37 matches found
CVE-2020-8496
CVE-2020-8496 affects Kronos Web Time and Attendance (webTA). A Stored XSS vulnerability exists in the /ApplicationBanner page triggered by the Application Banner input when the user is an authenticated administrator. The issue affects webTA 4.1.x and later 4.x versions up to, but not including, ...
Microsoft Edge CssParser::RecordProperty Type Confusion Exploit
Exploit for windows platform in category dos / poc Microsoft Edge: Type confusion in CssParser::RecordProperty CVE-2017-8496 There is a type confusion vulnerability in Microsoft Edge. The vulnerability has been confirmed on Windows 10 Enterprise 64-bit OS version 1607, OS build 14393.1198 and...
Microsoft Edge CssParser::RecordProperty Type Confusion
Microsoft Edge: Type confusion in CssParser::RecordProperty CVE-2017-8496 There is a type confusion vulnerability in Microsoft Edge. The vulnerability has been confirmed on Windows 10 Enterprise 64-bit OS version 1607, OS build 14393.1198 and Microsoft Edge 38.14393.1066.0, Microsoft EdgeHTML...
CVE-2017-8496
creationtimestamp| type| source ---|---|--- 2017-06-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42246...
CVE-2017-8496
Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8497...
Memory corruption
Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8496...
CVE-2017-8496
Microsoft Edge in Windows 10 1607 and Windows Server 2016 is affected by CVE-2017-8496/8497, a remote memory corruption vulnerability caused by improper handling of memory objects in Edge. Exploitation could allow arbitrary code execution in the context of the current user, potentially with the u...
CVE-2017-8496
Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8497...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8496)
A type confusion vulnerability exists in Microsoft Edge. The vulnerability is due to a CAttribute object being confused for a CAttrArray object by the PrivateFindInl method. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...
CVE-2016-8496
Affected product : Fortinet FortiClient SSL_VPN for Linux. Vulnerability : On first launch, the Linux client creates a log file without safeguards. Attackers can abuse symbolic or hard links to the log file to cause arbitrary file overwrites in the filesystem because the client appends log conten...
CVE-2015-8496
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2014-8486
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-8496. Reason: This candidate is a duplicate of CVE-2014-8496. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2014-8496 instead of this candidate. All references and descriptions in this...
CVE-2014-8486
The active entry is CVE-2014-8496: Digicom DG-5514T ADSL router with firmware 3.2 generates predictable session IDs, enabling remote attackers to gain administrator privileges via a brute-force session hijacking attack. This CVE is the valid reference; CVE-2014-8486 is a duplicate/rejected entry ...
CVE-2014-8496
This CVE affects Digicom DG-5514T ADSL router with firmware 3.2, where predictable session IDs enable remote attackers to gain administrator privileges via a brute-force session hijacking attack. The connected documents confirm the vulnerability and impact but do not provide any remediation or pa...
SuSE 11.2 Security Update : openvpn (SAT Patch Number 8496)
OpenVPN used a non-constant-time memcmp in HMAC comparison in openvpndecrypt that might have allowed remote attackers to gain knowledge of plaintext data. CVE-2013-2061 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...