Lucene search
+L

11352 matches found

CNVD
CNVD
added 2020/08/03 12:00 a.m.50 views

Microsoft Word Remote Code Execution Vulnerability (CNVD-2021-11036)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which arises from the program's failure to properly handle memory objects and can be exploited by an attacker to execute code...

8.8CVSS9.4AI score0.1063EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/31 12:00 a.m.13 views

The vulnerability of the Microsoft Windows Codecs Library, which is used for processing media content on Windows operating systems, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Windows Codecs Library for processing media content exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created image file...

7.3CVSS8AI score0.12375EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/31 12:00 a.m.14 views

The vulnerability of the Microsoft Windows Codecs Library, which is used for processing media content on Windows operating systems, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Windows Codecs Library for processing media content exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created image file...

7.3CVSS7.3AI score0.09274EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/07/30 12:00 a.m.12 views

Microsoft Excel Buffer Overflow Vulnerability (CNVD-2020-45184)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A buffer overflow vulnerability exists in Microsoft Excel 365 Apps for Enterprise, which arises from the program not properly handling memory objects. An attacker could exploit the vulnerability to run...

9.3CVSS7.6AI score0.1376EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.20 views

The vulnerability of the Windows Network Location Awareness Service allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the Windows Network Location Awareness Service in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

7CVSS7.6AI score0.00708EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.20 views

The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the text editor Microsoft Word are related to memory object processing errors, allowing attackers to execute arbitrary code.

The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the word processing software Microsoft Word are related to object handling errors in memory. Exploiting thes...

9CVSS8.1AI score0.1063EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.19 views

The vulnerability of the Windows Network Connections Service on Windows operating systems allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the Windows Network Connections Service on Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

7CVSS7.7AI score0.00762EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.16 views

The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Error Reporting error reporting service in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.2AI score0.01225EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.22 views

The vulnerability of the Windows Runtime component of the Windows operating system allows attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute malicious code through a specially created application...

7.8CVSS7.4AI score0.00762EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.19 views

The vulnerability of the Windows Runtime component of the Windows operating system allows attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute malicious code through a specially created application...

7.8CVSS7.4AI score0.00762EPSS
SaveExploits0References2
OSV
OSV
added 2020/07/27 7:15 p.m.8 views

CVE-2020-1457

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1425...

7.8CVSS7.9AI score0.12375EPSS
SaveExploits0References2
OSV
OSV
added 2020/07/27 7:15 p.m.8 views

CVE-2020-1425

A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1457...

7.8CVSS7.8AI score0.09274EPSS
SaveExploits0References1
Prion
Prion
added 2020/07/27 7:15 p.m.29 views

Remote code execution

A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1457...

6.8CVSS7.7AI score0.12375EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/07/27 7:15 p.m.30 views

Remote code execution

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1425...

6.8CVSS7.8AI score0.12375EPSS
SaveExploits0References2Affected Software1
Apple
Apple
added 2020/07/27 8:18 a.m.63 views

About the security content of iOS 12.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.8CVSS0.7AI score0.18108EPSS
SaveExploits14Affected Software1
Gentoo Linux
Gentoo Linux
added 2020/07/27 12:00 a.m.66 views

spice: Arbitrary code execution

Background Provides a complete open source solution for remote access to virtual machines in a seamless way so you can play videos, record audio, share USB devices, and share folders without complications. Description A flaw in spice’s memory handling code has been discovered, allowing an out of...

7.5CVSS8.2AI score0.01208EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/07/27 12:00 a.m.245 views

Debian DSA-4733-1 : qemu - security update

It was discovered that incorrect memory handling in the SLIRP networking implementation could result in denial of service or potentially the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

6.8CVSS7AI score0.02486EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2020/07/25 12:00 a.m.37 views

Debian: Security Advisory (DSA-4733-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.9AI score0.02486EPSS
SaveExploits0References4
Debian
Debian
added 2020/07/24 9:14 a.m.73 views

[SECURITY] [DSA 4733-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4733-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 24, 2020 https://www.debian.org/security/faq -...

6.8CVSS7AI score0.02486EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/07/24 12:00 a.m.11 views

The vulnerability of the Windows Lockscreen component allows attackers to elevate their privileges.

The vulnerability of the Windows Lockscreen component in operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

7.2CVSS6.9AI score0.01165EPSS
SaveExploits0References2
Rows per page
Query Builder