Lucene search
+L

2544 matches found

OpenVAS
OpenVAS
added 2018/07/11 12:00 a.m.63 views

Microsoft Word 2016 Tampering Vulnerability (KB4022218)

This host is missing an important security update according to Microsoft KB4022218 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

7.5CVSS7.5AI score0.05158EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2018/07/10 7:50 p.m.100 views

Microsoft Fixes 17 Critical Bugs in July Patch Tuesday Release

UDPATE Browser vulnerabilities took center stage in Microsoft’s July Patch Tuesday security bulletin. In all, Microsoft patched 17 bugs rated critical, with ten tied to scripting engine flaws impacting Internet Explorer. In total, Microsoft is reporting 53 bugs: 17 critical, 34 rated important, o...

9.3CVSS1.1AI score0.37696EPSS
SaveExploits8References14
Tenable Nessus
Tenable Nessus
added 2018/07/10 12:00 a.m.38 views

Security Updates for Microsoft Word Products (July 2018)

The Microsoft Word Products are missing a security update. It is, therefore, affected by the following vulnerability : - A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails. An attacker could exploit the vulnerabili...

7.5CVSS7.3AI score0.05158EPSS
SaveExploits0References4
NVD
NVD
added 2018/07/06 5:29 p.m.22 views

CVE-2018-5885

While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear...

9.8CVSS8.6AI score0.00891EPSS
SaveExploits0References1
Prion
Prion
added 2018/07/06 5:29 p.m.20 views

Buffer overflow

While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear...

7.5CVSS9.7AI score0.00891EPSS
SaveExploits0References1
CVE
CVE
added 2018/07/06 5:00 p.m.63 views

CVE-2018-5885

CVE-2018-5885 affects Snapdragon Mobile and Snapdragon Wear. The issue is a buffer overflow during dynamic font loading when the number of font segments is out of range in the font file, impacting the font loader component. The NVD metrics list a NETWORK, LOW-attack complexity, NONE authenticatio...

9.8CVSS8.6AI score0.00891EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/07/06 5:00 p.m.35 views

CVE-2018-5885

While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear...

9.8AI score0.00891EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/06/18 12:00 a.m.9 views

The vulnerability of the Office Graphics component in the Microsoft Office software suite allows a hacker to execute arbitrary code.

The vulnerability of the Office Graphics component in the Microsoft Office software suite is related to code generation errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted embedded fonts from within the software...

9.3CVSS6AI score0.17172EPSS
SaveExploits0References4
OSV
OSV
added 2018/06/11 9:29 p.m.5 views

CVE-2018-5121

Low descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in the addressbar. When used as part of an Internationalized Domain Name IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating syste...

5.3CVSS7.3AI score0.01681EPSS
SaveExploits0References4
NVD
NVD
added 2018/06/11 9:29 p.m.18 views

CVE-2017-7825

Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affect...

5.3CVSS4.8AI score0.01817EPSS
SaveExploits0References9
NVD
NVD
added 2018/06/11 9:29 p.m.21 views

CVE-2017-7763

Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 5...

5.3CVSS5.5AI score0.01327EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2018/06/11 9:29 p.m.29 views

CVE-2017-7763

Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 5...

5.3CVSS6.8AI score0.01327EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/06/11 9:00 p.m.29 views

CVE-2018-5121

Low descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in the addressbar. When used as part of an Internationalized Domain Name IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating syste...

6.4AI score0.01681EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2018/06/11 9:00 p.m.23 views

CVE-2017-7763

Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 5...

6.2AI score0.01327EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2018/06/11 9:00 p.m.20 views

CVE-2017-7825

Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affect...

5.3CVSS7.5AI score0.01817EPSS
SaveExploits0
CNVD
CNVD
added 2018/06/04 12:00 a.m.9 views

FontParser Memory Corruption Vulnerability in Multiple Apple Products

Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS High Sierra is a specialized operating system for Mac computers; tvOS is a smart TV operating system; watchOS is a smart watch operating system. Apple iOS is an...

7.8CVSS7AI score0.03175EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/05/31 12:00 a.m.14 views

The vulnerability of the Windows operating system’s font library, allowing a hacker to execute arbitrary code

The vulnerability of the Windows operating system’s font library relates to the improper handling of embedded fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted font file from a remote location...

9.3CVSS8.2AI score0.21064EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/05/31 12:00 a.m.13 views

The vulnerability of the Windows operating system’s font library, allowing a hacker to execute arbitrary code

The vulnerability of the Windows operating system’s font library relates to the improper handling of embedded fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted font file from a remote location...

9.3CVSS8.2AI score0.35437EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/05/31 12:00 a.m.13 views

The vulnerability of the Windows operating system’s font library, allowing a hacker to execute arbitrary code

The vulnerability of the Windows operating system’s font library relates to the improper handling of embedded fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted font file from a remote location...

9.3CVSS8.2AI score0.21064EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/05/31 12:00 a.m.10 views

The vulnerability of the Windows operating system’s font library, allowing a hacker to execute arbitrary code

The vulnerability of the Windows operating system’s font library relates to the improper handling of embedded fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted font file from a remote location...

9.3CVSS8.2AI score0.21064EPSS
SaveExploits0References4
Rows per page
Query Builder