Lucene search
+L

69 matches found

OSV
OSV
added 2018/09/25 2:29 p.m.5 views

CVE-2018-6055

Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted HTML page...

8.8CVSS6AI score0.01143EPSS
SaveExploits0References3
CVE
CVE
added 2018/09/25 2:0 p.m.133 views

CVE-2018-6055

Technical details about CVE-2018-6055 are not publicly provided in the connected documents. The Initial Description notes impact and fix version for Chrome, but no deeper technical specifics are given. Monitor for updates.

8.8CVSS8.2AI score0.01143EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2018/09/25 2:0 p.m.41 views

CVE-2018-6055

Removed by vendor...

8.8CVSS8.7AI score0.01143EPSS
SaveExploits0
Cvelist
Cvelist
added 2017/11/08 6:0 p.m.9 views

CVE-2013-6055

...

SaveExploits0
CVE
CVE
added 2017/11/08 6:0 p.m.26 views

CVE-2013-6055

CVE-2013-6055 entry is rejected/not used.

6.8AI score
SaveExploits0
CVE
CVE
added 2017/02/23 4:0 p.m.51 views

CVE-2016-6055

IBM Rational DOORS Next Generation is affected by a cross-site scripting (XSS) vulnerability (CVE-2016-6055) in the Web UI. Affected products: Rational DOORS Next Generation 6.0–6.0.2 (6.0.3 not affected), 5.0–5.0.2, and Rational Requirements Composer 4.0.1–4.0.7. The issue allows embedding arbit...

5.4CVSS5.2AI score0.00511EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2017/02/23 4:0 p.m.25 views

CVE-2016-6055

IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Referen...

5.2AI score0.00511EPSS
SaveExploits0References1
NVD
NVD
added 2017/02/17 8:59 p.m.15 views

CVE-2017-6055

XML external entity XXE vulnerability in eParakstitajs 3 before 1.3.9 and eParaksts Java lib before 2.5.13 allows remote attackers to read arbitrary files or possibly have unspecified other impact via a crafted edoc file...

7.8CVSS8.1AI score0.01727EPSS
SaveExploits0References2
CVE
CVE
added 2017/02/17 8:0 p.m.79 views

CVE-2017-6055

The CVE-2017-6055 issue is an XML External Entity (XXE) vulnerability in eParakstitajs 3 before 1.3.9 and in the eParaksts Java library before 2.5.13. The root cause is improper handling of external entities in XML documents (edoc files), allowing remote attackers to read arbitrary files or trigg...

7.8CVSS8AI score0.01727EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2015/10/14 1:0 a.m.72 views

CVE-2015-6055

The CVE-2015-6055 issue affects the Microsoft scripting engines used by Internet Explorer (VBScript 5.7/5.8 and JScript 5.7/5.8) and is caused by memory corruption when processing crafted Filter arguments. This can allow remote code execution or memory corruption leading to a DoS; affected produc...

9.3CVSS8.1AI score0.25081EPSS
SaveExploits0References6Affected Software2
OpenVAS
OpenVAS
added 2015/10/14 12:0 a.m.32 views

Microsoft Windows JScript and VBScript Remote Code Execution Vulnerability (3089659)

This host is missing a critical security update according to Microsoft Bulletin MS15-108. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS7.7AI score0.32285EPSS
SaveExploits4References2
Check Point Advisories
Check Point Advisories
added 2015/10/13 12:0 a.m.37 views

Microsoft Internet Explorer Scripting Engine Memory Corruption (MS15-106: CVE-2015-6055)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

9.3CVSS8.1AI score0.25081EPSS
SaveExploits0
Symantec
Symantec
added 2015/10/13 12:0 a.m.42 views

Microsoft VBScript and JScript CVE-2015-6055 Multiple Remote Memory Corruption Vulnerabilities

Description Microsoft VBScript and JScript are prone to multiple remote memory-corruption vulnerabilities. Attackers can exploit these issues by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit these issues to execute arbitrary code in the context of the...

9.3CVSS0.1AI score0.25081EPSS
SaveExploits0Affected Software6
Tenable Nessus
Tenable Nessus
added 2015/10/13 12:0 a.m.41 views

MS15-108: Security Update for JScript and VBScript to Address Remote Code Execution (3089659)

The VBScript and JScript engines on the remote host are affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in the VBScript and JScript engines due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by convincin...

9.3CVSS8.6AI score0.32285EPSS
SaveExploits4References5
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.18 views

Oracle: Security Advisory (ELSA-2014-1826)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9AI score0.08272EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.24 views

Oracle: Security Advisory (ELSA-2014-1827)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS8.9AI score0.0783EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2015/09/29 12:0 a.m.29 views

Gentoo Security Advisory GLSA 201507-07

Gentoo Linux Local Security Checks GLSA 201507-07 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

7.5CVSS8.4AI score0.08272EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2015/07/08 12:0 a.m.34 views

GLSA-201507-07 : LibVNCServer: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201507-07 LibVNCServer: Multiple vulnerabilities Multiple vulnerabilities have been discovered in LibVNCServer. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to execute...

7.5CVSS8.7AI score0.08272EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2015/02/03 12:0 a.m.30 views

RHEL 6 : libvncserver (RHSA-2015:0113)

Updated libvncserver packages that fix two security issues are now available for Red Hat Enterprise Linux 6.5 Extended Update Support. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

7.5CVSS9AI score0.08272EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:0 a.m.34 views

Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_fixed_in_wireshark)

The remote Solaris system is missing necessary patches to address security updates : - Wireshark 1.8.x before 1.8.4 allows remote attackers to obtain sensitive hostname information by reading pcap-ng files. CVE-2012-6052 - epan/dissectors/packet-usb.c in the USB dissector in Wireshark 1.6.x befor...

5CVSS5.8AI score0.02947EPSS
SaveExploits7References13
Rows per page
Query Builder