Lucene search
+L

38724 matches found

CNVD
CNVD
added 2020/04/16 12:00 a.m.11 views

Microsoft Internet Explorer VBScript Engine Buffer Overflow Vulnerability

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A security vulnerability exists in the way the VBScript Engine handles memory objects in Microsoft IE versions...

9.3CVSS7.1AI score0.11672EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2020/04/15 4:17 p.m.47 views

Tencent Ups Top Bug-Bounty Award to $15K

The Tencent Security Response Center TSRC is launching an expanded bug-bounty program, via the HackerOne white-hat platform – and the company has increased its top reward to $15,000. Tencent, a China-based global internet service provider, is opening up its existing bug-bounty program to...

8.4AI score
SaveExploits0References7
OSV
OSV
added 2020/04/15 3:15 p.m.3 views

CVE-2020-0968

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970...

7.5CVSS6.3AI score0.30676EPSS
SaveExploits0References2
NVD
NVD
added 2020/04/15 3:15 p.m.24 views

CVE-2020-0968

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970...

7.6CVSS8.1AI score0.30676EPSS
SaveExploits0References2
Prion
Prion
added 2020/04/15 3:15 p.m.30 views

Remote code execution

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970...

7.6CVSS7.6AI score0.30676EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/04/15 3:13 p.m.1192 views

CVE-2020-0968

CVE-2020-0968 is described as a remote code execution vulnerability in the Internet Explorer Script Engine memory handling. The connected document set also references a separate ChakraCore scripting engine memory corruption RCE (GHSA-233H-59M2-QQF2), noting a similar vulnerability class but not p...

7.6CVSS8AI score0.30676EPSS
SaveIn wildExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/04/15 3:13 p.m.50 views

CVE-2020-0968

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970...

8.1AI score0.30676EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/04/15 3:13 p.m.11 views

CVE-2020-0968

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970...

7.2AI score0.30676EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/15 2:15 p.m.8 views

CVE-2020-2883

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to...

9.8CVSS7.5AI score0.94928EPSS
SaveExploits11References5
OpenVAS
OpenVAS
added 2020/04/15 12:00 a.m.92 views

Microsoft Windows Multiple Vulnerabilities (KB4549951)

This host is missing a critical security update according to Microsoft KB4549951 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.3AI score0.69166EPSS
SaveExploits4References3
OpenVAS
OpenVAS
added 2020/04/15 12:00 a.m.91 views

Microsoft Windows Multiple Vulnerabilities (KB4550922)

This host is missing a critical security update according to Microsoft KB4550922 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.3AI score0.69166EPSS
SaveExploits4References3
OpenVAS
OpenVAS
added 2020/04/15 12:00 a.m.53 views

Microsoft Windows Multiple Vulnerabilities (KB4550930)

This host is missing a critical security update according to Microsoft KB4550930 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.3AI score0.69166EPSS
SaveExploits4References3
OpenVAS
OpenVAS
added 2020/04/15 12:00 a.m.99 views

Microsoft Windows Multiple Vulnerabilities (KB4550929)

This host is missing a critical security update according to Microsoft KB4550929 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.3AI score0.69166EPSS
SaveExploits4References3
OpenVAS
OpenVAS
added 2020/04/15 12:00 a.m.71 views

Microsoft Windows Multiple Vulnerabilities (KB4550927)

This host is missing a critical security update according to Microsoft KB4550927 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.3AI score0.69166EPSS
SaveExploits4References3
Positive Technologies
Positive Technologies
added 2020/04/15 12:00 a.m.12 views

PT-2020-2527

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.4.0 Description The issue is related to the Core component of Oracle WebLogic Server and is caused by inadequate access control. It allows an unauthenticated attacker with network acces...

10CVSS9.7AI score0.94928EPSS
SaveExploits11References45
Krebs on Security
Krebs on Security
added 2020/04/14 10:24 p.m.249 views

Microsoft Patch Tuesday, April 2020 Edition

Microsoft today released updates to fix 113 security vulnerabilities in its various Windows operating systems and related software. Those include at least three flaws that are actively being exploited, as well as two others which were publicly detailed prior to today, potentially giving attackers...

7.6CVSS9.1AI score0.9981EPSS
SaveExploits129
ThreatPost
ThreatPost
added 2020/04/14 7:45 p.m.282 views

April Patch Tuesday: Microsoft Battles 4 Bugs Under Active Exploit

Microsoft has released its April 2020 Patch Tuesday security updates, its first big patch update released since the work-from-home era truly got underway. It’s a doozie, with the tech giant disclosing 113 vulnerabilities. Out of these, 19 are rated as critical, and 94 are rated as important...

7.6CVSS9.7AI score0.69166EPSS
SaveExploits3References25
Microsoft KB
Microsoft KB
added 2020/04/14 7:00 a.m.56 views

Internet Explorer help

None None...

9.3CVSS7.1AI score0.30676EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/04/14 7:00 a.m.53 views

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

9.3CVSS8.5AI score0.11672EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/04/14 7:00 a.m.113 views

April 14, 2020—KB4550917 (Monthly Rollup)

None None...

9.3CVSS6.8AI score0.69166EPSS
SaveExploits4
Rows per page
Query Builder