Lucene search
K

1233 matches found

Prion
Prion
added 2018/10/10 1:29 p.m.14 views

Information disclosure

An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft Windows Codecs Library Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019...

1.9CVSS5.5AI score0.18744EPSS
Exploits0References3Affected Software2
ATTACKERKB
ATTACKERKB
added 2018/10/10 1:29 p.m.4 views

CVE-2018-8506

An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft Windows Codecs Library Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019...

5.5CVSS5.5AI score0.18744EPSS
Exploits0References4
Cvelist
Cvelist
added 2018/10/10 1:0 p.m.21 views

CVE-2018-8506

An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft Windows Codecs Library Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019...

6.1AI score0.18744EPSS
Exploits0References3
CVE
CVE
added 2018/10/10 1:0 p.m.111 views

CVE-2018-8506

The CVE-2018-8506 entry affects Microsoft Windows Codecs Library. Root cause: improper handling of objects in memory, leading to information disclosure. An attacker could exploit this by persuading a user to open a specially crafted image file, potentially exposing sensitive information. The vuln...

5.5CVSS6AI score0.18744EPSS
Exploits0References3Affected Software3
OpenVAS
OpenVAS
added 2018/10/10 12:0 a.m.50 views

Microsoft Windows Multiple Vulnerabilities (KB4462919)

This host is missing a critical security update according to Microsoft KB4462919 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.8AI score0.81325EPSS
Exploits17References3
CNVD
CNVD
added 2018/10/10 12:0 a.m.3 views

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An information disclosure vulnerability exists in the Microsoft Windows Codecs Library. An attacker could exploit this vulnerability to obtain sensitive information...

5.5CVSS6.2AI score0.18744EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2018/10/09 7:0 a.m.27 views

Microsoft Windows Codecs Library Information Disclosure Vulnerability

An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. Exploitation of the vulnerability requires that a...

5.5CVSS1.6AI score0.18744EPSS
Exploits0
Kaspersky
Kaspersky
added 2018/10/09 12:0 a.m.645 views

KLA11333 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerabili...

9.3CVSS8.9AI score0.81325EPSS
Exploits17References43
Tenable Nessus
Tenable Nessus
added 2018/10/09 12:0 a.m.143 views

KB4464330: Windows 10 Version 1809 and Windows Server 2019 October 2018 Security Update

The remote Windows host is missing security update 4464330. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker...

9.3CVSS8.2AI score0.81325EPSS
Exploits16References28
Symantec
Symantec
added 2018/10/09 12:0 a.m.198 views

Microsoft Windows Codecs Library CVE-2018-8506 Information Disclosure Vulnerability

Description Microsoft Windows Codecs Library is prone to a information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1803 for 32-bit Systems Microsoft Windows...

0.3AI score0.18744EPSS
Exploits0Affected Software2
Kitploit
Kitploit
added 2018/08/23 12:51 p.m.25 views

Mallet - A Framework For Creating Proxies

Mallet is a tool for creating proxies for arbitrary protocols, along similar lines to the familiar intercepting web proxies, just more generic. It is built upon the Netty framework, and relies heavily on the Netty pipeline concept, which allows the graphical assembly of graphs of handlers. In the...

7.2AI score
Exploits0References2
n0where
n0where
added 2018/08/19 1:23 a.m.14 views

A framework for creating proxies: Mallet

Mallet is a tool for creating proxies for arbitrary protocols, along similar lines to the familiar intercepting web proxies, just more generic. It is built upon the Netty framework, and relies heavily on the Netty pipeline concept, which allows the graphical assembly of graphs of handlers. In the...

0.9AI score
Exploits0References1
CVE
CVE
added 2018/07/24 4:0 p.m.44 views

CVE-2018-14589

Bento4 1.5.1-624 contains a heap-based buffer over-read in AP4_Mp4AudioDsiParser::ReadBits (Codecs/Ap4Mp4AudioInfo.cpp). The issue is confirmed across multiple sources (NVD/CVE-2018-14589, CNVD/UBUNTU, osv, etc.), but the connected documents do not provide an approved remediation or patch details...

8.8CVSS8.7AI score0.00407EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2018/07/24 4:0 p.m.8 views

CVE-2018-14589

An issue has been discovered in Bento4 1.5.1-624. AP4Mp4AudioDsiParser::ReadBits in Codecs/Ap4Mp4AudioInfo.cpp has a heap-based buffer over-read...

8.8AI score0.00407EPSS
Exploits1References1
CNVD
CNVD
added 2018/03/06 12:0 a.m.1 views

OpenCV Denial of Service Vulnerability (CNVD-2018-04995)

OpenCV is an open source, cross-platform, lightweight computer vision library. A security vulnerability exists in the 'validateInputImageSize' function in the modules/imgcodecs/src/loadsave.cpp file in OpenCV version 3.4.1. A remote attacker can exploit this vulnerability to cause a denial of...

7.5CVSS6.8AI score0.00409EPSS
Exploits0References1
CNVD
CNVD
added 2018/03/06 12:0 a.m.3 views

OpenCV Denial of Service Vulnerability (CNVD-2018-04997)

OpenCV is an open source, cross-platform, lightweight computer vision library. A security vulnerability exists in the 'validateInputImageSize' function in the modules/imgcodecs/src/loadsave.cpp file in OpenCV version 3.4.1. A remote attacker can exploit this vulnerability to cause a denial of...

7.5CVSS6.8AI score0.00409EPSS
Exploits0References1
NVD
NVD
added 2018/02/22 12:29 a.m.20 views

CVE-2018-7285

A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1. The RTP support in Asterisk maintains its own registry of dynamic codecs and desired payload numbers. While an SDP negotiation may result in a codec using a different payload number, these desired ones are still stored...

7.5CVSS7.5AI score0.00536EPSS
Exploits0References3
Prion
Prion
added 2018/02/22 12:29 a.m.14 views

Null pointer dereference

A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1. The RTP support in Asterisk maintains its own registry of dynamic codecs and desired payload numbers. While an SDP negotiation may result in a codec using a different payload number, these desired ones are still stored...

5CVSS7.5AI score0.00536EPSS
Exploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2018/02/22 12:29 a.m.20 views

CVE-2018-7285

A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1. The RTP support in Asterisk maintains its own registry of dynamic codecs and desired payload numbers. While an SDP negotiation may result in a codec using a different payload number, these desired ones are still stored...

7.5CVSS7AI score0.00536EPSS
Exploits0References2
Cvelist
Cvelist
added 2018/02/22 12:0 a.m.28 views

CVE-2018-7285

A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1. The RTP support in Asterisk maintains its own registry of dynamic codecs and desired payload numbers. While an SDP negotiation may result in a codec using a different payload number, these desired ones are still stored...

7.5AI score0.00536EPSS
Exploits0References3
Rows per page
Query Builder