Lucene search
+L

26059 matches found

Github Security Blog
Github Security Blog
added 2022/05/14 2:22 a.m.25 views

ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra...

7.6CVSS7.4AI score0.73289EPSS
SaveExploits5References11Affected Software1
OSV
OSV
added 2022/05/14 2:22 a.m.27 views

GHSA-MMFQ-R3RG-8R7W ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra...

7.5CVSS8.3AI score0.73289EPSS
SaveExploits5References11
OSV
OSV
added 2022/05/14 2:03 a.m.40 views

GHSA-93C7-2942-3H47 ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10...

4.2CVSS5.3AI score0.03121EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2022/05/14 2:01 a.m.21 views

Gogs XSS Vulnerability

In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent...

6.1CVSS6.7AI score0.00869EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/05/14 2:01 a.m.27 views

GHSA-PX5R-FQJ6-R2F8 Gogs XSS Vulnerability

In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent...

6.1CVSS6AI score0.00869EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2022/05/14 1:10 a.m.43 views

Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...

5.4CVSS5.8AI score0.01636EPSS
SaveExploits0References6Affected Software2
Github Security Blog
Github Security Blog
added 2022/05/13 1:53 a.m.47 views

ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge...

4.3CVSS5.7AI score0.05588EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:53 a.m.35 views

ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore,...

7.6CVSS5.7AI score0.66877EPSS
SaveExploits4References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.36 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353,...

7.6CVSS7.3AI score0.24766EPSS
SaveExploits4References7Affected Software1
OSV
OSV
added 2022/05/13 1:20 a.m.37 views

GHSA-85J8-G29G-M326 ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

7.5CVSS7AI score0.14443EPSS
SaveExploits0References5
OSV
OSV
added 2022/05/13 1:20 a.m.26 views

GHSA-P349-Q795-QJ4Q ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353,...

7.5CVSS6.9AI score0.24766EPSS
SaveExploits4References7
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.41 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

7.6CVSS7.4AI score0.14443EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.41 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353,...

7.6CVSS7.3AI score0.68242EPSS
SaveExploits4References8Affected Software1
OSV
OSV
added 2022/05/13 1:20 a.m.43 views

GHSA-H8JQ-5737-HPCF ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353,...

7.5CVSS6.9AI score0.68242EPSS
SaveExploits4References8
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.32 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8242,...

7.6CVSS7.3AI score0.70028EPSS
SaveExploits4References9Affected Software1
OSV
OSV
added 2022/05/13 1:20 a.m.37 views

GHSA-4F79-FXH8-VGQ2 ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8242,...

7.5CVSS6.9AI score0.70028EPSS
SaveExploits4References9
OSV
OSV
added 2022/05/13 1:20 a.m.30 views

GHSA-J67M-WPV6-PV44 ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8242,...

7.5CVSS6.9AI score0.70028EPSS
SaveExploits4References9
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.34 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from...

7.6CVSS7.3AI score0.16376EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2022/05/13 1:20 a.m.29 views

GHSA-P97Q-J98Q-F98W ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from...

7.5CVSS6.9AI score0.16376EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2022/05/13 1:18 a.m.32 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-0945,...

7.6CVSS7.3AI score0.1559EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder