29883 matches found
VBScript Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...
VBScript Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...
VBScript Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...
CVE-2020-1315 Internet Explorer Information Disclosure Vulnerability
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack scenario, an...
CVE-2020-1315: Undefined Security Weakness
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer Information Disclosure Vulnerability'...
PT-2020-2815
Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the VBScript engine. This could allow a remote attacker to execute arbitrary code in the context of the current user,...
PT-2020-2811
Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the VBScript engine. Exploitation of this issue could allow a remote attacker to execute arbitrary code in the contex...
PT-2020-2814
Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the VBScript engine. This could allow a remote attacker to execute arbitrary code in the context of the current user,...
PT-2020-2806
Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to improper handling of objects in memory by Internet Explorer, which can lead to information disclosure. An attacker could exploit this to obtain information...
PT-2020-2813
Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the VBScript engine. This could allow a remote attacker to execute arbitrary code in the context of the current user,...
PT-2020-2810
Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the VBScript engine. This could allow a remote attacker to execute arbitrary code in the context of the current user,...
PT-2020-2812
Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the VBScript engine. Exploitation of this issue could allow a remote attacker to execute arbitrary code. This could...
Security Updates for Internet Explorer (June 2020)
The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited the...
KB4561645: Windows Server 2008 June 2020 Security Update
The remote Windows host is missing security update 4561645 or cumulative update 4561670. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory. An attacker who successfully exploited the...
KB4561669: Windows 7 and Windows Server 2008 R2 June 2020 Security Update
The remote Windows host is missing security update 4561669 or cumulative update 4561643. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory. An attacker who successfully exploited the...
KB4561674: Windows Server 2012 June 2020 Security Update
The remote Windows host is missing security update 4561674 or cumulative update 4561612. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory. An attacker who successfully exploited the...
KLA11806 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service, bypass security restrictions. Below is a complete list of...
Nord Security: Reflected XSS via IE
The reporter has found an HTML injection that lead to XSS with several payloads. It is important to note that this attack vector was only applicable via Internet Explorer. In addition, Microsoft is gradually ending support for Internet Explorer 11 within 2020/2021...
