CVE-2018-0243

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured file action policy that is intended to drop the Server Message Block Version 2 SMB2 and SMB Version 3 SMB3 protocols if malware is detected. The...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2018-00529)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is an operating system for personal computers and the latter is a server operating system.Edge is one of the default browsers that comes with the system.scripting engine is one of the JavaScrip...

CVE-2018-0780

CVE-2018-0780 concerns Microsoft Edge Scripting Engine Information Disclosure in Windows 10 (various builds) where Edge’s JavaScript engine mishandles in-memory objects, enabling an attacker to obtain information and potentially progress to further compromise. The CVE is linked to Edge scripting ...

Memory corruption

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". Thi...

CVE-2017-11889

Technical details for CVE-2017-11889 are not provided in the supplied documents. Please monitor official advisories and vendor advisories for updates, patches, and exact impact guidance once publicly disclosed.

CVE-2017-11797

ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796,...

Memory corruption

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792,...

Internet Explorer JavaScript Engine Code Execution

The vulnerability in the JavaScript engine of Internet Explorer and Microsoft Edge is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code under the identity of the current user, during errors in data processing in memory using...

Chakra JavaScript Engine Code Execution

The vulnerability in the Chakra JavaScript engine of Microsoft Edge occurs due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause memory corruption...

Apple iOS and Safari WebKit Cross-Site Scripting Vulnerability

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; WebKit is an open-source web browser engine developed by KDE, Apple, Google,...

Cisco ASA DoS

The vulnerability in the SIP control engine of Cisco’s multifunctional security devices ASA allows malicious actors to remotely trigger service failures—such as excessive memory consumption or device reboots—by using specially crafted SIP packets...

chromium-browser: heap overflow in v8

objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JavaScript code...

CVE-2016-0191

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0186 and CVE-2016-0193...

CVE-2016-0193

The Chakra JavaScript engine in Microsoft Edge is susceptible to a memory corruption vulnerability, also known as the "Scripting Engine Memory Corruption Vulnerability." A remote attacker can exploit this flaw by using a specially crafted web site to achieve arbitrary code execution or trigger a ...

Google Chrome DoS

The vulnerability of the LoadIC::UpdateCaches function in the ic/ic.cc file of the Google V8 browser module allows for unauthorized actors to cause service failures or other effects by using specially crafted JavaScript code. This vulnerability arises due to the lack of compatibility checks befor...

Google Chrome Denial of Service Vulnerability (CNVD-2015-08299)

Google Chrome is a web browser developed by Google Inc. A security vulnerability exists in Google Chrome versions prior to 47.0.2526.73 and Google V8 versions prior to 4.7.80.23, which can be exploited by attackers to cause a denial of service...

UBUNTU-CVE-2015-8478

Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.73, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

Vulnerability in Oracle Fusion Middleware Oracle Access Manager Component

Oracle Fusion Middleware Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation that provides middleware, software collections, and other capabilities.Oracle Access Manager is one of the components that provides identity...

Medicomp Systems MEDCIN Engine Denial of Service Vulnerability

Medicomp Systems MEDCIN Engine is an electronic medical record system from French company Medicomp Systems. The system provides content and tools for physician and nurse documentation, clinical decision support and patient management. A security vulnerability exists in the 'AddUserFinding...