Lucene search
K

424 matches found

Symantec
Symantec
added 2015/10/13 12:0 a.m.34 views

Microsoft VBScript and JScript CVE-2015-2482 Remote Memory Corruption Vulnerability

Description Microsoft VBScript and JScript are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently...

9.3CVSS1AI score0.64097EPSS
Exploits3Affected Software6
Symantec
Symantec
added 2015/10/13 12:0 a.m.36 views

Microsoft VBScript and JScript CVE-2015-6055 Multiple Remote Memory Corruption Vulnerabilities

Description Microsoft VBScript and JScript are prone to multiple remote memory-corruption vulnerabilities. Attackers can exploit these issues by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit these issues to execute arbitrary code in the context of the...

9.3CVSS0.1AI score0.44437EPSS
Exploits0Affected Software6
Kaspersky
Kaspersky
added 2015/10/13 12:0 a.m.46 views

KLA10676 Multiple vulnerabilities in Microsoft JScript and VBScript

Multiple serious vulnerabilities have been found in Microsoft JScript and VBScript. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improperly handling objects...

9.3CVSS9AI score0.64097EPSS
Exploits3References10
NVD
NVD
added 2015/09/09 12:59 a.m.11 views

CVE-2015-2493

The 1 VBScript and 2 JScript engines in Microsoft Internet Explorer 8 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

9.3CVSS7.6AI score0.20844EPSS
Exploits0References3
Prion
Prion
added 2015/09/09 12:59 a.m.14 views

Memory corruption

The 1 VBScript and 2 JScript engines in Microsoft Internet Explorer 8 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

9.3CVSS8.1AI score0.20844EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2015/09/09 12:0 a.m.52 views

CVE-2015-2493

CVE-2015-2493 affects Microsoft Internet Explorer (IE) engines VBScript and JScript in IE 8 (and IE 7–11 per related advisories). The vulnerability is a memory corruption flaw that can be exploited by a crafted web page to cause remote code execution or, per some sources, memory corruption leadin...

9.3CVSS7.7AI score0.20844EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2015/09/09 12:0 a.m.13 views

CVE-2015-2493

The 1 VBScript and 2 JScript engines in Microsoft Internet Explorer 8 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

7.5AI score0.20844EPSS
Exploits0References3
VulnCheck KEV
VulnCheck KEV
added 2015/07/21 12:0 a.m.1 views

VulnCheck KEV: CVE-2015-2419

JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service memory corruption via a crafted web site...

9.3CVSS7.7AI score0.49527EPSS
Exploits1References1
NVD
NVD
added 2015/07/14 9:59 p.m.16 views

CVE-2015-2419

JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "JScript9 Memory Corruption Vulnerability."...

9.3CVSS7.6AI score0.49527EPSS
Exploits1References3
CVE
CVE
added 2015/07/14 9:0 p.m.1004 views

CVE-2015-2419

CVE-2015-2419 is a JScript 9 vulnerability in Microsoft Internet Explorer (IE10/IE11) that allows remote code execution and memory corruption when processing crafted JSON with JSON.stringify. The CVE is exploited via malicious web content and has been leveraged by loaders in exploit kits (notably...

9.3CVSS8.7AI score0.49527EPSS
In wildExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2015/07/14 9:0 p.m.6 views

CVE-2015-2419

JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "JScript9 Memory Corruption Vulnerability."...

8.8AI score0.49527EPSS
Exploits1References2
Cvelist
Cvelist
added 2015/07/14 9:0 p.m.24 views

CVE-2015-2419

JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "JScript9 Memory Corruption Vulnerability."...

7.5AI score0.49527EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2015/07/14 12:0 a.m.1 views

PT-2015-1554 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 10 through 11 Description: The issue is caused by a memory corruption vulnerability in the JScript 9 component of Microsoft Internet Explorer. This vulnerability can be exploited by a remote attacker via a...

9.3CVSS9.7AI score0.49527EPSS
Exploits1References14
NVD
NVD
added 2015/05/13 10:59 a.m.13 views

CVE-2015-1686

The Microsoft 1 VBScript 5.6 through 5.8 and 2 JScript 5.6 through 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "VBScript and JScript ASLR Bypass."...

4.3CVSS6.3AI score0.1309EPSS
Exploits0References4
Prion
Prion
added 2015/05/13 10:59 a.m.19 views

Security feature bypass

The Microsoft 1 VBScript 5.6 through 5.8 and 2 JScript 5.6 through 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "VBScript and JScript ASLR Bypass."...

4.3CVSS6.8AI score0.1309EPSS
Exploits0References4Affected Software2
CVE
CVE
added 2015/05/13 10:0 a.m.67 views

CVE-2015-1686

CVE-2015-1686 documents an ASLR bypass in Microsoft Internet Explorer's scripting engines: VBScript 5.6–5.8 and JScript 5.6–5.8 used in IE8–IE11 (and related products). The root cause is ASLR bypass capability within these engines when rendering a crafted web page, enabling potential arbitrary co...

4.3CVSS6.3AI score0.1309EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2015/05/13 10:0 a.m.19 views

CVE-2015-1686

The Microsoft 1 VBScript 5.6 through 5.8 and 2 JScript 5.6 through 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "VBScript and JScript ASLR Bypass."...

6.2AI score0.1309EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2015/05/13 12:0 a.m.37 views

Microsoft Windows JScript & VBScript Security Bypass Vulnerability (3057263)

This host is missing an important security update according to Microsoft Bulletin MS15-053. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

4.3CVSS5AI score0.1309EPSS
Exploits0References6
Check Point Advisories
Check Point Advisories
added 2015/05/12 12:0 a.m.1 views

Microsoft Internet Explorer Memory Corruption (MS15-043: CVE-2015-1686)

A security feature bypass vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to JScript and VBScript engines not using Address Space Layout Randomization ASLR security feature when rendered in Internet Explorer. A remote attacker can exploit this issue by...

4.3CVSS6.2AI score0.1309EPSS
Exploits0
Symantec
Symantec
added 2015/05/12 12:0 a.m.47 views

Microsoft VBScript and JScript CVE-2015-1686 ASLR Security Bypass Vulnerability

Description Microsoft VBScript and JScript are prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. Technologies Affected Avaya CallPilot 4.0 Avaya...

4.3CVSS7.9AI score0.1309EPSS
Exploits0Affected Software10
Rows per page
Query Builder