Lucene search
+L

129 matches found

OSV
OSV
added 2021/11/18 3:15 p.m.12 views

CVE-2021-0658

In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672107...

6.7CVSS5.9AI score0.00119EPSS
SaveExploits0References1
CVE
CVE
added 2021/11/18 2:57 p.m.63 views

CVE-2021-0658

CVE-2021-0658 affects the apusys component with an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with System execution privileges required and no user interaction. Public documentation consistently notes this is a local vulnerability with high-impact...

6.7CVSS6.7AI score0.00119EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.15 views

SUSE: Security Advisory (SUSE-SU-2021:0658-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/02/24 12:00 a.m.43 views

RHEL 8 : thunderbird (RHSA-2021:0658)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0658 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.8.0. Security Fixes: Mozilla:...

8.8CVSS7.6AI score0.0153EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2020/03/13 12:00 a.m.68 views

SUSE SLES12 Security Update : php5 (SUSE-SU-2020:0658-1)

This update for php5 fixes the following issues : CVE-2020-7062: Fixed a NULL pointer dereference when using file upload functionality under specific circumstances bsc1165280. CVE-2020-7063: Fixed an issue where adding files change the permissions to default bsc1165289. Note that Tenable Network...

7.5CVSS7.2AI score0.03598EPSS
SaveExploits2References7
OpenVAS
OpenVAS
added 2020/02/12 12:00 a.m.140 views

Microsoft Windows Multiple Vulnerabilities (KB4532693)

This host is missing a critical security update according to Microsoft KB4532693 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.86863EPSS
SaveExploits30References3
OpenVAS
OpenVAS
added 2020/02/12 12:00 a.m.99 views

Microsoft Windows Multiple Vulnerabilities (KB4537789)

This host is missing a critical security update according to Microsoft KB4537789 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.86863EPSS
SaveExploits30References3
OpenVAS
OpenVAS
added 2020/02/12 12:00 a.m.119 views

Microsoft Windows Multiple Vulnerabilities (KB4537764)

This host is missing a critical security update according to Microsoft KB4537764 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.86863EPSS
SaveExploits30References3
CVE
CVE
added 2020/02/11 9:22 p.m.109 views

CVE-2020-0658

CVE-2020-0658 affects the Windows Common Log File System (CLFS) driver. The vulnerability stems from a flaw in how objects in memory are handled, allowing an information disclosure. According to the provided data, exploitation is local with low attack complexity, and confidentiality impact is lis...

5.5CVSS6.1AI score0.01454EPSS
SaveExploits0References1Affected Software8
Tenable Nessus
Tenable Nessus
added 2020/02/11 12:00 a.m.282 views

KB4532693: Windows 10 Version 1903 and Windows 10 Version 1909 February 2020 Security Update

The remote Windows host is missing security update 4532693. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this...

9.3CVSS8.2AI score0.86863EPSS
SaveExploits30References86
Tenable Nessus
Tenable Nessus
added 2020/02/11 12:00 a.m.284 views

KB4537789: Windows 10 Version 1709 February 2020 Security Update

The remote Windows host is missing security update 4537789. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this...

9.3CVSS8.1AI score0.86863EPSS
SaveExploits30References79
Veracode
Veracode
added 2019/05/02 4:44 a.m.36 views

XML External Entity (XXE)

The openstack-nova packages provide OpenStack Compute code name Nova, which provides services for provisioning, managing, and using virtual machine instances. A denial of service flaw was found in the Extensible Markup Language XML parser used by Nova. A remote attacker could use this flaw to sen...

5CVSS9AI score0.04903EPSS
SaveExploits1References30Affected Software4
CVE
CVE
added 2019/03/06 12:00 a.m.112 views

CVE-2019-0658

CVE-2019-0658 describes an information-disclosure vulnerability in Microsoft Edge/ChakraCore where memory-objects handling leaks could expose memory contents. The ChakraCore information-disclosure entry (GHSA-wwfw-m54G-GV72) confirms the issue is memory-object related and notes an update to chang...

6.5CVSS4.8AI score0.07708EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2019/03/05 11:29 p.m.21 views

CVE-2019-0658

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0648...

6.5CVSS4.4AI score0.07708EPSS
SaveExploits0References2
Circl
Circl
added 2019/02/13 2:35 p.m.18 views

CVE-2019-0658

creationtimestamp| type| source ---|---|--- 2019-02-13 14:35:53+00:00| seen| MISP/5c642a56-2440-4af0-8bfd-6e4a0a021402...

6.5CVSS6.8AI score0.07708EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2019/02/12 12:00 a.m.92 views

KLA11422 Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A memory...

8.1CVSS8.8AI score0.19784EPSS
SaveExploits0References38
Check Point Advisories
Check Point Advisories
added 2019/02/12 12:00 a.m.24 views

Microsoft Edge Scripting Engine Information Disclosure (CVE-2019-0658)

An information disclosure vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

4.3CVSS5AI score0.07708EPSS
SaveExploits0
OSV
OSV
added 2018/09/07 2:29 p.m.12 views

CVE-2018-0658

Input validation issue in EC-CUBE Payment Module 2.12 version 3.5.23 and earlier, EC-CUBE Payment Module 2.11 version 2.3.17 and earlier, GMO-PG Payment Module PG Multi-Payment Service 2.12 version 3.5.23 and earlier, GMO-PG Payment Module PG Multi-Payment Service 2.11 version 2.3.17 and earlier...

7.2CVSS6.1AI score0.01029EPSS
SaveExploits0References1
NVD
NVD
added 2018/09/07 2:29 p.m.22 views

CVE-2018-0658

Input validation issue in EC-CUBE Payment Module 2.12 version 3.5.23 and earlier, EC-CUBE Payment Module 2.11 version 2.3.17 and earlier, GMO-PG Payment Module PG Multi-Payment Service 2.12 version 3.5.23 and earlier, GMO-PG Payment Module PG Multi-Payment Service 2.11 version 2.3.17 and earlier...

7.2CVSS7.3AI score0.01029EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/09/07 2:00 p.m.26 views

CVE-2018-0658

Input validation issue in EC-CUBE Payment Module 2.12 version 3.5.23 and earlier, EC-CUBE Payment Module 2.11 version 2.3.17 and earlier, GMO-PG Payment Module PG Multi-Payment Service 2.12 version 3.5.23 and earlier, GMO-PG Payment Module PG Multi-Payment Service 2.11 version 2.3.17 and earlier...

7.2AI score0.01029EPSS
SaveExploits0References1
Rows per page
Query Builder