 p.m.8 views

CVE-2021-0607

creationtimestamp| type| source ---|---|--- 2021-06-22 20:18:52+00:00| seen| Telegram/s48LyB9SFaFh1o2A0Zl0dZ7GTxakprywMpNfGUv4SDoFU...

7.8CVSS7.5AI score0.00117EPSS
Exploits0
NVD
NVD
added 2021/06/22 12:15 p.m.32 views

CVE-2021-0607

In iaxxxcalci2sdiv of iaxxx-codec.c, there is a possible hardware port write with user controlled data due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8CVSS0.00117EPSS
Exploits0References1
CVE
CVE
added 2021/06/22 11:13 a.m.79 views

CVE-2021-0607

CVE-2021-0607 affects the Android kernel in the Knowles IAXXX adnc driver. The issue is in iaxxx_calc_i2s_div (iaxxx-codec.c) where a missing bounds check on a hardware port write allows an attacker with local access to supply data that leads to local elevation of privilege. Exploitation requires...

7.8CVSS7.7AI score0.00117EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.30 views

SUSE: Security Advisory (SUSE-SU-2017:0607-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.37431EPSS
Exploits5References8
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.35 views

SUSE: Security Advisory (SUSE-SU-2017:0607-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.37431EPSS
Exploits5References8
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.45 views

SUSE: Security Advisory (SUSE-SU-2017:0607-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.37431EPSS
Exploits5References8
OpenVAS
OpenVAS
added 2020/01/15 12:0 a.m.80 views

Microsoft Windows Multiple Vulnerabilities (KB4534273)

This host is missing a critical security update according to Microsoft KB4534273 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.89436EPSS
Exploits28References3
CVE
CVE
added 2020/01/14 11:11 p.m.161 views

CVE-2020-0607

CVE-2020-0607 is an information disclosure vulnerability in Microsoft Windows Graphics Components related to how memory objects are handled. The issue could allow partial disclosure of information (CVSS2: Confidentiality Partial; AV:N/AC:M/Au:N/I:N/A:N) with a local-style potential exploit (CVSS3...

5.5CVSS6.5AI score0.05927EPSS
Exploits0References1Affected Software7
Symantec
Symantec
added 2020/01/14 12:0 a.m.41 views

Microsoft Windows Graphics Components CVE-2020-0607 Information Disclosure Vulnerability

Description Microsoft Windows is prone to a information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 160...

7.2AI score0.05927EPSS
Exploits0Affected Software2
Tenable Nessus
Tenable Nessus
added 2020/01/14 12:0 a.m.97 views

KB4534273: Windows 10 Version 1809 and Windows Server 2019 January 2020 Security Update

The remote Windows host is missing security update 4534273. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends...

10CVSS8.2AI score0.99222EPSS
Exploits33References38
CVE
CVE
added 2019/03/06 12:0 a.m.94 views

CVE-2019-0607

Technical details about CVE-2019-0607 are not publicly provided in the supplied connected documents; no product/version/impact details are present. Monitor for updates.

7.6CVSS7.7AI score0.11107EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2019/03/05 11:29 p.m.23 views

Remote code execution

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-064...

7.6CVSS7.5AI score0.19784EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2019/03/05 11:29 p.m.18 views

Remote code execution

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-061...

7.6CVSS7.5AI score0.19784EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2019/03/05 11:29 p.m.22 views

CVE-2019-0607

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0610, CVE-2019-064...

7.5CVSS7.5AI score0.11107EPSS
Exploits0References2
Check Point Advisories
Check Point Advisories
added 2019/02/12 12:0 a.m.21 views

Microsoft Edge Scripting Engine Memory Corruption (CVE-2019-0607)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS7.9AI score0.11107EPSS
Exploits0
Kaspersky
Kaspersky
added 2019/02/12 12:0 a.m.86 views

KLA11422 Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A memory...

8.1CVSS8.8AI score0.19784EPSS
Exploits0References38
CVE
CVE
added 2018/07/26 5:0 p.m.47 views

CVE-2018-0607

CVE-2018-0607 affects Cybozu Garoon in the Notifications module (versions 3.5.0–4.6.2). The vulnerability is an SQL injection in the Notifications application that allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Root cause is a flaw in input handli...

8.8CVSS8.7AI score0.01153EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2017/11/22 12:0 a.m.26 views

Oracle MySQL Server 5.6 <= 5.6.27 / 5.7.9 Security Update (cpujan2016) - Linux

Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS8AI score0.03245EPSS
Exploits0References7
Rows per page
Query Builder