Lucene search
K

2012 matches found

CNVD
CNVD
added 2015/06/10 12:0 a.m.0 views

Adobe Flash Player Integer Overflow Arbitrary Code Execution Vulnerability

Adobe Flash Player is a Flash file handling program. An integer overflow vulnerability exists in Adobe Flash Player, which allows remote attackers to construct malicious SWF content and trick users into parsing it, which could execute arbitrary code...

10CVSS7.6AI score0.04479EPSS
Exploits1References1
CNVD
CNVD
added 2015/06/10 12:0 a.m.1 views

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-03742)

Microsoft Internet Explorer is a popular WEB browser. An unspecified memory corruption vulnerability exists in Microsoft Internet Explorer that could allow a remote attacker to construct a malicious web page and trick the user into parsing it, which could crash the application or execute arbitrar...

9.3CVSS7.5AI score0.24067EPSS
Exploits0References1
CNVD
CNVD
added 2015/06/10 12:0 a.m.1 views

Adobe Flash Player Memory Corruption Arbitrary Code Execution Vulnerability

Adobe Flash Player is a Flash file handling program. A memory corruption vulnerability exists in Adobe Flash Player, which allows remote attackers to construct malicious SWF content that can be parsed by a user to execute arbitrary code...

10CVSS7.6AI score0.90264EPSS
Exploits4References1
Huawei
Huawei
added 2015/06/09 12:0 a.m.37 views

Security Advisory - VENOM Vulnerability in Huawei Products

Huawei has noticed the buffer overflow vulnerability in the floppy disk controller FDC of QEMU disclosed by open source organization Xen. This vulnerability allows an attacker to escape out of the virtual machine, execute code on the physical host with full privilege. Vulnerability ID:...

7.7CVSS7.2AI score0.19325EPSS
Exploits1Affected Software2
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:0 a.m.1 views

The vulnerability of the Flash Player software platform, which allows a perpetrator to execute arbitrary code or cause service failures

The vulnerability of the Flash Player software is related to a breach of memory integrity. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code or cause service failures...

10CVSS6AI score0.04734EPSS
Exploits5References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:0 a.m.2 views

The vulnerability of the Flash Player software platform, which allows a perpetrator to execute arbitrary code or cause service failures

The vulnerability of the Flash Player software is related to a breach of memory integrity. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code or cause service failures...

10CVSS6AI score0.55434EPSS
Exploits5References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/05/22 12:0 a.m.2 views

The vulnerability of the Flash Player software platform, which allows a perpetrator to execute arbitrary code or cause service failures

The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...

10CVSS6AI score0.1143EPSS
Exploits4References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/05/22 12:0 a.m.1 views

The vulnerability of the Flash Player software platform, which allows a perpetrator to execute arbitrary code or cause service failures

The vulnerability of the Flash Player software may allow a malicious actor to execute arbitrary code or cause service failures...

10CVSS6AI score0.1143EPSS
Exploits4References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/05/18 12:0 a.m.2 views

The vulnerability of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Windows operating system exists due to incorrect handling of the event log file. The vulnerability can be exploited by opening the event log file created by the attacker. As a result of exploiting this vulnerability, an attacker who operates remotely can execute arbitrary...

9.3CVSS5.9AI score0.31425EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2015/05/18 12:0 a.m.3 views

The vulnerability of the Adobe AIR software platform allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the Adobe AIR software platform exists due to the access to memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures or execute arbitrary code...

10CVSS5.8AI score0.08652EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2015/05/13 10:0 a.m.25 views

CVE-2015-3057

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2014-9161, CVE-2015-3046, CVE-2015-3049, CVE-2015-3050,...

7.5AI score0.05047EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2015/05/01 12:0 a.m.42 views

Ubuntu: Security Advisory (USN-2589-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS6.1AI score0.01716EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2015/05/01 12:0 a.m.65 views

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2588-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2588-1 advisory. A stack overflow was discovered in the the microcode loader for the intel x86 platform. A local attacker could exploit this flaw to cause a denial of...

6.9CVSS7.2AI score0.01716EPSS
Exploits1References3
CNVD
CNVD
added 2015/04/26 12:0 a.m.2 views

HP Data Protector has multiple vulnerabilities

HP Data Protector is a unified data protection solution. HP Data Protector has multiple security vulnerabilities that could allow a remote attacker to perform elevation of privilege, denial of service attacks, or execute arbitrary code...

9CVSS7.5AI score0.0082EPSS
Exploits0References1
CNVD
CNVD
added 2015/04/09 12:0 a.m.1 views

Apple iOS IOHIDFamily API Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS IOHIDFamily API, which allows local attackers to exploit the vulnerability to execute arbitrary code...

7.2CVSS7.1AI score0.00216EPSS
Exploits0References1
NVD
NVD
added 2015/03/31 2:59 p.m.24 views

CVE-2014-2027

eGroupware before 1.8.006.20140217 allows remote attackers to conduct PHP object injection attacks, delete arbitrary files, and possibly execute arbitrary code via the 1 addrfields or 2 trans parameter to addressbook/csvimport.php, 3 calfields or 4 trans parameter to calendar/csvimport.php, 5...

7.5CVSS7.8AI score0.02305EPSS
Exploits1References6
OSV
OSV
added 2015/03/29 9:59 p.m.3 views

DEBIAN-CVE-2015-2785

The GIF encoder in Byzanz allows remote attackers to cause a denial of service out-of-bounds heap write and crash or possibly execute arbitrary code via a crafted Byzanz debug data recording ByzanzRecording file to the byzanz-playback command...

7.5CVSS8AI score0.01895EPSS
Exploits0References1
CNVD
CNVD
added 2015/03/24 12:0 a.m.1 views

IBM General Parallel File System Bypass Authentication to Execute Code Vulnerability

The IBM General Parallel File System is a shared file system that originated from the virtual shared disk technology used on IBM SP systems. A security vulnerability exists in IBM General Parallel File System that allows remote attackers to exploit the vulnerability to bypass authentication and...

10CVSS7.5AI score0.01273EPSS
Exploits0References1
CNVD
CNVD
added 2015/03/12 12:0 a.m.2 views

Microsoft IE Elevation of Privilege Vulnerability

Microsoft Internet Explorer is a popular WEB browser. An unspecified elevation of privilege vulnerability exists in Microsoft Internet Explorer that allows an attacker to construct a malicious web page and trick a user into parsing it to execute arbitrary code with elevated privileges...

4.3CVSS8AI score0.08368EPSS
Exploits0References1
CNVD
CNVD
added 2015/03/12 12:0 a.m.3 views

pngcrush Remote Code Execution Vulnerability

pngcrush is an image optimization and compression tool. A security vulnerability exists in pngcrush that allows an attacker to exploit the vulnerability to construct malicious files that can be induced to be parsed by the application, which can crash the application or execute code...

7.8CVSS7AI score0.00427EPSS
Exploits0References1
Rows per page
Query Builder