Lucene search
+L

95 matches found

CVE
CVE
added 2021/01/08 12:50 a.m.130 views

CVE-2021-1051

CVE-2021-1051 concerns NVIDIA's Windows GPU Display Driver where the kernel-mode nvlddmkm.sys handler for DxgkDdiEscape allows a local user to elevate privileges to modify display configuration data, potentially causing display DoS. The vulnerability affects the NVIDIA GPU Display Driver and is a...

8.4CVSS7.4AI score0.00257EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2020/05/21 11:15 p.m.24 views

CVE-2020-1051

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...

9.3CVSS8.1AI score0.03676EPSS
SaveExploits0References2
Prion
Prion
added 2020/05/21 11:15 p.m.25 views

Remote code execution

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051, CVE-2020-1175, CVE-2020-1176...

9.3CVSS7.9AI score0.03676EPSS
SaveExploits0References1Affected Software5
Prion
Prion
added 2020/05/21 11:15 p.m.24 views

Remote code execution

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051, CVE-2020-1174, CVE-2020-1175...

9.3CVSS7.9AI score0.03676EPSS
SaveExploits0References1Affected Software5
CVE
CVE
added 2020/05/21 10:52 p.m.117 views

CVE-2020-1051

CVE-2020-1051 concerns the Windows Jet Database Engine and is described as a remote code execution vulnerability caused by improper handling of objects in memory. The connected KB4556799 entry references Windows security updates and notes that the Jet Database Engine is among updated components, ...

9.3CVSS8.6AI score0.03676EPSS
SaveExploits0References2Affected Software8
Tenable Nessus
Tenable Nessus
added 2020/05/12 12:00 a.m.68 views

KB4556852: Windows Server 2012 May 2020 Security Update

The remote Windows host is missing security update 4556852 or cumulative update 4556840. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited thi...

9.9CVSS8.3AI score0.54158EPSS
SaveExploits17References37
Tenable Nessus
Tenable Nessus
added 2020/04/10 12:00 a.m.34 views

CentOS 7 : libosinfo (RHSA-2020:1051)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1051 advisory. - libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line...

7.8CVSS5.5AI score0.00431EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.28 views

Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2019-1051)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.26543EPSS
SaveExploits3References2
Prion
Prion
added 2019/06/12 2:29 p.m.28 views

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0989, CVE-2019-0991, CVE-2019-0992, CVE-2019-1002, CVE-2019-1003...

7.6CVSS7.4AI score0.04124EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2019/06/12 2:29 p.m.29 views

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0989, CVE-2019-0992, CVE-2019-0993, CVE-2019-1002, CVE-2019-1003...

7.6CVSS7.4AI score0.04124EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/06/12 1:49 p.m.140 views

CVE-2019-1051

CVE-2019-1051 is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine related to memory handling of objects in memory (HTML-based Edge). Exploitation could allow code execution in the context of the current user, with the attacker potentially attaining the user’s righ...

7.6CVSS6.7AI score0.04124EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2019/06/12 12:00 a.m.202 views

Microsoft Windows Multiple Vulnerabilities (KB4503291)

This host is missing a critical security update according to Microsoft KB4503291 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.3CVSS7.4AI score0.48043EPSS
SaveExploits17References3
Check Point Advisories
Check Point Advisories
added 2019/06/11 12:00 a.m.32 views

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1051)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS7.9AI score0.04124EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/08/07 12:00 a.m.60 views

Amazon Linux 2 : kernel (ALAS-2018-1051)

An issue was discovered in the XFS filesystem in fs/xfs/libxfs/xfsattrleaf.c in the Linux kernel. A NULL pointer dereference may occur for a corrupted xfs image after xfsdashrinkinode is called with a NULL bp. This can lead to a system crash and a denial of service.CVE-2018-13094 An issue was...

5.5CVSS6.6AI score0.02179EPSS
SaveExploits1References3
OSV
OSV
added 2018/01/25 8:29 p.m.34 views

CVE-2018-1051

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via Yaml.load in YamlProvider...

8.1CVSS8.4AI score
SaveExploits0References1
NVD
NVD
added 2018/01/25 8:29 p.m.37 views

CVE-2018-1051

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via Yaml.load in YamlProvider...

8.1CVSS8.1AI score0.013EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2018/01/25 8:00 p.m.75 views

CVE-2018-1051

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via Yaml.load in YamlProvider...

8.1CVSS8.2AI score0.013EPSS
SaveExploits0
CVE
CVE
added 2018/01/25 8:00 p.m.108 views

CVE-2018-1051

CVE-2018-1051 concerns JBoss RESTEasy. The prior fix for CVE-2016-9606 was incomplete, and in RESTEasy versions 3.0.22 and 3.1.2 YAML unmarshalling via Yaml.load() in YamlProvider remains possible. This is documented in the CVE description and corroborated by Nessus/ERR sources noting an unpatche...

8.1CVSS7.9AI score0.013EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/01/25 8:00 p.m.55 views

CVE-2018-1051

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via Yaml.load in YamlProvider...

8AI score0.013EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2018/01/25 4:50 p.m.41 views

CVE-2018-1051

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via Yaml.load in YamlProvider. Mitigation If the YamlProvider is enabled its recommended to add authentication, and authorization to the endpoint expecting...

8.1CVSS7.8AI score0.05922EPSS
SaveExploits0References1
Rows per page
Query Builder