26059 matches found
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ...
GHSA-H5HW-QRRW-VFXG ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ...
GHSA-3P68-M5QW-9G9W HTML Purifier cross-site scripting (XSS) vulnerability
Multiple cross-site scripting XSS vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted 1 background-image, 2 background, or 3 font-family Cascading Style Sheets CSS property, a different...
Microsoft Internet Explorer Use-After-Free Vulnerability
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code...
GHSA-W7X2-57F7-3P3X Trac Cross-site Scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...
Trac Cross-site Scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...
Oracle OSS Support Tools Input Validation Error Vulnerability
Oracle Support Tools is the United States Oracle Oracle company's set of Oracle support tools. A security vulnerability in the OSS Support Tools product for Oracle Support Tools Component: Oracle Explorer can be exploited by an attacker with elevated privileges to compromise OSS Support Tools by...
The vulnerability of the Adobe Flash Player Desktop Runtime, FlashPlayer for Google Chrome, as well as Adobe FlashPlayer for Microsoft Edge and Internet Explorer, relates to reading data beyond the buffer in memory. This allows an attacker to gain unauthorized access to protected information.
The vulnerabilities of Adobe Flash Player Desktop Runtime, Flash Player for Google Chrome, as well as Adobe Flash Player for Microsoft Edge and Internet Explorer, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow an attacker to gain unauthorized...
Security Bulletin: Vulnerabilities exist in Watson Explorer for IBM WebSphere Application Server - Liberty (CVE-2021-39031)
Summary IBM Watson Explorer contains vulnerabilities that exist in Watson Explorer for IBM WebSphere Application Server - Liberty CVE-2021-39031. IBM Watson Explorer has addressed this vulnerability. Vulnerability Details CVEID: CVE-2021-39031 DESCRIPTION: IBM WebSphere Application Server - Liber...
Security Bulletin: Vulnerability exists for Spring Framework in Watson Explorer (CVE-2021-22060, CVE-2022-22965, CVE-2022-22950)
Summary Security vulnerability in Spring Framework affects IBM Watson Explorer. IBM Watson Explorer has addressed this vulnerability. Vulnerability Details CVEID: CVE-2021-22060 DESCRIPTION: VMware Tanzu Spring Framework could allow a remote authenticated attacker to bypass security restrictions,...
7-Zip 16 DLL Hijacking
Microsoft Windows Environment Variable Expansion Issue Leads To Remote DLL Hijack Attack vector: 7-ZIP v.16 7-ZIP v.16 and possibly other softwares that utilizes the HTML Help System are prone to a remote DLL hijacking issue which leads to arbitrary code execution. PoC attached. because the OS...
CVE-2022-21405
Vulnerability in the OSS Support Tools product of Oracle Support Tools component: Oracle Explorer. The supported version that is affected is 18.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where OSS Support Tools executes to compromise OSS...
CVE-2022-21405
Vulnerability in the OSS Support Tools product of Oracle Support Tools component: Oracle Explorer. The supported version that is affected is 18.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where OSS Support Tools executes to compromise OSS...
CVE-2022-21405
Vulnerability in the OSS Support Tools product of Oracle Support Tools component: Oracle Explorer. The supported version that is affected is 18.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where OSS Support Tools executes to compromise OSS...
CVE-2022-21405
CVE-2022-21405 affects Oracle OSS Support Tools (component: Oracle Explorer) with affected version 18.3. The vulnerability enables a high-privilege attacker who can log on to the infrastructure running OSS Support Tools to compromise the tooling; exploitation requires user interaction and may imp...
Oracle Support Tools 输入验证错误漏洞
Oracle Support Tools is the United States Oracle Oracle company's set of Oracle support tools. A security vulnerability in the OSS Support Tools product for Oracle Support Tools Component: Oracle Explorer can be exploited by an attacker with elevated privileges to compromise OSS Support Tools by...
CVE-2022-26808
Windows File Explorer Elevation of Privilege Vulnerability...
CVE-2022-26808
Windows File Explorer Elevation of Privilege Vulnerability...
