Lucene search
K

424 matches found

Kaspersky
Kaspersky
added 2016/05/10 12:0 a.m.257 views

KLA10805 Multiple vulnerabilities in the JScript and VBScript

Multiple serious vulnerabilities have been found in Microsoft JScript and VBScript. Malicious users can exploit these vulnerabilities to execute arbitrary code. Technical details Improper objects handling in memory in Internet Explorer can be exploited remotely via a specially designed web conten...

7.6CVSS8.6AI score0.90799EPSS
Exploits10References7
Check Point Advisories
Check Point Advisories
added 2016/05/10 12:0 a.m.3 views

Microsoft Internet Explorer Scripting Engine Memory Corruption (MS16-051: CVE-2016-0187)

A use-after-free vulnerability was detected in Microsoft Internet Explorer in the handling of BooleanProtoObj objects. The underlying vulnerability lies in jscript!JSONStringifyArray where a previously released object is reused...

7.6CVSS0.8AI score0.20455EPSS
Exploits9
0day.today
0day.today
added 2016/05/02 12:0 a.m.43 views

Acunetix WVS 10 - Remote Command Execution (System)

Exploit for windows platform in category remote exploits ''' Acunetix WVS 10 - Remote command execution SYSTEM privilege - Author: Daniele Linguaglossa Overview ========= Acunetix WVS 10 1 is an enterprise web vulnerability scanner developer by Acunetix Inc. Two major flaws exists in the last...

7.1AI score
Exploits0
NVD
NVD
added 2016/01/13 5:59 a.m.16 views

CVE-2016-0002

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

7.6CVSS7.7AI score0.47218EPSS
Exploits0References5
Prion
Prion
added 2016/01/13 5:59 a.m.20 views

Memory corruption

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

7.6CVSS7.9AI score0.47218EPSS
Exploits0References5Affected Software2
CVE
CVE
added 2016/01/13 2:0 a.m.82 views

CVE-2016-0002

Technical details for CVE-2016-0002 are not publicly available in the provided connected documents. Monitor for updates.

7.6CVSS7.7AI score0.47218EPSS
Exploits0References5Affected Software2
OpenVAS
OpenVAS
added 2016/01/13 12:0 a.m.31 views

Microsoft Windows JScript and VBScript Remote Code Execution Vulnerability (3125540)

This host is missing a critical security update according to Microsoft Bulletin MS16-003. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.6CVSS6.1AI score0.47218EPSS
Exploits0References3
Symantec
Symantec
added 2016/01/12 12:0 a.m.23 views

Microsoft VBScript CVE-2016-0002 Remote Memory Corruption Vulnerability

Description Microsoft VBScript is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can take advantage of this vulnerability to execute arbitrary code in the context of the currently...

7.6CVSS0.5AI score0.47218EPSS
Exploits0Affected Software3
Microsoft KB
Microsoft KB
added 2016/01/12 12:0 a.m.38 views

MS16-003: Cumulative security update for JScript and VBScript to address remote code execution: January 12, 2016

Resolves a vulnerability in the VBScript scripting engine in Windows that could allow remote code execution if a user visits a specially crafted website. An attacker who successfully exploits this vulnerability could gain the same user rights as the current user and then install programs or creat...

9.6CVSS8.9AI score0.06342EPSS
Exploits0
Microsoft KB
Microsoft KB
added 2016/01/12 12:0 a.m.17 views

MS16-003: Description of the security update for JScript 5.8 and VBScript 5.8: January 12, 2016

Resolves a vulnerability in the VBScript scripting engine in Windows that could allow remote code execution if a user visits a specially crafted website. An attacker who successfully exploits this vulnerability could gain the same user rights as the current user and then install programs, create...

7.2AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2016/01/12 12:0 a.m.46 views

MS16-003: Cumulative Security Update for JScript and VBScript to Address Remote Code Execution (3125540)

The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the VBScript engine due to improper handling of objects in memory. An attacker can exploit this vulnerability by convincing a user to visit a specially crafted website or...

7.6CVSS7.2AI score0.47218EPSS
Exploits0References2
Fedora
Fedora
added 2015/12/30 5:58 p.m.23 views

[SECURITY] Fedora 22 Update: kdelibs3-3.5.10-71.fc22

Libraries for KDE 3: KDE Libraries included: kdecore KDE core library, kdeui user interface, kfm file manager, khtmlw HTML widget, kio Input/Output, networking, kspell spelling checker, jscript javascript, kab addressbook, kimgio image manipulation...

7CVSS0.3AI score0.00103EPSS
Exploits1
Fedora
Fedora
added 2015/12/29 10:27 p.m.21 views

[SECURITY] Fedora 23 Update: kdelibs3-3.5.10-71.fc23

Libraries for KDE 3: KDE Libraries included: kdecore KDE core library, kdeui user interface, kfm file manager, khtmlw HTML widget, kio Input/Output, networking, kspell spelling checker, jscript javascript, kab addressbook, kimgio image manipulation...

7CVSS0.3AI score0.00103EPSS
Exploits1
seebug.org
seebug.org
added 2015/12/16 12:0 a.m.34 views

Microsoft VBScript和JScript脚本引擎信息泄露漏洞(CVE-2015-6135)

No description provided by source...

5CVSS6.5AI score0.08457EPSS
Exploits1
seebug.org
seebug.org
added 2015/12/16 12:0 a.m.48 views

Microsoft VBScript和JScript脚本引擎内存破坏漏洞(CVE-2015-6136)

No description provided by source...

9.3CVSS6.5AI score0.44585EPSS
Exploits1
myhack58
myhack58
added 2015/12/10 12:0 a.m.26 views

Microsoft released 1 2 on a major security bug fix patch-bug warning-the black bar safety net

On Tuesday Microsoft announced that as part of its monthly security Bulletin part of all Windows users should update theiroperating system, the prevention from at least two major vulnerabilities. MS15-1 2 8 patched a series of memory crash vulnerability, the latter so that the hacker can install...

1.9AI score
Exploits0
NVD
NVD
added 2015/12/09 11:59 a.m.20 views

CVE-2015-6136

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

9.3CVSS7.3AI score0.44585EPSS
Exploits1References10
NVD
NVD
added 2015/12/09 11:59 a.m.18 views

CVE-2015-6135

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability."...

5CVSS5.7AI score0.08457EPSS
Exploits1References5
Prion
Prion
added 2015/12/09 11:59 a.m.17 views

Memory corruption

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

9.3CVSS7.9AI score0.44585EPSS
Exploits1References10Affected Software2
Prion
Prion
added 2015/12/09 11:59 a.m.20 views

Information disclosure

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability."...

5CVSS6.2AI score0.08457EPSS
Exploits1References5Affected Software2
Rows per page
Query Builder