GHSA-WJMF-6X7G-XQ67 ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-0945,...

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0946, CVE-2018-0951, CVE-2018-0953,...

CVE-2022-0946

creationtimestamp| type| source ---|---|--- 2022-03-14 17:23:43+00:00| seen| https://t.me/cibsecurity/38884...

CVE-2022-0946 Stored XSS viva cshtm file upload in star7th/showdoc

Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2022-0946

The CVE-2022-0946 entry concerns ShowDoc (star7th/showdoc) with a stored XSS via viva cshtm file uploads. Affected versions are prior to v2.10.4, where uploaded files with the .cshtm extension can execute scripts in a user’s browser, enabling potential session hijacking or data exposure. Red Hat/...

CVE-2022-0946 Stored XSS viva cshtm file upload in star7th/showdoc

Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4...

CVE-2020-0946

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945, CVE-2020-0947...

CVE-2020-0946

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945, CVE-2020-0947...

CVE-2020-0946

CVE-2020-0946 is a Media Foundation Information Disclosure vulnerability in Microsoft Windows where improper handling of memory objects can allow an information disclosure. The initial entry identifies Media Foundation as the affected component and describes the flaw as memory-object handling lea...

KB4550965: Windows 7 and Windows Server 2008 R2 April 2020 Security Update

The remote Windows host is missing security update 4550965 or cumulative update 4550964. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploit...

KB4550930: Windows 10 April 2020 Security Update

The remote Windows host is missing security update 4550930. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully exploited this vulnerability could...

CVE-2019-0946

The provided documents identify CVE-2019-0946 as a remote code execution vulnerability affecting Microsoft Office Access Connectivity Engine, caused by improper handling of objects in memory. The Red Hat and NVD entries consistently describe a memory-handling flaw in the Access Connectivity Engin...

Microsoft Office 2010 Service Pack 2 Multiple Vulnerabilities (KB4464567)

This host is missing an important security update according to Microsoft KB4464567 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 2016 Multiple Vulnerabilities (KB4464551)

This host is missing an important security update according to Microsoft KB4464551 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 2013 Service Pack 1 Multiple Vulnerabilities (KB4464561)

This host is missing an important security update according to Microsoft KB4464561 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

KLA11484 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...

Security Bulletin: IBM Operational Decision Manager : CVE-2014-0944, CVE-2014-0945, CVE-2014-0946

Summary This Security Bulletin addresses 3 security vulnerabilities CVE-2014-0944, CVE-2014-0945 and CVE-2014-0946 in IBM Operational Decision Manager. All issue are related to the RES Console provided in Rule Execution Server. Vulnerability Details CVE ID: CVE-2014-0944 DESCRIPTION: IBM...

CVE-2018-0946

creationtimestamp| type| source ---|---|--- 2018-05-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44758...

Remote code execution

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...

Remote code execution

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...