Lucene search
+L

29884 matches found

Symantec
Symantec
•added 2019/09/10 12:00 a.m.•50 views

Microsoft Internet Explorer VBScript Engine CVE-2019-1208 Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current user. Failed exploit attempts may result in a denial of service condition. Technologies Affected Microsoft Internet...

0.7AI score0.12603EPSS
SaveExploits0Affected Software1
Symantec
Symantec
•added 2019/09/10 12:00 a.m.•67 views

Microsoft Internet Explorer Scripting Engine CVE-2019-1221 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Internet...

0.1AI score0.19259EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2019/09/10 12:00 a.m.•49 views

Security Updates for Internet Explorer (September 2019)

The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such ...

7.6CVSS7AI score0.19259EPSS
SaveExploits1References9
osv_cve
osv_cve
•added 2019/09/05 9:15 p.m.•28 views

CVE-2019-11380

The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage...

7.5CVSS7.1AI score0.01633EPSS
SaveExploits0References1
NVD
NVD
•added 2019/09/05 9:15 p.m.•34 views

CVE-2019-11380

The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage...

7.5CVSS7.3AI score0.01633EPSS
SaveExploits0References1
Prion
Prion
•added 2019/09/05 9:15 p.m.•22 views

Design/Logic Flaw

The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage...

5CVSS7.3AI score0.01633EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/09/05 8:38 p.m.•43 views

CVE-2019-11380

The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage...

7.3AI score0.01633EPSS
SaveExploits0References1
CVE
CVE
•added 2019/09/05 8:38 p.m.•136 views

CVE-2019-11380

The CVE-2019-11380 issue affects the Android app ES File Explorer File Manager (version 4.2.0.1.3). The master-password protection can be bypassed via the com.estrongs.android.pop.ftp.ESFtpShortcut intent, which leads to remote FTP access to the user’s entire local storage. This vulnerability is ...

7.5CVSS7.2AI score0.01633EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2019/09/05 12:00 a.m.•9 views

PT-2019-12270

Name of the Vulnerable Software and Affected Versions ES File Explorer File Manager application version 4.2.0.1.3 Description The master-password feature in the ES File Explorer File Manager application can be bypassed, allowing remote FTP access to the entirety of local storage. This can be...

7.5CVSS0.01633EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/05 12:00 a.m.•9 views

CVE-2019-11380: Undefined Security Weakness

The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage...

7.5CVSS7.3AI score0.01633EPSS
SaveExploits0References1
NVD
NVD
•added 2019/09/03 3:15 p.m.•36 views

CVE-2019-13156

NDrive1.2.2.sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle...

7.5CVSS7.5AI score0.01038EPSS
SaveExploits0References1
Prion
Prion
•added 2019/09/03 3:15 p.m.•32 views

Stack overflow

NDrive1.2.2.sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle...

5CVSS7.4AI score0.01038EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/09/03 2:42 p.m.•49 views

CVE-2019-13156

NDrive1.2.2.sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle...

7.5AI score0.01038EPSS
SaveExploits0References1
CVE
CVE
•added 2019/09/03 2:42 p.m.•100 views

CVE-2019-13156

CVE-2019-13156 affects NDrive(1.2.2).sys in Naver Cloud Explorer and is described as a stack-based buffer overflow that allows denial of service when reading data from an IOCTL handle. The connected documents consistently report this same issue across multiple sources (NVD, Red Hat, CVE lists, CN...

7.5CVSS7.4AI score0.01038EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2019/09/03 12:00 a.m.•17 views

Naver Cloud Explorer Buffer Overflow Vulnerability

Naver is a South Korean Internet content service operator. A buffer overflow vulnerability exists in the NDrive1.2.2.sys file in Naver Cloud Explorer, which can be exploited by an attacker to cause, among other things, a buffer overflow or heap overflow...

7.5CVSS7.5AI score0.01038EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/03 12:00 a.m.•14 views

CVE-2019-13156: Stack-based Buffer Overflow

NDrive1.2.2.sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle...

7.5CVSS7.4AI score0.01038EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/09/03 12:00 a.m.•6 views

PT-2019-13163

Name of the Vulnerable Software and Affected Versions Naver Cloud Explorer version 1.2.2 Description The issue is related to a stack-based buffer overflow in the NDrive1.2.2.sys component. This overflow occurs when reading data from an IOCTL handle, allowing attackers to cause a denial of service...

7.5CVSS0.01038EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2019/08/30 5:05 a.m.•27 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Spectrum LSF Explorer

Summary There are multiple vulnerabilities in IBM®Runtime Environment Java™Version 8 used by IBM Spectrum LSF Explorer. IBM Spectrum LSF Explorer has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product, you shou...

9.8CVSS7.1AI score0.09393EPSS
SaveExploits3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/08/22 12:00 a.m.•19 views

Internet Explorer Script Handler RCE

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

7.6CVSS6AI score0.03381EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2019/08/19 10:30 a.m.•43 views

Security Bulletin: Watson Explorer is affected by an Apache Zookeeper vulnerability (CVE-2019-0201)

Summary IBM Watson Explorer has addressed the following vulnerability in Apache ZooKeeper. Vulnerability Details CVEID: CVE-2019-0201 DESCRIPTION: Apache ZooKeeper could allow a remote attacker to obtain sensitive information, caused by the failure to check permissions by the getACL command. By...

5.9CVSS0.7AI score0.09712EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder