29884 matches found
Internet Explorer Heap Buffer Overflow
The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Internet Explorer Privilege Bypass
The vulnerability of the Internet Explorer browser is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to partially compromise the confidentiality, integrity, and accessibility of protected information through a specially created URL address...
VBScript Script Handler Disclosure
The vulnerability of VBScript script handlers in Internet Explorer browsers is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created web page...
Memory Corruption Vulnerability in IE11
Microsoft is an American multinational technology company and a world leader in PC Personal Computer software development. A memory corruption vulnerability exists in IE11, which can be exploited by attackers to cause a denial of service or possibly execute code...
Microsoft Edge and Internet Code Execution
The vulnerabilities of Microsoft Edge and Internet Explorer exist due to errors in memory object handling. Exploiting these vulnerabilities can allow a remote attacker to execute arbitrary code...
Internet Explorer Script Handler RCE
The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Internet Explorer Script Handler RCE
The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
VBScript Script Handler Code Execution
The vulnerability of VBScript script handlers in Internet Explorer exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...
ChakraCore JavaScript RCE
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer exists due to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
VBScript Script Handler Code Execution
The vulnerability of VBScript script handlers in Internet Explorer exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...
VBScript Script Handler Code Execution
The vulnerability of VBScript script handlers in Internet Explorer exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...
Microsoft Internet Explorer 11 - VBScript Execution Policy Bypass in MSHTML Exploit
!-- Windows: Windows: IE11 VBScript execution policy bypass in MSHTML Platform: Windows 10 1809 not tested earlier Class: Security Feature Bypass Summary: MSHTML only checks for the CLSID associated with VBScript when blocking in the Internet Zone, but doesn’t check other VBScript CLSIDs which...
VulnCheck KEV: CVE-2017-8750
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of th...
Microsoft Internet Explorer 11 - VBScript Execution Policy Bypass in MSHTML
Microsoft Internet Explorer 11 - VBScript Execution Policy Bypass in MSHTML !-- Windows: Windows: IE11 VBScript execution policy bypass in MSHTML Platform: Windows 10 1809 not tested earlier Class: Security Feature Bypass Summary: MSHTML only checks for the CLSID associated with VBScript when...
Microsoft Internet Explorer 11 - VBScript Execution Policy Bypass in MSHTML
!-- Windows: Windows: IE11 VBScript execution policy bypass in MSHTML Platform: Windows 10 1809 not tested earlier Class: Security Feature Bypass Summary: MSHTML only checks for the CLSID associated with VBScript when blocking in the Internet Zone, but doesn’t check other VBScript CLSIDs which...
March 19, 2019—KB4489892 (Preview of Monthly Rollup)
March 19, 2019—KB4489892 Preview of Monthly Rollup Applies To Windows 7 Service Pack 1 Windows Server 2008 R2 Service Pack 1 Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4489878 released March 12, 2019 and also includes these new quality...
FreeBSD : Jupyter notebook -- cross-site inclusion (XSSI) vulnerability (72a6e3be-483a-11e9-92d7-f1590402501e)
Jupyter notebook Changelog : 5.7.6 contains a security fix for a cross-site inclusion XSSI vulnerability, where files at a known URL could be included in a page from an unauthorized website if the user is logged into a Jupyter server. The fix involves setting the X-Content-Type-Options: nosniff...
CVE-2019-7417: Improper Neutralization of Input During Web Page Generation
XSS exists in Ericsson Active Library Explorer ALEX 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter...
PT-2019-18591
Name of the Vulnerable Software and Affected Versions Ericsson Active Library Explorer ALEX version 14.3 Description A security issue exists in the software, where an XSS issue is present in multiple parameters of the "/cgi-bin/alexserv" servlet. The affected parameters include DB, FN, fn, and id...
Microsoft Internet Explorer VBScript Engine Remote Memory Corruption Vulnerability (CNVD-2019-10618)
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A remote memory corruption vulnerability exists in the way memory objects are handled in the VBScript Engine o...