Lucene search
+L

26059 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2022/05/24 12:00 a.m.70 views

Microsoft Internet Explorer Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information...

8.8CVSS4.1AI score0.19522EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/24 12:00 a.m.41 views

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service DoS via a crafted website...

8.8CVSS7.7AI score0.29189EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/24 12:00 a.m.68 views

Microsoft Internet Explorer Information Disclosure Vulnerability

An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer...

4.3CVSS5.5AI score0.22088EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/24 12:00 a.m.45 views

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer...

6.5CVSS2AI score0.26286EPSS
SaveIn wildExploits1
WPVulnDB
WPVulnDB
added 2022/05/23 12:00 a.m.22 views

Newsletter < 7.4.5 - Reflected Cross-Site Scripting

The plugin does not sanitize and escape the $SERVER'REQUESTURI' before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as Internet Explorer 9 or below. PoC...

6.1CVSS0.4AI score0.01905EPSS
SaveExploits2Affected Software1
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/23 12:00 a.m.52 views

Microsoft Internet Explorer Information Disclosure Vulnerability

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk...

6.5CVSS1.1AI score0.07505EPSS
SaveIn wildExploits0
OSV
OSV
added 2022/05/17 5:49 a.m.35 views

GHSA-6RM6-MJMH-86JQ HTML Purifier Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.3AI score0.02008EPSS
SaveExploits0References11
Github Security Blog
Github Security Blog
added 2022/05/17 5:49 a.m.19 views

HTML Purifier Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.3AI score0.02008EPSS
SaveExploits0References11Affected Software1
OSV
OSV
added 2022/05/17 3:30 a.m.12 views

GHSA-W2XX-JP9F-GP8G Yii Framework Cross-site Scripting Vulnerability

Cross-site scripting XSS vulnerability in Yii Framework before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON, arrays, and Internet Explorer 6 or 7...

4.3CVSS5.3AI score0.01521EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2022/05/17 3:30 a.m.32 views

Yii Framework Cross-site Scripting Vulnerability

Cross-site scripting XSS vulnerability in Yii Framework before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON, arrays, and Internet Explorer 6 or 7...

4.3CVSS5.9AI score0.01521EPSS
SaveExploits0References8Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 3:08 a.m.24 views

Joomla! vulnerable to Cross-site Scripting

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the comcontact component, as demonstrated by the Itemid parameter to index.php; 2 the query string to the comcontent component, as...

4.3CVSS6AI score0.01089EPSS
SaveExploits2References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 2:24 a.m.45 views

ChakraCore RCE Vulnerability

The Microsoft 1 Chakra JavaScript, 2 JScript, and 3 VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruptio...

7.6CVSS7.7AI score0.17353EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 2:24 a.m.42 views

ChakraCore RCE Vulnerability

The Microsoft 1 JScript 9, 2 VBScript, and 3 Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting...

9.3CVSS8.6AI score0.22955EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 2:24 a.m.39 views

ChakraCore RCE Vulnerability

The Microsoft 1 JScript 9, 2 VBScript, and 3 Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting...

9.3CVSS8.6AI score0.36361EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2022/05/14 2:24 a.m.29 views

GHSA-H6G3-73H7-CHXP ChakraCore RCE Vulnerability

The Microsoft 1 JScript 9, 2 VBScript, and 3 Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memo...

8.8CVSS8.7AI score0.23051EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2022/05/14 2:24 a.m.40 views

ChakraCore RCE Vulnerability

The Microsoft 1 JScript 9, 2 VBScript, and 3 Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memo...

9.3CVSS7.7AI score0.23051EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2022/05/14 2:23 a.m.34 views

GHSA-92J2-GG59-4572 ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption...

7.5CVSS7AI score0.17027EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2022/05/14 2:23 a.m.28 views

ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption...

9.3CVSS7.3AI score0.17027EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2022/05/14 2:23 a.m.19 views

GHSA-F7P4-FMMH-4P8X ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability...

7.5CVSS7AI score0.16843EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2022/05/14 2:23 a.m.25 views

ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability...

7.6CVSS7.4AI score0.16843EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder