26151 matches found
The vulnerability of the Internet Explorer browser, which allows a hacker to elevate their privileges
The vulnerability of the Internet Explorer browser is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially crafted web page...
The vulnerability of the Internet Explorer browser, which allows a hacker to elevate their privileges
The vulnerability of the Internet Explorer browser is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially crafted web page...
The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.
The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by using a specially crafted web page...
The vulnerability of the Internet Explorer browser allows a perpetrator to bypass the AppContainer security mechanism and increase their privileges.
The vulnerability of the EditWith browser implementation in Internet Explorer is related to deficiencies in restricting access to certain functions. Exploiting this vulnerability allows a malicious actor to bypass the AppContainer security mechanism and enhance their privileges...
The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.
The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by using a specially crafted web page...
2345 Ace Input Method Local Elevation of Privilege Vulnerability
2345 Ace Input Method is a Chinese input software for PC launched by Shanghai 2,3,4,5 Network Technology Co. The system service installed by 2345 Ace Input Method provides the ability to create an elevated privilege process, but a vulnerability exists in the validation process. Due to improper...
Mail.ru: [allods.mail.ru] Reflected XSS
Приветствую. Для воспроизведения ошибки нужен IE8 + отключить фильтр XSS. https://allods.mail.ru/forums/newreply.php/%2522%256F%256E%256D%256F%2575%2573%2565%256F%2576%2565%2572%253D%2527%2561%256C%2565%2572%2574%2528%2531%2530%2530%2529%2527%2562%2561%2564%253D%2522 При наведении на кнопку "Ввер...
Microsoft Windows multiple security vulnerabilities
Internet Explorer / Edge multiple security vulnerabilities, VBScript / Jscript code execution, Windows Shell code execution, kernel privilege escsalation...
Radancy: XSS risk reduction with X-XSS-Protection: 1; mode=block header
As you can read for example on this Microsoft blog http://blogs.msdn.com/b/ieinternals/archive/2011/01/31/controlling-the-internet-explorer-xss-filter-with-the-x-xss-protection-http-header.aspx: " ... X-XSS-Protection: 1; mode=block When this token is present, if a potential XSS Reflection attack...
MS KB3105216: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer and Microsoft Edge
The remote Windows host is missing KB3105216. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow a remote attacker to execute arbitrary code. CVE-2015-7645, CVE-2015-7647, CVE-2015-7648 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Microsoft Internet Explorer Address Bar Spoofing (CVE-2004-2219)
A vulnerability exists in Internet Explorer's address bar updating method due to incorrect handling of unknown protocol handlers. A specific sequence of steps, executed in an Internet Explorer browser can allow for arbitrary content to be represented by a false address in the address bar. This ca...
WordPress Explorer Gallery Plugin - Arbitrary File Upload
This plugin is prone to an arbitrary file upload vulnerability. Solution Update the plugin...
WordPress Explorer Gallery Plugin - Arbitrary File Upload
This plugin is prone to an arbitrary file upload vulnerability. Solution Update the plugin...
KLA10688 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player for Internet explorer. For details look at KLA10680. Original advisories Microsoft Advisory Related products Adobe-Flash-Player-ActiveX CVE list KB list 3065820 2929825 3074683 2770041 2805940 3033408 2785605 3001237 3087040...
Microsoft Internet Explorer elevation of privilege vulnerability (CNVD-2015-06657)
Internet Explorer is a web browser from Microsoft. Internet Explorer version 8 has a security vulnerability in its implementation. A remote attacker can exploit this vulnerability to elevate privileges through a constructed application...
Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2015-06653 )
Internet Explorer is a web browser from Microsoft. Internet Explorer 11 has a security vulnerability in its implementation. A remote attacker can exploit this vulnerability to obtain sensitive information about process memory via parameters constructed within the ArrayBuffer.slice call...
Microsoft Internet Explorer elevation of privilege vulnerability (CNVD-2015-06626)
Internet Explorer is a web browser from Microsoft. A security vulnerability exists in the implementation of the broker EditWith feature in Internet Explorer versions 8-11. A remote attacker, initiated via arbitrary application DelegateExecute, can exploit this vulnerability to bypass the...
Microsoft Internet Explorer elevation of privilege vulnerability (CNVD-2015-06655)
Internet Explorer is a web browser from Microsoft. Internet Explorer 10/11 has a security vulnerability in its implementation. A remote attacker can exploit this vulnerability to elevate privileges through a constructed website...
Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-06652)
Internet Explorer is a web browser from Microsoft. A security vulnerability exists in the implementation of Internet Explorer 7-11. A remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service memory corruption via a constructed website...
Microsoft Internet Explorer Scripting Engine Information Disclosure Vulnerability (CNVD-2015-06660)
Internet Explorer is a web browser from Microsoft. A security vulnerability exists in the implementation of Internet Explorer 8-11 and other products, VBScript 5.7/5.8, and JScript 5.7/5.8 engines. A remote attacker can exploit this vulnerability to execute arbitrary code or cause a denial of...