Lucene search
+L

1915 matches found

BDU FSTEC
BDU FSTEC
added 2020/09/24 12:00 a.m.13 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS6.5AI score0.02067EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.12 views

The vulnerability of the Camera Codec Pack component of the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Camera Codec Pack component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS7.7AI score0.04905EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:00 a.m.13 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability could...

9.3CVSS7.9AI score0.03915EPSS
SaveExploits0References3
Adobe
Adobe
added 2020/09/15 12:00 a.m.45 views

APSB20-57 Security update available for Adobe Media Encoder

Adobe has released an update for Adobe Media Encoder. This update resolves important out-of-bounds read vulnerabilities that could lead to information disclosure in the context of the current user...

6.6AI score
SaveExploits0Affected Software1
NVD
NVD
added 2020/09/11 5:15 p.m.22 views

CVE-2020-1180

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

7.6CVSS0.02067EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/11 5:15 p.m.6 views

CVE-2020-16856

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an...

7.8CVSS7.8AI score0.04369EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/10 7:15 p.m.6 views

CVE-2020-9731

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

7.8CVSS7.5AI score0.11294EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/10 7:15 p.m.8 views

CVE-2020-9729

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

7.8CVSS7.5AI score0.02713EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/10 7:15 p.m.9 views

CVE-2020-9730

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

7.8CVSS7.5AI score0.02713EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/10 7:15 p.m.6 views

CVE-2020-9728

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

7.8CVSS6.1AI score0.02713EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/09/10 6:29 p.m.35 views

CVE-2020-9730 Out-of-bounds memory access could lead to code execution

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

7.8CVSS7.8AI score0.02713EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/09/10 12:00 a.m.51 views

Microsoft Visual Studio Remote Code Execution Vulnerability (CNVD-2021-01041)

Microsoft Visual Studio is an integrated development environment for developing computer programs, websites, web applications, web services and mobile applications. A remote code execution vulnerability exists in Microsoft Visual Studio. An attacker could exploit the vulnerability to execute...

9.3CVSS9.5AI score0.04285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/10 12:00 a.m.79 views

Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Multiple Vulnerabilities

These vulnerabilities allow remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit these vulnerabilities in that the target must visit a malicious page or open a malicious file. The specific flaws exist within the...

7CVSS6.2AI score0.04285EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/09/10 12:00 a.m.37 views

Microsoft SharePoint Authorization Issues Vulnerability

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An authorization issu...

8.9CVSS6.7AI score0.02217EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/09/09 12:00 a.m.9 views

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2020-63727)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

8.8CVSS6.9AI score0.03703EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/09/09 12:00 a.m.12 views

The vulnerability of Microsoft Excel editors arises from operations that go beyond buffer boundaries in memory, allowing attackers to execute arbitrary code in the context of the current user.

The vulnerability of Microsoft Excel editors arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using a specially created file...

10CVSS8.2AI score0.04212EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/09 12:00 a.m.11 views

The vulnerability of Microsoft Excel editors arises from operations that go beyond buffer boundaries in memory, allowing attackers to execute arbitrary code in the context of the current user.

The vulnerability of Microsoft Excel editors arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using a specially created file...

10CVSS8.2AI score0.04212EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2020/09/09 12:00 a.m.44 views

Microsoft Excel 2010 RCE and Information Disclosure Vulnerabilities (KB4486665)

This host is missing an important security update according to Microsoft KB4486665 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

8.8CVSS7.5AI score0.04352EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.5 views

PT-2020-4039 · Microsoft · Chakracore +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge ChakraCore affected versions not specified Description: A remote code execution issue exists in the way the ChakraCore scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute...

7.6CVSS6.2AI score0.02067EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.9 views

PT-2020-4154 · Microsoft · Edge +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge and Internet Explorer affected versions not specified Description: A remote code execution issue exists in the way Microsoft browsers access objects in memory, potentially allowing an attacker to execute arbitrary code in the...

7.5CVSS9.4AI score0.02696EPSS
SaveExploits0References8
Rows per page
Query Builder