38 matches found
CVE-2024-8556
CVE-2024-8556 affects modelscope/agentscope with a stored XSS in the run-details view where a user-controllable run ID is appended and rendered as HTML, enabling arbitrary JavaScript in the victim’s browser. The issue is tied to dashboard.js rendering logic; PoC in Snyk shows a crafted run_id, co...
RHEL 8 : thunderbird (RHSA-2022:8556)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:8556 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.5.0. Security Fixes: Mozilla:...
CVE-2019-8556
CVE-2019-8556 is a use-after-free vulnerability in WebKit related to processing malicious web content. It could lead to arbitrary code execution. Affected products/versions include iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud for Windows 7.11. The issue is fixed in thos...
KLA11456 Multiple vulnerabilities in Apple iCloud
Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, obtain sensitive information, bypass security restrictions and gain privileges. Below is a complete list of vulnerabilities: 1. A...
Remote Code Execution (RCE)
Microsoft Chakracore is vulnerable to remote code execution. It is possible due to a flaw in GetEnvironmentOperand in IRBuilder.cpp This CVE ID is different from CVE-2018-8541, CVE-2018-8542, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557, CVE-2018-8588...
CVE-2018-8556
creationtimestamp| type| source ---|---|--- 2018-11-14 17:39:00+00:00| seen| MISP/5bec5b59-b2b0-4506-9c63-32a40a021402...
Remote code execution
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...
Remote code execution
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...
CVE-2018-8556
CVE-2018-8556 is tied to a remote code execution flaw in the Chakra scripting engine’s handling of in-memory objects, affecting Microsoft Edge and ChakraCore. The root cause is memory corruption inside Chakra, leading to arbitrary code execution under remote conditions. The linked advisories (GHS...
Microsoft Patch Tuesday — November 2018: Vulnerability disclosures and Snort coverage
Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 53 vulnerabilities, 11 of which are rated "critical," 40 that are rated "important” and one “moderate” and “low” vulnerability, each. The...
Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4025343)
This host is missing a critical security update according to Microsoft KB4025343 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-8556
CVE-2017-8556 affects Microsoft Windows Graphics Component. The vulnerability arises from how Graphics handles objects in memory, enabling a local attacker to elevate privileges by executing arbitrary code in kernel mode. CNVD entries corroborate kernel-mode code execution via Graphics memory han...
Microsoft Windows Graphics Component CVE-2017-8556 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
CVE-2015-8556
CVE-2015-8556: Local privilege escalation in Gentoo QEMU package before 2.5.0-r1. The issue affects QEMU components used by Gentoo; exploitation could grant root on the host from a local attacker. Remediation per GLSA 2016-02-01 is to upgrade QEMU to >=2.5.0-r1. Public references include Packe...
CVE-2015-8556
Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1...
