Lucene search
+L

11350 matches found

Tenable Nessus
Tenable Nessus
added 2020/09/25 12:00 a.m.47 views

Microsoft Edge (Chromium) < 85.0.564.44 RCE

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 85.0.564.44. It is, therefore, affected by a remote code execution vulnerability. The vulnerability exists in the way that the IEToEdge Browser Helper Object BHO plugin on Internet Explorer handles objects in...

8.8CVSS7.3AI score0.01819EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/24 12:00 a.m.10 views

The vulnerability of the win32k component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00833EPSS
SaveExploits0References2
Apple
Apple
added 2020/09/24 12:00 a.m.130 views

About the security content of macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave

About the security content of macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave This document describes the security content of macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. About Apple security updates F...

9.3CVSS8AI score0.0257EPSS
SaveExploits1References1Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/09/24 12:00 a.m.13 views

The vulnerability of Microsoft Office Online Server, Microsoft Excel, Microsoft Office, and Microsoft SharePoint Server lies in memory object processing errors, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office Online Server, Microsoft Excel, Microsoft Office, and Microsoft SharePoint Server is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

9.3CVSS7.6AI score0.03851EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.7 views

The vulnerability of the Windows Modules Installer component allows attackers to enhance their privileges.

The vulnerability of the Windows Modules Installer component in operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.01033EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.12 views

The vulnerability of the DirectX component in Windows operating systems, which allows attackers to exploit their privileges

The vulnerability of the DirectX component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00931EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.12 views

The vulnerability of the dnsrslvr.dll library in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the dnsrslvr.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00931EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.11 views

The vulnerability of the Active Directory Integrated DNS (ADIDNS) operating system components allows a perpetrator to execute arbitrary code.

The vulnerability of the Active Directory Integrated DNS ADIDNS component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS8AI score0.03608EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.12 views

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.7AI score0.53399EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.10 views

The vulnerability of the Microsoft Windows Graphics Component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Windows Graphics Component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS6.2AI score0.01079EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.10 views

The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the kernel of Microsoft Windows relates to the improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

4CVSS5.8AI score0.01159EPSS
SaveExploits0References2
Check Point Advisories
Check Point Advisories
added 2020/09/22 12:00 a.m.50 views

Microsoft Office Remote Code Execution (CVE-2017-0261)

A remote code execution vulnerability exists in Encapsulated PostScript EPS of Microsoft Office. The vulnerability is due to the way that Microsoft Office does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing ...

3.3AI score0.7813EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.12 views

The vulnerability of Microsoft Office and Microsoft Excel packages lies in memory object processing errors, which allow attackers to exploit these vulnerabilities to disclose sensitive information.

The vulnerability of Microsoft Office and Microsoft Excel packages is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document file...

5.5CVSS6.2AI score0.04352EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.9 views

The vulnerability of the Windows GDI component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS6.7AI score0.0459EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.15 views

The vulnerability of Microsoft Word text editors, related to errors in memory object handling, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Word editing software is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.7AI score0.03833EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.14 views

The vulnerability of the Microsoft Windows Codecs Library, which is used for processing media content on Windows operating systems, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Windows Codecs Library, used for processing media content, in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using a specially...

9.3CVSS8.4AI score0.04181EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/09/21 12:00 a.m.14 views

The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems, related to errors in memory object handling, allows attackers to exploit their privileges.

The vulnerability of the Windows Common Log File System CLFS driver in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

7.8CVSS7.2AI score0.01093EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2020/09/18 12:00 a.m.5 views

PT-2020-4324 · Microsoft · Windows Media Player +2

Name of the Vulnerable Software and Affected Versions: Windows Media Foundation versions affected versions not specified Windows Media Player versions affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows Media Foundation...

8.8CVSS8.3AI score0.09836EPSS
SaveExploits0References8
Ubuntu
Ubuntu
added 2020/09/17 10:08 p.m.78 views

USN-4519-1: PulseAudio vulnerability

Ratchanan Srirattanamet discovered that an Ubuntu-specific patch caused PulseAudio to incorrectly handle memory under certain error conditions in the Bluez 5 module. An attacker could use this issue to cause PulseAudio to crash, resulting in a denial of service, or possibly execute arbitrary code...

6.1CVSS6.7AI score0.00298EPSS
SaveExploits0
OSV
OSV
added 2020/09/17 10:08 p.m.16 views

USN-4519-1 pulseaudio vulnerability

Ratchanan Srirattanamet discovered that an Ubuntu-specific patch caused PulseAudio to incorrectly handle memory under certain error conditions in the Bluez 5 module. An attacker could use this issue to cause PulseAudio to crash, resulting in a denial of service, or possibly execute arbitrary code...

6.1CVSS6.6AI score0.00298EPSS
SaveExploits0References2
Rows per page
Query Builder