Lucene search
+L

928 matches found

CNVD
CNVD
added 2019/08/21 12:00 a.m.14 views

Microsoft Jet Database Engine Remote Code Execution Vulnerability (CNVD-2019-38620)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A remote code execution...

9.3CVSS8.4AI score0.04321EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/21 12:00 a.m.50 views

Microsoft Jet Database Engine Remote Code Execution Vulnerability (CNVD-2019-38619)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A remote code execution...

9.3CVSS8.5AI score0.04269EPSS
SaveExploits0References1
OSV
OSV
added 2019/08/14 9:15 p.m.6 views

CVE-2019-1205

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could th...

7.8CVSS7.6AI score0.05308EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/08/13 12:00 a.m.7 views

PT-2019-3004 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Graphics Component affected versions not specified Description: An information disclosure issue exists due to the improper handling of objects in memory by the Microsoft Windows Graphics Component. This could allow an attack...

5.5CVSS7.8AI score0.02832EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2019/08/07 10:53 a.m.64 views

Important: Red Hat Security Advisory: redis:5 security update

An update for the redis:5 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.2CVSS7.3AI score0.26048EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2019/07/25 4:10 p.m.130 views

Important: Red Hat Security Advisory: rh-redis32-redis security update

An update for rh-redis32-redis is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS7.5AI score0.73691EPSS
SaveExploits8References5
OSV
OSV
added 2019/07/15 7:15 p.m.8 views

CVE-2019-1124

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123,...

8.8CVSS7.9AI score0.17092EPSS
SaveExploits1References1
Prion
Prion
added 2019/07/15 7:15 p.m.23 views

Privilege escalation

An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevation of Privilege Vulnerability'...

4.6CVSS7.8AI score0.01158EPSS
SaveExploits0References1Affected Software5
OpenVAS
OpenVAS
added 2019/07/11 12:00 a.m.29 views

Debian: Security Advisory (DLA-1850-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.2AI score0.26048EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.8 views

The vulnerability of the Jet Database Engine database management system in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Jet Database Engine database management system for Windows operating systems relates to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS6.1AI score0.17882EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/06/13 12:00 a.m.26 views

Microsoft Edge Buffer Overflow Vulnerability (CNVD-2019-27396)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A buffer overflow vulnerability exists in the way the Chakra scripting engine in Microsoft Edge handles in-memory objects. The vulnerability originates when a web system or product perfor...

7.6CVSS6.8AI score0.02125EPSS
SaveExploits0References1
OSV
OSV
added 2019/06/12 2:29 p.m.6 views

CVE-2019-0905

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...

7.8CVSS8AI score0.04001EPSS
SaveExploits0References2
OSV
OSV
added 2019/05/16 7:29 p.m.6 views

CVE-2019-0891

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-089...

7.8CVSS7.9AI score0.17882EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:00 a.m.9 views

The vulnerability of the jackson-databind library, related to the restoration of unreliable data structures in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the jackson-databind library relates to the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

8.1CVSS7.2AI score0.0964EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:00 a.m.11 views

The vulnerability of the jackson-databind library, related to the restoration of unreliable data structures in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the jackson-databind library relates to the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

8.1CVSS7.4AI score0.07348EPSS
SaveExploits0References3Affected Software3
Microsoft Secure
Microsoft Secure
added 2019/05/09 5:29 p.m.110 views

Detecting credential theft through memory access modelling with Microsoft Defender ATP

Stealing user credentials is a key step for attackers to move laterally across victim networks. In today’s attacks, we see a range of tools used to achieve credential theft, requiring protections that target the root behavior and not just individual known tools as is often done by traditional...

0.2AI score
SaveExploits0
Veracode
Veracode
added 2019/04/22 5:43 a.m.17 views

Information Disclosure

github.com/hashicorp/vault is vulnerable to information disclosure. The vulnerability exists as the in-memory cache that exists on performance standby nodes is not purged if a mount filter was used to exclude the secondary cluster. This allows an attacker to retrieve mount configuration data whic...

5.7AI score
SaveExploits0
OSV
OSV
added 2019/04/09 9:29 p.m.8 views

CVE-2019-0846

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0847, CVE-2019-0851, CVE-2019-0877, CVE-2019-0879...

7.8CVSS7.7AI score0.15102EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/09 9:29 p.m.4 views

CVE-2019-0822

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'...

7.8CVSS7.7AI score0.12837EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/08 11:29 p.m.5 views

CVE-2019-0617

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'...

7.8CVSS7.8AI score0.17373EPSS
SaveExploits0References1
Rows per page
Query Builder