51 matches found
Microsoft Edge Memory Corruption (CVE-2018-8110)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge CVE-2018-8110 Remote Memory Corruption Vulnerability
Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Edge Recommendations...
Apache ActiveMQ < 5.10.1 Multiple Security Vulnerabilities - Windows
Apache ActiveMQ is prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:activemq";...
Apache ActiveMQ < 5.10.1 Multiple Security Vulnerabilities - Linux
Apache ActiveMQ is prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:activemq";...
CVE-2017-8110
www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php...
CVE-2017-8110
CVE-2017-8110 affects www.modified-shop.org’s eCommerce Shopsoftware 2.0.2.2 rev 10690, with an XML External Entity (XXE) vulnerability in api/it-recht-kanzlei/api-it-recht-kanzlei.php. The CNVD entry notes risk of reading arbitrary files or DoS via XXE; other sources corroborate the same vulnera...
CVE-2015-8110
Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by navigating to 1 "Click here to learn more" or 2 "View privacy policy" within the Tvsukernel.exe GUI application in the context of a temporary administrator account, aka a "local...
CVE-2015-8110
Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 contains a local privilege escalation in the Tvsukernel.exe GUI. In the context of a temporary administrator account, users can exploit navigation paths like “Click here to learn more” or “View privacy policy” to gain Adm...
Lenovo System Update found two mention of the right to exploit the principle of analysis-vulnerability warning-the black bar safety net
Lenovo released the latest System Update announcement in two mention the right vulnerability is me in a few weeks to submitCVE-2 0 1 5-8 1 0 9, CVE-2 0 1 5-8 1 1 0IOActive as well as Lenovo in this report issued a warning! Details of the bedding In the detoxification of the details before we star...
CVE-2014-8110
Multiple cross-site scripting XSS vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-8110
Apache ActiveMQ (5.x) prior to 5.10.1 is affected by cross-site scripting in the web-based admin console (CVE-2014-8110). Attacks could inject script/HTML via unspecified vectors and, per related IBM advisories, could lead to credential theft via cookies. Remote exploitation is possible if expose...