Lucene search
+L

1810 matches found

Microsoft CVE
Microsoft CVE
added 2020/05/12 7:0 a.m.36 views

Media Foundation Memory Corruption Vulnerability

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

7.8CVSS2.5AI score0.03931EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/05/12 7:0 a.m.19 views

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

6.5CVSS1.8AI score0.06257EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.22 views

The vulnerability of the GDI component in Windows operating systems, which allows a hacker to execute arbitrary code

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or...

9.3CVSS8.4AI score0.16701EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/04/16 12:0 a.m.4 views

Microsoft Windows Graphics Device Interface Information Disclosure Vulnerability (CNVD-2020-30654)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. An...

6.5CVSS6.2AI score0.05764EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:0 a.m.2 views

Foxit PDF Reader U3D Plugin's ci*** module suffers from an override read vulnerability

Foxit PDF Reader is an e-book reader. The ci module of the Foxit PDF Reader U3D plug-in has an override read vulnerability that can be exploited by an attacker to execute code in the current application context by constructing a special PDF file...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2020/04/16 12:0 a.m.31 views

Microsoft Office Input Validation Error Vulnerability (CNVD-2020-24018)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. There is a security vulnerability in Microsoft Office. The vulnerability can be exploited by an attack...

8.8CVSS6.7AI score0.0861EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/04/14 7:0 a.m.18 views

Media Foundation Memory Corruption Vulnerability

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

9.3CVSS2.5AI score0.05037EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/04/14 12:0 a.m.8 views

PT-2020-2196 · Adobe +1 · Type Manager Library +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: A remote code execution issue exists in Microsoft Windows due to the improper handling of a specially-crafted multi-master font in the Adobe Type 1 PostScript format by the Window...

7.8CVSS8.6AI score0.69166EPSS
SaveExploits0References17
Veracode
Veracode
added 2020/04/10 12:45 a.m.29 views

Remote Code Execution (RCE)

OpenOffice.org is vulnerable to Remote Code Execution RCE. A flaw was found in the way OpenOffice.org enforced a macro security setting for macros, written in the Python scripting language, that were embedded in OpenOffice.org documents. If a user were tricked into opening a specially-crafted...

9.3CVSS2.3AI score0.10511EPSS
SaveExploits0References27Affected Software1
CNVD
CNVD
added 2020/03/26 12:0 a.m.4 views

Buffer overflow vulnerability in libxml2 component of multiple Apple products (CNVD-2020-22134)

Apple iOS is an operating system for mobile devices. apple watchOS is an operating system for smartwatches. apple iPadOS is an operating system for iPad tablets. libxml2 is one of the XML document parsing libraries. A buffer overflow vulnerability exists in the libxml2 component of several Apple...

9.8CVSS7.9AI score0.02964EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.8 views

The vulnerability of the Windows Media Foundation component in Windows operating systems allows attackers to install programs, view, modify, delete data, or create new accounts with full user privileges.

The vulnerability of the Windows Media Foundation component in Windows operating systems is related to errors in processing objects in memory. Exploiting this vulnerability allows attackers to install programs, view, modify, delete data, or create new user accounts with full user rights using a...

7.8CVSS7.3AI score0.0561EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.6 views

The vulnerability of the Windows Imaging Component (WIC) framework in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows Imaging Component WIC framework in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created web page or document...

4.3CVSS6AI score0.06579EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/03/23 12:0 a.m.54 views

EulerOS 2.0 SP5 : ghostscript (EulerOS-SA-2020-1306)

According to the version of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based...

7.8CVSS6.8AI score0.01952EPSS
SaveExploits1References2
OSV
OSV
added 2020/03/19 6:15 p.m.2 views

CVE-2019-16337

The hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object in a crafted .docx file...

7.8CVSS7.1AI score0.01135EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.7 views

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created document or a...

5.5CVSS6.1AI score0.06288EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.7 views

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain full control over the system or execute arbitrary code.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain full control over the system or execute arbitrary code using a specially created documen...

6.7CVSS7.5AI score0.21983EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
added 2020/03/10 7:0 a.m.31 views

Windows Graphics Component Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

4.3CVSS1.7AI score0.04563EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/03/10 7:0 a.m.25 views

Media Foundation Memory Corruption Vulnerability

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

9.3CVSS2.5AI score0.0561EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/03/10 7:0 a.m.22 views

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

6.5CVSS1.8AI score0.06288EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/02/11 8:0 a.m.32 views

Media Foundation Memory Corruption Vulnerability

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

9.3CVSS2.5AI score0.06149EPSS
SaveExploits0
Rows per page
Query Builder