Lucene search
+L

2443 matches found

Veracode
Veracode
added 2018/06/28 7:02 a.m.25 views

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due to a Use-After-Free UAF vulnerability in ServerScriptContext which could lead to memory corruption and allow an attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from...

7.5CVSS8AI score0.66877EPSS
SaveExploits9References4Affected Software2
Veracode
Veracode
added 2018/06/28 6:56 a.m.23 views

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due to a type confusion with EntrySimpleObjectSlotGetter which could lead to memory corruption and allow an attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2018-0943...

7.5CVSS8AI score0.66877EPSS
SaveExploits9References5Affected Software2
Veracode
Veracode
added 2018/06/28 6:40 a.m.42 views

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due to a type confusion in boundfunction handling which could lead to memory corruption and allow an attacker in memory to execute arbitrary code in the context of the authenticated user. This CVE ID is different from...

7.5CVSS8AI score0.66554EPSS
SaveExploits9References5Affected Software2
Veracode
Veracode
added 2018/06/28 6:19 a.m.23 views

Information Disclosure

Microsoft ChakraCore is affected by an information disclosure vulnerability which discloses the contents of its memory due to a type confusion on PropertyString. This CVE ID is different from CVE-2018-0943, CVE-2018-8130, CVE-2018-8133, CVE-2018-8177...

7.5CVSS6.8AI score0.66877EPSS
SaveExploits9References4Affected Software2
Veracode
Veracode
added 2018/06/28 6:08 a.m.26 views

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due to a type confusion on PropertyString which could lead to memory corruption and allow an attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2018-0943, CVE-2018-8130...

7.5CVSS8AI score0.66877EPSS
SaveExploits9References3Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 9:18 p.m.40 views

Security Bulletin: IBM X Series hardware IMMv1, IMMv2 remote management ports as used by IBM QRadar SIEM appliances are affected by the following OpenSSL vulnerabilities: (CVE-2014-0224)

Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. Vulnerability Details CVE-ID: CVE-2014-0224 DESCRIPTION: OpenSSL is vulnerable to a man-in-the-middle attack, caused by the use of weak keying material in SSL/TLS clients an...

7.4CVSS1.6AI score0.95326EPSS
SaveExploits9Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 11:48 p.m.48 views

Security Bulletin: Open Source Apache Tomcat Vulnerabilities affect Algo One - Core

Summary Apache Tomcat could allow a remote attacker to obtain sensitive information, or allow a remote attacker to bypass security restrictions. Vulnerability Details CVE-ID: CVE-2017-5647 Description: Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by an error...

9.1CVSS0.8AI score0.1684EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:02 a.m.55 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Message Broker shipped with IBM WebSphere Remote Server (CVE-2014-3566 and CVE-ID: CVE-2014-3568)

Summary IBM WebSphere Message Broker is shipped as a component of IBM WebSphere Remote Server. Information about a security vulnerability affecting IBM WebSphere Message Broker has been published in a security bulletin. Vulnerability Details Please consult the security bulletin IBM WebSphere...

4.3CVSS6.4AI score0.99999EPSS
SaveExploits7Affected Software1
Prion
Prion
added 2018/06/14 12:29 p.m.25 views

Security feature bypass

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10. This CVE ID is uniq...

4.6CVSS5.2AI score0.02215EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2018/06/14 12:29 p.m.36 views

Security feature bypass

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10. This CVE ID is uniq...

4.6CVSS5.2AI score0.02215EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2018/06/14 12:29 p.m.28 views

Remote code execution

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8110, CVE-2018-8236...

7.6CVSS7.5AI score0.16194EPSS
SaveExploits0References3
Prion
Prion
added 2018/06/14 12:29 p.m.18 views

Information disclosure

An information disclosure vulnerability exists when Edge improperly marks files, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8234...

4.3CVSS4.3AI score0.06077EPSS
SaveExploits0References3
Circl
Circl
added 2018/05/29 3:50 p.m.9 views

CVE-2009-20011

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/contentkeeperwebmimencode.rb 2025-08-30 16:13:10+00:00| seen| https://gist.github.com/Darkcrai86/30da06045f40f1acbea2d0c9e74e41b6...

10CVSS5.7AI score0.01358EPSS
SaveExploits0References3
Circl
Circl
added 2018/05/29 3:50 p.m.14 views

CVE-2012-3261

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/hpsitescopeuploadfileshandler.rb 2025-02-06 03:13:40+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:06+00:00...

10CVSS5.5AI score0.40225EPSS
SaveExploits5References1
Circl
Circl
added 2018/05/29 3:50 p.m.12 views

CVE-2001-0800

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/irix/lpd/tagprinterexec.rb 2025-02-06 03:13:37+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:03+00:00| seen|...

10CVSS5.7AI score0.54115EPSS
SaveExploits5References1
Apple
Apple
added 2018/05/29 12:00 a.m.57 views

About the security content of iTunes 12.7.5 for Windows

About the security content of iTunes 12.7.5 for Windows This document describes the security content of iTunes 12.7.5 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patche...

8.8CVSS0.5AI score0.53337EPSS
SaveExploits29References1Affected Software1
Prion
Prion
added 2018/05/09 7:29 p.m.22 views

Remote code execution

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...

7.6CVSS7.6AI score0.66554EPSS
SaveExploits9References3Affected Software1
Prion
Prion
added 2018/05/09 7:29 p.m.24 views

Security feature bypass

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0854, CVE-2018-0958,...

4.6CVSS5.2AI score0.01513EPSS
SaveExploits0References3Affected Software2
Prion
Prion
added 2018/05/09 7:29 p.m.24 views

Remote code execution

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8147, CVE-2018-8148...

9.3CVSS7.7AI score0.25136EPSS
SaveExploits0References3Affected Software3
Prion
Prion
added 2018/05/09 7:29 p.m.25 views

Remote code execution

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Word, Word, Microsoft Office, Microsoft SharePoint. This CVE ID is unique from...

9.3CVSS7.7AI score0.25136EPSS
SaveExploits0References3Affected Software4
Rows per page
Query Builder