Lucene search
+L

1901 matches found

CNVD
CNVD
added 2020/04/16 12:00 a.m.10 views

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2020-24131)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel that stems from the program's failure to properly handle memory objects and can be exploited by an attacker to run arbitrary code in the...

9.3CVSS8.2AI score0.11261EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:00 a.m.7 views

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-24136)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

5.4CVSS5.9AI score0.01828EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:00 a.m.15 views

Microsoft SharePoint Spoofing Vulnerability (CNVD-2020-23442)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

5.4CVSS5.9AI score0.01626EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:00 a.m.10 views

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-24059)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

5.4CVSS6AI score0.01522EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:00 a.m.39 views

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2020-23445)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A security vulnerability exists in the way memory objects are handled in the scripting engine of Microsoft IE versions 11 and 9. An attacker could exploit the...

7.6CVSS6.8AI score0.30018EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:00 a.m.18 views

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-24057)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

5.4CVSS6AI score0.01515EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:00 a.m.7 views

Microsoft SharePoint Spoofing Vulnerability (CNVD-2020-23443)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

5.4CVSS5.9AI score0.01626EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:00 a.m.14 views

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2020-28238)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS7.8AI score0.13303EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:00 a.m.6 views

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-24068)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

5.4CVSS5.9AI score0.01515EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:00 a.m.5 views

Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-24069)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which arises from the program's failure to properly handle memory objects, and can be exploited by an attacker with the help of...

9.3CVSS7.9AI score0.11548EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/04/15 12:00 a.m.22 views

Microsoft Office 2010 Remote Code Execution Vulnerability (KB3203462)

This host is missing an important security update according to Microsoft KB3203462 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

8.8CVSS8.2AI score0.0861EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/04/15 12:00 a.m.45 views

Microsoft Publisher 2016 Remote Code Execution Vulnerability (KB4011097)

This host is missing an important security update according to Microsoft KB4011097 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

8.8CVSS8.2AI score0.0861EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/04/15 12:00 a.m.45 views

Security Updates for Microsoft Office Web Apps (April 2020)

The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability...

9.3CVSS8.2AI score0.11548EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/03/12 12:00 a.m.17 views

Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-18523)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word. An attacker could exploit the vulnerability to perform an action in the context of the current user...

8.8CVSS7.8AI score0.08821EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/12 12:00 a.m.38 views

Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-19916)

Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. A security vulnerability exists in Microsoft Word that stems from the program's inability to properly handle memory objects. The vulnerability can be exploited by an attacker with a specially...

9.3CVSS6.7AI score0.11829EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/12 12:00 a.m.13 views

Microsoft Word and Microsoft Outlook Buffer Overflow Vulnerability

Microsoft Word and Microsoft Outlook are both products of Microsoft Corporation.Microsoft Word is a set of word processing software in the Office suite.Microsoft Outlook is a set of e-mail applications. Microsoft Word and Microsoft Outlook have security vulnerabilities. An attacker could exploit...

9.3CVSS6.9AI score0.11964EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/11 12:00 a.m.9 views

Microsoft Azure DevOps Server Cross-Site Scripting Vulnerability (CNVD-2020-19008)

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. A cross-site scripting vulnerability exists in Azure DevOps Server that stems from the...

5.4CVSS6.1AI score0.01328EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/11 12:00 a.m.11 views

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2020-20365)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS7.8AI score0.08854EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/11 12:00 a.m.13 views

Microsoft Internet Explorer VBScript Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A remote code execution vulnerability exists in the way the VBScript Engine handles memory objects in Microsof...

7.6CVSS7.9AI score0.07937EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/11 12:00 a.m.6 views

Microsoft Edge Memory Corruption Vulnerability (CNVD-2020-16694)

Edge is Microsoft's browser for Windows 10, characterized as fast and secure. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from Microsoft Edge failing to properly access objects in memory. An attacker can exploit the vulnerability to execute arbitrary code i...

9.3CVSS7.7AI score0.10661EPSS
SaveExploits0References1
Rows per page
Query Builder