84 matches found
Remote Code Execution (RCE)
Microsoft Chakracore is vulnerable to remote code execution. It is possible due to a flaw in GetEnvironmentOperand in IRBuilder.cpp This CVE ID is different from CVE-2018-8541, CVE-2018-8542, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557, CVE-2018-8588...
CVE-2018-8551
creationtimestamp| type| source ---|---|--- 2018-11-14 17:39:00+00:00| seen| MISP/5bec5b59-b2b0-4506-9c63-32a40a021402...
CVE-2018-8551
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...
Remote code execution
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...
Remote code execution
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...
CVE-2018-8551
CVE-2018-8551 is a remote code execution vulnerability in the Chakra scripting engine due to memory handling in ChakraCore/Edge. The issue affects Microsoft Edge and ChakraCore; exploitation requires network access with user interaction. The CVSS data from the entry indicates high impact to confi...
Microsoft Patch Tuesday — November 2018: Vulnerability disclosures and Snort coverage
Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 53 vulnerabilities, 11 of which are rated "critical," 40 that are rated "important” and one “moderate” and “low” vulnerability, each. The...
Microsoft Project Server 2013 XSS Vulnerability (KB3203399)
This host is missing an important security update according to Microsoft KB3203399 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2017-8551
An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint XSS vulnerability"...
CVE-2017-8551
CVE-2017-8551 is a Microsoft SharePoint Server elevation-of-privilege vulnerability caused by improper sanitization of crafted web requests, enabling potential cross-site scripting and actions on behalf of a user. Affected products include SharePoint Server (and SharePoint-related components) wit...
KLA11053 XSS vulnerabilities in Microsoft Sharepoint
Multiple serious vulnerabilities have been found in Microsoft Sharepoint. Malicious users can exploit these vulnerabilities to obtain sensitive information and gain privileges. Below is a complete list of vulnerabilities: 1. An improper sanitizing of user web requests can be exploited remotely vi...
CVE-2016-8551
CVE-2016-8551 is rejected; this entry does not represent an active vulnerability.
SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:2105-1)
The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.62 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2014-9904: The sndcompresscheckinput function in sound/core/compressoffload.c in the ALSA subsystem in the Linux kernel did not properly check fo...
openSUSE: Security Advisory for kernel (openSUSE-SU-2016:2184-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : the Linux Kernel (openSUSE-2016-1029)
The openSUSE 13.1 kernel was updated to 3.12.62 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2014-9904: The sndcompresscheckinput function in sound/core/compressoffload.c in the ALSA subsystem in the Linux kernel did not properly check for an integer...
SUSE-SU-2016:1707-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 Realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-1339: Memory leak in the cusechannelrelease function in fs/fuse/cuse.c in the Linux kernel allowed local users to cause a denial of service...
openSUSE Security Update : the Linux Kernel (openSUSE-2016-518)
The openSUSE 13.1 kernel was updated to 3.12.57 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2015-8785: The fusefillwritepages function in fs/fuse/file.c in the Linux kernel allowed local users to cause a denial of service infinite loop via a writev...
CVE-2015-8551
CVE-2015-8551 affects the Xen PCI backend driver (pciback) when Xen runs on x86 with a Linux 3.1.x–4.3.x driver domain. The issue arises from missing sanity checks in XEN_PCI_OP_* operations, allowing a local guest administrator with access to a passed-through MSI/MSI-X PCI device to trigger BUG ...
SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:0585-1)
The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.53 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2013-7446: Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel allowed local users to bypass intended AFUNIX socket permissions...