Lucene search
+L

11356 matches found

BDU FSTEC
BDU FSTEC
added 2019/04/19 12:00 a.m.15 views

The vulnerability of the Open Enclave SDK, a software development tool, is related to an error in object processing in memory, which allows a hacker to disclose sensitive information that is protected by this security measure.

The vulnerability of the Open Enclave SDK software development tools is related to an object handling error in memory. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

5.9CVSS6.5AI score0.0156EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:00 a.m.18 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.6AI score0.08957EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:00 a.m.10 views

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

7.8CVSS7.7AI score0.4523EPSS
SaveExploits26References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:00 a.m.9 views

The vulnerability of the Terminal Services component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Terminal Services component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

4.9CVSS6.6AI score0.022EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:00 a.m.9 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

4.2CVSS7.6AI score0.08957EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:00 a.m.10 views

The vulnerability of the Microsoft JET Database Engine database driver on Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft JET Database Engine database driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

9.3CVSS7.8AI score0.16119EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:00 a.m.10 views

The vulnerability of the Microsoft JET Database Engine database driver on Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft JET Database Engine database driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

9.3CVSS7.8AI score0.16119EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:00 a.m.10 views

Vulnerability of Windows operating systems, related to errors in memory object handling, allows attackers to gain unauthorized access to protected information.

The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS6.7AI score0.02127EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.10 views

The vulnerability of the _maliciousFilename function in the Archive_Tar class of the PEAR library allows a malicious actor to execute arbitrary code.

The vulnerability of the maliciousFilename function in the ArchiveTar class of the PEAR library is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.8CVSS7.7AI score0.19207EPSS
SaveExploits5References5Affected Software2
CNVD
CNVD
added 2019/04/11 12:00 a.m.15 views

Microsoft Office Access Connectivity Engine Input Validation Error Vulnerability (CNVD-2019-27309)

Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. A remote code execution vulnerability...

7.8CVSS8.3AI score0.10551EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2019/04/11 12:00 a.m.35 views

CVE-2019-8506

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

9.3CVSS7.2AI score0.18108EPSS
SaveExploits2References4
OSV
OSV
added 2019/04/11 12:00 a.m.14 views

UBUNTU-CVE-2019-8523

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS7.2AI score0.02054EPSS
SaveExploits0References4
CNVD
CNVD
added 2019/04/11 12:00 a.m.15 views

Microsoft Office Access Connectivity Engine Input Validation Error Vulnerability (CNVD-2019-27311)

Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. A remote code execution vulnerability...

7.8CVSS8.5AI score0.10505EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/11 12:00 a.m.19 views

UBUNTU-CVE-2019-8506

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS7.3AI score0.18108EPSS
SaveExploits2References5
OSV
OSV
added 2019/04/11 12:00 a.m.19 views

UBUNTU-CVE-2019-8536

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS7.2AI score0.01953EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2019/04/10 12:00 a.m.270 views

Microsoft Windows Multiple Vulnerabilities (KB4493464)

This host is missing a critical security update according to Microsoft KB4493464 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.8CVSS8.4AI score0.93838EPSS
SaveExploits91References3
OpenVAS
OpenVAS
added 2019/04/10 12:00 a.m.96 views

Microsoft Windows Multiple Vulnerabilities (KB4493475)

This host is missing a critical security update according to Microsoft KB4493475 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.3CVSS7.3AI score0.81551EPSS
SaveExploits57References3
CNVD
CNVD
added 2019/04/10 12:00 a.m.15 views

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2019-10043)

Windows is a set of operating systems developed by Microsoft Corporation in the U.S. Windows uses a graphical mode GUI. An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability stems from a failure of the Win32k component to properly handle objects in memory. An...

7.8CVSS7.4AI score0.04151EPSS
SaveExploits2References1
CNVD
CNVD
added 2019/04/10 12:00 a.m.27 views

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2020-62338)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel that stems from the program's failure to properly handle memory objects. A remote attacker can exploit the vulnerability by means of a...

9.3CVSS8.4AI score0.1371EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/04/10 12:00 a.m.15 views

Microsoft Windows Jet Database Engine Remote Code Execution Vulnerability (CNVD-2019-09622)

Windows is a set of operating systems developed by Microsoft Corporation in the U.S. Windows uses a graphical model GUI.Microsoft Jet Database Engine is an underlying database engine. A remote code execution vulnerability exists in Microsoft Windows Jet Database Engine. The vulnerability stems fr...

9.3CVSS8.4AI score0.16119EPSS
SaveExploits0References1
Rows per page
Query Builder