Lucene search
+L

4320 matches found

Microsoft CVE
Microsoft CVE
added 2019/07/09 7:00 a.m.31 views

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

6.5CVSS1.8AI score0.05635EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/07/09 7:00 a.m.33 views

DirectWrite Information Disclosure Vulnerability

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the...

5.5CVSS1.4AI score0.02056EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/07/08 12:00 a.m.7 views

The vulnerability of the Power Query editor, a spreadsheet editing tool from Microsoft Excel, allows a hacker to redirect users to a malicious URI and execute malicious code.

The vulnerability of the Power Query editor for Microsoft Excel relates to insufficient neutralization of special elements transmitted in URIs. Exploiting this vulnerability allows a malicious actor to redirect users to malicious URIs and execute malicious code using a specially crafted document...

8.8CVSS5.7AI score
SaveExploits0References3
OpenVAS
OpenVAS
added 2019/06/28 12:00 a.m.29 views

Foxit PhantomPDF < 8.3.10, 9.x < 9.5 Multiple Vulnerabilities (Jun 2019) - Windows

Foxit PhantomPDF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:phantompdf";...

7.8CVSS7AI score0.03484EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/06/26 12:00 a.m.7 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise protected information

The vulnerability of the Windows GDI component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document or web page...

5.5CVSS5.4AI score0.05009EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:00 a.m.9 views

The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.

The vulnerability of Windows GDI graphical device interfaces on Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information through a specially crafted document or web page...

6.5CVSS5.5AI score0.03919EPSS
SaveExploits0References3
NVD
NVD
added 2019/06/17 8:15 p.m.29 views

CVE-2018-19448

In Foxit Reader SDK ActiveX Professional 5.4.0.1031, an uninitialized object in IReaderContentProvider::GetDocEventHandler occurs when embedding the control into Office documents. By opening a specially crafted document, an attacker can trigger an out of bounds write condition, possibly leveragin...

7.8CVSS8.2AI score0.02597EPSS
SaveExploits1References1
OSV
OSV
added 2019/06/17 8:15 p.m.9 views

CVE-2018-19448

In Foxit Reader SDK ActiveX Professional 5.4.0.1031, an uninitialized object in IReaderContentProvider::GetDocEventHandler occurs when embedding the control into Office documents. By opening a specially crafted document, an attacker can trigger an out of bounds write condition, possibly leveragin...

7.8CVSS6.1AI score0.02597EPSS
SaveExploits1References1
Prion
Prion
added 2019/06/17 8:15 p.m.22 views

Remote code execution

In Foxit Reader SDK ActiveX Professional 5.4.0.1031, an uninitialized object in IReaderContentProvider::GetDocEventHandler occurs when embedding the control into Office documents. By opening a specially crafted document, an attacker can trigger an out of bounds write condition, possibly leveragin...

6.8CVSS8.1AI score0.02597EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2019/06/12 2:29 p.m.4 views

CVE-2019-1048

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

4.7CVSS6.5AI score0.03919EPSS
SaveExploits0References2
OSV
OSV
added 2019/06/12 2:29 p.m.4 views

CVE-2019-1047

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

4.7CVSS6.5AI score0.03919EPSS
SaveExploits0References2
OSV
OSV
added 2019/06/12 2:29 p.m.6 views

CVE-2019-1049

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

4.7CVSS6.5AI score0.03919EPSS
SaveExploits0References2
OSV
OSV
added 2019/06/12 2:29 p.m.4 views

CVE-2019-1050

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

4.7CVSS5.8AI score0.03919EPSS
SaveExploits0References2
OSV
OSV
added 2019/06/12 2:29 p.m.4 views

CVE-2019-1046

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

4.7CVSS6.8AI score0.03919EPSS
SaveExploits0References2
OSV
OSV
added 2019/06/12 2:29 p.m.5 views

CVE-2019-0988

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

7.5CVSS7.8AI score0.05738EPSS
SaveExploits0References3
OSV
OSV
added 2019/06/12 2:29 p.m.6 views

CVE-2019-1012

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

4.7CVSS6.8AI score0.03919EPSS
SaveExploits0References2
OSV
OSV
added 2019/06/12 2:29 p.m.5 views

CVE-2019-0977

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

4.7CVSS5.8AI score0.03919EPSS
SaveExploits0References2
OSV
OSV
added 2019/06/12 2:29 p.m.5 views

CVE-2019-1013

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

4.7CVSS6.5AI score0.05774EPSS
SaveExploits0References4
OSV
OSV
added 2019/06/12 2:29 p.m.7 views

CVE-2019-1010

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

4.7CVSS6.8AI score0.03919EPSS
SaveExploits0References2
OSV
OSV
added 2019/06/12 2:29 p.m.6 views

CVE-2019-1009

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

4.7CVSS6.5AI score0.43055EPSS
SaveExploits0References5
Rows per page
Query Builder