57 matches found
CVE-2020-7202
creationtimestamp| type| source ---|---|--- 2021-01-05 19:25:19+00:00| seen| https://t.me/cibsecurity/21573...
CVE-2020-7202
CVE-2020-7202 affects HP Integrated Lights-Out 4/5 (iLO 4/5) firmware. The connected Nessus plugin and Red Hat/NVD notes describe a remote information-disclosure vulnerability that could disclose the device serial number and other data. The available documents do not provide technical root-cause ...
Dell Latitude 7202 Rugged Tablet BIOS Resource Management Error Vulnerability
Dell Latitude 7202 Rugged Tablet BIOS is a basic input/output system BIOS for the Dell Latitude 7202 Tablet PC from Dell USA. A resource management error vulnerability exists in EFIBOOTSERVICES in System Management mode in Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28. An attacker...
CVE-2020-5348
Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28 contain a UAF vulnerability in EFIBOOTSERVICES in system management mode. A local unauthenticated attacker may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in system management mode...
CVE-2020-5348
Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28 contain a UAF vulnerability in EFIBOOTSERVICES in system management mode. A local unauthenticated attacker may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in system management mode...
Code injection
Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28 contain a UAF vulnerability in EFIBOOTSERVICES in system management mode. A local unauthenticated attacker may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in system management mode...
CVE-2020-5348
CVE-2020-5348 affects Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28. The vulnerability is a use-after-free in EFI_BOOT_SERVICES when operating in System Management Mode, enabling a local unauthenticated attacker to overwrite EFI_BOOT_SERVICES and execute arbitrary code in SMM. Suppo...
CVE-2020-5348
Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28 contain a UAF vulnerability in EFIBOOTSERVICES in system management mode. A local unauthenticated attacker may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in system management mode...
CVE-2018-7202
creationtimestamp| type| source ---|---|--- 2019-05-22 18:48:12+00:00| seen| https://t.me/cvemitreorg/135 2019-05-22 23:14:05+00:00| seen| https://t.me/cibsecurity/4449...
CVE-2018-7202
CVE-2018-7202 affects ProjectSend prior to r1053, where an XSS flaw exists in the Name field on the My Account page. Root cause: insufficient input validation/escaping in that field, enabling injection of client-side scripts. Impact is cross-site scripting affecting users handling their My Accoun...
CVE-2013-7202
The CVE-2013-7202 entry describes a vulnerability in PayPal’s Android app, affecting the WebHybridClient class in PayPal 5.3 and earlier. The issue allows remote attackers to execute arbitrary JavaScript on the target system. The connected documents confirm the affected component (WebHybridClient...
CVE-2017-7202
SLiMS 7 Cendana before 2017-03-16 contains XSS in two detail templates due to insufficient filtration of user-supplied id. Specifically, the vulnerability involves slims7_cendana-master/template/default/detail_template.php and slims7_cendana-master/template/default-rtl/detail_template.php, enabli...
Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7202)
A buffer overrun vulnerability exists in Microsoft Edge and Microsoft Internet Explorer. The vulnerability is due to the way JavaScript engine handles objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web...
Microsoft Edge Scripting Engine - Memory Corruption (MS16-129) Exploit
Exploit for windows platform in category dos / poc !-- Source: http://www.security-assessment.com/files/documents/advisory/edgechakramemcorruption.pdf Name: Microsoft Edge Scripting Engine Memory Corruption Vulnerability MS16-129 CVE: CVE-2016-7202 Vendor Website: http://www.microsoft.com/ Date...
CVE-2016-7202
creationtimestamp| type| source ---|---|--- 2016-11-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40786 2016-11-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40793 2023-12-04 04:22:24+00:00| seen| https://t.me/arpsyndicate/1112 2025-02-06 02:42:30+00:00|...
CVE-2016-7202
CVE-2016-7202 refers to a memory corruption vulnerability in the Chakra JavaScript scripting engine used by Microsoft Edge/IE (the “Scripting Engine Memory Corruption Vulnerability”). The connected advisories describe RCE/DoS opportunities via crafted web content, with ChakraCore as the adversari...
CVE-2016-7202
The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra...
Fedora 22 : firefox-43.0-1.fc22 (2015-7ab3d3afcf)
Update to latest upstream - Firefox 43 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
Fedora 23 : firefox-43.0-1.fc23 (2015-51b1105902)
Update to latest upstream - Firefox 43 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...