Lucene search
K

4441 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 2:34 a.m.39 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0230,...

7.6CVSS7.6AI score0.55566EPSS
Exploits2References7Affected Software1
OSV
OSV
added 2022/05/17 1:57 a.m.17 views

GHSA-8V2H-4JPM-3WFM ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability"...

9.8CVSS9.7AI score0.33566EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2022/05/14 2:26 a.m.25 views

ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability."...

9.3CVSS7.8AI score0.32396EPSS
Exploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 2:24 a.m.35 views

ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0186 and CVE-2016-0191...

7.6CVSS7.6AI score0.18329EPSS
Exploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 2:24 a.m.28 views

ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3199...

9.3CVSS8.6AI score0.22845EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2022/05/14 2:23 a.m.21 views

GHSA-5PPX-G65V-4VFV ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

7.5CVSS7.3AI score0.2363EPSS
Exploits0References6
OSV
OSV
added 2022/05/14 2:23 a.m.24 views

GHSA-P94C-R74J-43QG ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3377...

7.5CVSS7.7AI score0.15905EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2022/05/14 2:23 a.m.28 views

ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3350...

7.6CVSS7.7AI score0.15905EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2022/05/14 2:23 a.m.16 views

GHSA-92J2-GG59-4572 ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption...

7.5CVSS7AI score0.17771EPSS
Exploits0References9
Github Security Blog
Github Security Blog
added 2022/05/14 2:23 a.m.21 views

ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3389, CVE-2016-7190, and...

9.3CVSS7.7AI score0.75868EPSS
Exploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 2:22 a.m.29 views

ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Execution Vulnerability."...

9.3CVSS8.1AI score0.74578EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2022/05/14 2:22 a.m.24 views

GHSA-VR4J-GJ8Q-M89V ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Execution Vulnerability."...

7.5CVSS7.7AI score0.74578EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2022/05/14 2:22 a.m.29 views

ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and...

7.6CVSS7.7AI score0.78999EPSS
Exploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 2:22 a.m.31 views

ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and...

7.6CVSS7.7AI score0.78454EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2022/05/14 2:22 a.m.29 views

GHSA-W4MJ-XWVW-382F ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and...

7.5CVSS7.2AI score0.78454EPSS
Exploits0References7
OSV
OSV
added 2022/05/14 2:22 a.m.25 views

GHSA-MMFQ-R3RG-8R7W ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra...

7.5CVSS8.3AI score0.76867EPSS
Exploits4References11
CNVD
CNVD
added 2022/05/13 12:0 a.m.13 views

Cesanta MJS has an unspecified vulnerability (CNVD-2022-77022)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are small footprint and simple C/C interoperability.Cesanta MJS has a security vulnerability that could be exploited by an attacker to cause...

5.5CVSS3.2AI score0.00138EPSS
Exploits1References1
Kaspersky
Kaspersky
added 2022/05/09 12:0 a.m.38 views

KLA12530 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability can be exploited remotely ...

7.8CVSS8.6AI score0.22024EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2022/05/04 12:0 a.m.28 views

CVE-2022-29912

Requests initiated through reader mode did not properly omit cookies with a SameSite attribute. This vulnerability affects Thunderbird 91.9, Firefox ESR 91.9, and Firefox 100...

6.1CVSS6.8AI score0.0042EPSS
Exploits1References6
OSV
OSV
added 2022/05/03 12:0 a.m.1 views

GHSA-773H-W45W-F2F9 Denial of service vulnerability exists in libxmljs

libxmljs provides libxml bindings for v8 javascript engine. This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a...

7.5CVSS7.1AI score0.00154EPSS
Exploits1References5
Rows per page
Query Builder