Lucene search
+L

31730 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 6:22 a.m.13 views

CVE-2019-1247

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-124...

9.3CVSS8.3AI score0.18529EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:19 a.m.12 views

CVE-2019-1335

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1366...

7.6CVSS6.9AI score0.10103EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:12 a.m.10 views

CVE-2019-0898

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-089...

9.3CVSS8AI score0.2021EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:12 a.m.14 views

CVE-2013-3420

Cross-site request forgery CSRF vulnerability in the web framework on the Cisco Identity Services Engine ISE allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh25506...

6.8CVSS7.6AI score0.00576EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:55 a.m.18 views

CVE-2013-1346

mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file...

9.3CVSS8.2AI score0.11636EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:49 a.m.11 views

CVE-2013-7357

Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential information via unknown vectors...

5CVSS7AI score0.01183EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:45 a.m.14 views

CVE-2013-5538

The Sponsor Portal in Cisco Identity Services Engine ISE uses weak permissions for uploaded files, which allows remote attackers to read arbitrary files via a direct request, aka Bug ID CSCui67506...

5CVSS7.3AI score0.01186EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:44 a.m.14 views

CVE-2018-17865

A cross-site scripting XSS vulnerability in SAP J2EE Engine 7.01 allows remote attackers to inject arbitrary web script via the wsdlPath parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

6.1CVSS5.8AI score0.00746EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:17 a.m.13 views

CVE-2013-7387

Session fixation vulnerability in DataLife Engine DLE 9.7 and earlier allows remote attackers to hijack web sessions via the PHPSESSID cookie...

6.8CVSS7.1AI score0.04955EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:07 a.m.24 views

CVE-2014-8305

Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header to 1 index.php, 2 cart.php, 3 msg.php, or 4 page.php...

6.4CVSS7AI score0.04922EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:54 a.m.11 views

CVE-2019-19453

Wowza Streaming Engine before 4.8.5 allows XSS issue 1 of 2. An authenticated user, with access to the proxy license editing is able to insert a malicious payload that will be triggered in the main page of server settings. This issue was resolved in Wowza Streaming Engine 4.8.5...

5.4CVSS5.8AI score0.00806EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:48 a.m.16 views

CVE-2010-2627

Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 1.5.3153-802.0 and earlier, and Battlefield 2142 1.10.48.0 and earlier, allow remote servers to overwrite arbitrary files on the client via ".." dot dot backslash sequences in URLs for the 1...

6.8CVSS7.4AI score0.0366EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:46 a.m.11 views

CVE-2019-0900

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-089...

9.3CVSS7.9AI score0.2021EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:46 a.m.7 views

CVE-2019-0829

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0812, CVE-2019-0860, CVE-2019-0861...

7.6CVSS6.9AI score0.1866EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:45 a.m.13 views

CVE-2019-0752

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862...

7.6CVSS7.1AI score0.81551EPSS
SaveExploits8References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:36 a.m.13 views

CVE-2010-3473

Open redirect vulnerability in the Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-021 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

5.8CVSS6.9AI score0.01083EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:29 a.m.12 views

CVE-2011-4682

The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different web sites...

6.4CVSS6.8AI score0.01978EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:27 a.m.9 views

CVE-2019-1366

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1335...

7.6CVSS6.9AI score0.10103EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:25 a.m.6 views

CVE-2019-1300

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1217, CVE-2019-1237, CVE-2019-1298...

7.6CVSS6.6AI score0.08673EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:23 a.m.10 views

CVE-2019-1246

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1247, CVE-2019-124...

9.3CVSS7.9AI score0.18529EPSS
SaveExploits0References1
Rows per page
Query Builder