Lucene search
+L

5171 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/15 12:00 a.m.•2 views

CVE-2018-0827: Undefined Security Weakness

Windows Scripting Host WSH in Windows 10 versions 1703 and 1709 and Windows Server, version 1709 allows a Device Guard security feature bypass vulnerability due to the way objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability"...

5.3CVSS6.3AI score0.0136EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2018/02/13 8:00 a.m.•41 views

Windows Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard. An attacker who successfully exploited this vulnerability could circumvent a User Mode Code Integrity UMCI policy on the machine. To exploit the vulnerability, an attacke...

5.3CVSS1.7AI score0.0136EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2018/02/13 8:00 a.m.•54 views

Microsoft Edge Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins. The vulnerability allows Microsoft Edge to bypass Same-Origin Policy SOP restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploite...

4.3CVSS1.3AI score0.05778EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2018/02/13 12:00 a.m.•115 views

KB4074588: Windows 10 Version 1709 and Windows Server Version 1709 February 2018 Security Update

The remote Windows host is missing security update 4074588. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a...

9.3CVSS8AI score0.65312EPSS
SaveExploits49References33
Positive Technologies
Positive Technologies
•added 2018/02/13 12:00 a.m.•3 views

PT-2018-9063

Name of the Vulnerable Software and Affected Versions: Microsoft Edge in Microsoft Windows versions prior to the fixed version Description: A security feature bypass issue exists due to how Microsoft Edge handles different-origin requests. This allows Microsoft Edge to bypass Same-Origin Policy S...

4.3CVSS0.05778EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2018/02/13 12:00 a.m.•3 views

PT-2018-9091

Name of the Vulnerable Software and Affected Versions: Windows 10 versions 1703 through 1709 Windows Server, version 1709 Description: A security feature bypass issue exists due to the way objects are handled in memory. This allows attackers to affect the system. Recommendations: For Windows 10...

5.3CVSS0.0136EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2018/01/30 12:00 a.m.•38 views

Microsoft PowerShell Core DoS And Security Feature Bypass Vulnerabilities - Linux

This host is missing an important security update for PowerShell Core according to Microsoft security update January 2018. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.5CVSS8.1AI score0.08885EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2018/01/12 4:49 a.m.•35 views

CVE-2018-0786

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka ".NET Security Feature Bypass Vulnerability."...

7.5CVSS3.6AI score0.03687EPSS
SaveExploits0References1
OSV
OSV
•added 2018/01/10 1:29 a.m.•18 views

CVE-2018-0818

Microsoft ChakraCore allows an attacker to bypass Control Flow Guard CFG in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass"...

7.5CVSS5.8AI score0.03686EPSS
SaveExploits0References2
Prion
Prion
•added 2018/01/10 1:29 a.m.•34 views

Security feature bypass

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka ".NET Security Feature Bypass Vulnerability."...

5CVSS7.4AI score0.03687EPSS
SaveExploits0References3Affected Software3
NVD
NVD
•added 2018/01/10 1:29 a.m.•27 views

CVE-2018-0786

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka ".NET Security Feature Bypass Vulnerability."...

7.5CVSS7.4AI score0.03687EPSS
SaveExploits0References3
Mend
Mend
•added 2018/01/10 1:00 a.m.•3 views

CVE-2018-0786

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka ".NET Security Feature Bypass Vulnerability."...

8.7CVSS0.03687EPSS
SaveExploits0References8
CVE
CVE
•added 2018/01/10 1:00 a.m.•169 views

CVE-2018-0786

CVE-2018-0786 affects multiple Microsoft .NET Framework versions (2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1), .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0, with a security feature bypass due to improper certificate validation. The issue is a certificate validation byp...

7.5CVSS6.2AI score0.03687EPSS
SaveExploits0References3Affected Software2
Tenable Nessus
Tenable Nessus
•added 2018/01/10 12:00 a.m.•220 views

Security Update for .NET Core (January 2018)

The remote Windows host has an installation of .NET Core with a version less than 2.0.5. Therefore, the host is affected by multiple vulnerabilities : - A security feature bypass in X509 Certificate Validation allows an attacker to present a certificate that is marked as invalid for a specific us...

7.5CVSS7AI score0.08885EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/10 12:00 a.m.•6 views

CVE-2018-0786: Improper Certificate Validation

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka ".NET Security Feature Bypass Vulnerability."...

7.5CVSS7.5AI score0.03687EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2018/01/10 12:00 a.m.•619 views

Microsoft .NET Framework DoS And Security Feature Bypass Vulnerability (KB4054998)

This host is missing a critical security update according to Microsoft Security Updates KB4054998. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.5CVSS6.8AI score0.08885EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2018/01/10 12:00 a.m.•286 views

Microsoft .NET Framework DoS And Security Feature Bypass Vulnerability (KB4055001)

This host is missing an important security update according to Microsoft Security Updates KB4055001. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.5CVSS6.8AI score0.08885EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2018/01/10 12:00 a.m.•65 views

Microsoft .NET Framework Denial Of Service And Security Feature Bypass Vulnerabilities (KB4055002)

This host is missing a critical security update according to Microsoft Security Updates KB4055002. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.5CVSS7.8AI score0.08885EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2018/01/10 12:00 a.m.•68 views

Microsoft .NET Framework DoS And Security Feature Bypass Vulnerability (KB4055000)

This host is missing a critical security update according to Microsoft Security Updates KB4055000. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.5CVSS6.8AI score0.08885EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2018/01/10 12:00 a.m.•80 views

Microsoft .NET Framework DoS And Security Feature Bypass Vulnerability (KB4054999)

This host is missing an important security update according to Microsoft Security Updates KB4054999. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.5CVSS6.8AI score0.08885EPSS
SaveExploits0References1
Rows per page
Query Builder