Lucene search
+L

1863 matches found

CNVD
CNVD
added 2019/03/13 12:0 a.m.6 views

Microsoft Edge Remote Code Execution Vulnerability (CNVD-2019-16747)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A remote code execution vulnerability exists in Microsoft Edge, which can be exploited by a remote attacker to execute arbitrary code in the context of the current user, resulting in memo...

7.6CVSS8.2AI score0.08096EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/03/13 12:0 a.m.4 views

Microsoft ChakraCore and Edge Remote Memory Corruption Vulnerability

Microsoft Edge is a web browser developed by Microsoft.ChakraCore is the core of the open source Chakra JavaScript scripting engine, which can also be used as a standalone JavaScript engine. A remote memory corruption vulnerability exists in Microsoft ChakraCore and Edge. A remote attacker can...

7.6CVSS7.3AI score0.09215EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/03/13 12:0 a.m.7 views

Microsoft ChakraCore and Microsoft Edge Remote Code Execution Vulnerabilities

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS7.9AI score0.10344EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2019/03/12 7:0 a.m.32 views

Windows ActiveX Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the ActiveX Data objects ADO handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

7.6CVSS8.2AI score0.08261EPSS
SaveExploits0
OSV
OSV
added 2019/03/05 11:29 p.m.5 views

CVE-2019-0613

A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visu...

8.8CVSS8AI score0.15421EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2019/03/05 12:0 a.m.49 views

Unity com.unity3d.kharma Protocol Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Unity Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handler for the...

8.8CVSS3AI score0.03744EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:0 a.m.7 views

Vulnerability of the .NET Framework software platform, related to errors in the mechanism for checking the source file metadata, allows a perpetrator to execute arbitrary code with privileges of the current user.

The vulnerability of the .NET Framework software platform is related to errors in the mechanism for checking the source code of files. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with privileges of the current user, using a specially craft...

7.8CVSS8.2AI score0.15421EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:0 a.m.10 views

The vulnerability of the ChakraCore component in the Microsoft Edge browser allows a hacker to execute arbitrary code with the privileges of the current user.

The vulnerability of Microsoft Edge’s ChakraCore component is related to errors in memory object handling mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with the privileges of the current user, through a specially crafted web page...

4.2CVSS7.7AI score0.12248EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:0 a.m.9 views

The vulnerability of the Internet Explorer browser, related to errors in memory object handling mechanisms, allows attackers to execute arbitrary code with privileges of the current user.

The vulnerability of the Internet Explorer browser is related to errors in the memory object handling mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with privileges of the current user, through a specially crafted web page...

7.6CVSS7.9AI score0.11107EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2019/02/28 12:0 a.m.18 views

(0Day) Microsoft Visual Studio settings XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

2.5CVSS1.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:0 a.m.11 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a...

4.2CVSS7.9AI score0.11107EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:0 a.m.10 views

The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

5.8CVSS7.9AI score0.09906EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2019/02/14 12:0 a.m.44 views

Adobe Acrobat DC (Classic Track) Security Updates (APSB19-07) - Mac OS X

Adobe Acrobat DC Classic Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS9.1AI score0.44503EPSS
SaveExploits5References1
CNVD
CNVD
added 2019/02/14 12:0 a.m.5 views

Microsoft Edge Buffer Overflow Vulnerability (CNVD-2019-27388)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A buffer overflow vulnerability exists in Microsoft Edge and ChakraCore. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current user, causing...

7.6CVSS7.8AI score0.11107EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/02/14 12:0 a.m.5 views

Microsoft Edge Buffer Overflow Vulnerability (CNVD-2019-27391)

Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge that stems from a program not properly accessing objects in memory. An attacker can exploit the vulnerability to...

7.6CVSS7.8AI score0.09906EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/02/14 12:0 a.m.6 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27386)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS7.5AI score0.12248EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/02/14 12:0 a.m.6 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27389)

Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge and ChakraCore. An attacker can exploit this vulnerability to execute arbitrary code in the context of the curre...

7.6CVSS7.8AI score0.11107EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/02/14 12:0 a.m.5 views

Microsoft Edge Buffer Overflow Vulnerability

Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge that stems from a program not properly accessing objects in memory. An attacker can exploit the vulnerability to...

7.6CVSS7.8AI score0.09906EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/02/13 12:0 a.m.55 views

Adobe Flash Player Security Update (APSB19-06) - Windows

Adobe Flash Player is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.5CVSS6.5AI score0.04795EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:0 a.m.20 views

LAquis SCADA LGX Report File Write Arbitrary File Creation Vulnerability

This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS1.6AI score0.02572EPSS
SaveExploits0References1
Rows per page
Query Builder