Lucene search
+L

786 matches found

CNVD
CNVD
•added 2018/02/14 12:00 a.m.•20 views

Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-03517)

Microsoft Windows is a series of operating systems released by Microsoft Corporation.Edge is one of the browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and can also be used as a stand-alone JavaScript engine. A remote memory corruption...

7.6CVSS7.6AI score0.65312EPSS
SaveExploits4References1
NVD
NVD
•added 2018/01/23 1:29 a.m.•38 views

CVE-2017-16608

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within exec.jsp. The issue results from the lack of proper validation of a...

9.8CVSS9.7AI score0.04232EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2018/01/18 12:00 a.m.•23 views

Microsoft Excel Memory Code Execution

The vulnerability of Microsoft Excel spreadsheet editors is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

9.3CVSS6AI score0.09494EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
•added 2018/01/09 12:00 a.m.•15 views

VulnCheck KEV: CVE-2018-0802

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797...

9.3CVSS8.2AI score0.93289EPSS
SaveIn wildExploits7References58
CNVD
CNVD
•added 2017/12/27 12:00 a.m.•21 views

NetGain Systems Enterprise Manager Remote Code Execution Vulnerability (CNVD-2018-01638)

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Enterprise Manager suffers from a remote code execution vulnerability in its implementation, which can be exploited by an attacker to execute arbitrary code in the current user context...

9.8CVSS8.5AI score0.04232EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/12/27 12:00 a.m.•16 views

NetGain Systems Enterprise Manager Remote Code Execution Vulnerability

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Enterprise Manager suffers from a remote code execution vulnerability in its implementation, which can be exploited by an attacker to execute arbitrary code in the current user context...

9.8CVSS8.5AI score0.04849EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/12/13 12:00 a.m.•8 views

Microsoft Windows Internet Explorer and Microsoft ChakraCore Remote Code Execution Vulnerability

Microsoft Windows is an operating system released by Microsoft Corporation.Internet Explorer IE is a web browser that comes with the Windows operating system.ChakraCore is the core of an open-source JavaScript engine used in IE, and can also be used as a stand-alone JavaScript engine. ChakraCore ...

7.6CVSS8.2AI score0.08643EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2017/12/12 9:29 p.m.•15 views

CVE-2017-11886

Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handle...

7.6CVSS6.1AI score0.68491EPSS
SaveExploits36References4
CNVD
CNVD
•added 2017/11/16 12:00 a.m.•11 views

Microsoft Internet Explorer/Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-34715)

Internet Explorer is a web browser from Microsoft.Microsoft Edge is the web browser built into Windows 10 versions. Microsoft Edge/Microsoft Internet Explorer suffers from a memory corruption-wide vulnerability in the scripting engine implementation due to incorrect memory manipulation. An...

7.6CVSS7.3AI score0.08474EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/11/16 12:00 a.m.•11 views

Microsoft Internet Explorer/Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-34720)

Internet Explorer is a web browser from Microsoft.Microsoft Edge is the web browser built into Windows 10 versions. A memory corruption vulnerability exists in the scripting engine implementation of Microsoft Edge/Microsoft Internet Explorer, which can be exploited by an unauthenticated, remote...

7.5CVSS7.5AI score0.07701EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/11/15 12:00 a.m.•13 views

Multiple Adobe products cross-border write vulnerabilities

dobe Acrobat DC, etc. are the United States of America Odo than Adobe company's products. Acrobat DC is a desktop version of the PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous is Acrobat DC and Acrobat Reader DC product download...

9.3CVSS7.8AI score0.11212EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/11/15 12:00 a.m.•20 views

Memory Misreference Vulnerability in Multiple Adobe Products (CNVD-2017-35587)

Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center provides...

9.8CVSS7.8AI score0.0918EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/11/15 12:00 a.m.•19 views

Multiple Adobe Products Securely Bypass Arbitrary Code Execution Vulnerability

Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center provides...

9.3CVSS8.2AI score0.06789EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/11/15 12:00 a.m.•18 views

Adobe Acrobat and Reader Buffer Access Vulnerability (CNVD-2017-35600)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acroba and Reader security vulnerabilities exist. Remote attackers can use the...

9.3CVSS7.4AI score0.12847EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/11/15 12:00 a.m.•18 views

Adobe Acroba and Reader Buffer Access Vulnerabilities

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acroba and Reader security vulnerabilities exist. Remote attackers can use the...

9.3CVSS7.4AI score0.12847EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2017/11/10 12:00 a.m.•21 views

ChakraCore Microsoft Edge RCE

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

7.6CVSS7.7AI score0.68027EPSS
SaveExploits4References6Affected Software1
CNVD
CNVD
•added 2017/11/01 12:00 a.m.•18 views

MIT krb5 Remote Buffer Overflow Vulnerability

Kerberos is a widely used, super-strong encryption to authenticate client-side and server-side network protocols. MIT krb5 suffers from a remote buffer overflow vulnerability in its implementation, which can be exploited by an attacker to execute arbitrary code in the current user context...

9.8CVSS8AI score0.08302EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2017/10/26 12:00 a.m.•19 views

Microsoft Edge Memory Code Execution

The vulnerability of Microsoft Edge relates to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user...

7.6CVSS7.8AI score0.08643EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2017/10/25 12:00 a.m.•18 views

Microsoft Edge Memory Execution Code

The vulnerability of Microsoft Edge relates to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using specially crafted content...

7.6CVSS7.7AI score0.51553EPSS
SaveExploits2References6
BDU FSTEC
BDU FSTEC
•added 2017/10/25 12:00 a.m.•19 views

Windows Shell Code Execution

The vulnerability of the Windows Shell component of the Windows operating system exists due to insufficient checking of file copy addresses. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using specially...

7.6CVSS7.8AI score0.21296EPSS
SaveExploits0References4
Rows per page
Query Builder