Lucene search
+L

2244 matches found

CNVD
CNVD
added 2015/12/13 12:0 a.m.2 views

Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2015-08249)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory misreference vulnerability exists in Adobe Flash Player's handling of special...

9.3CVSS7.3AI score0.06538EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/12/09 12:0 a.m.7 views

Microsoft Windows Core Memory Privilege Elevation Vulnerability (CNVD-2015-08022)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the Microsoft Windows kernel that arises from a program's failure to properly handle objects in memory. An attacker can exploit the vulnerability to run...

7.2CVSS7.5AI score0.03109EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2015/12/09 12:0 a.m.3 views

PT-2015-2921 · Adobe +3 · Flash Player +4

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Adobe Integrated Runtime affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute...

10CVSS9.1AI score0.43408EPSS
SaveExploits21References439
Positive Technologies
Positive Technologies
added 2015/12/09 12:0 a.m.3 views

PT-2015-2832 · Adobe +3 · Flash Player +4

Name of the Vulnerable Software and Affected Versions: Adobe Integrated Runtime versions affected versions not specified Adobe Flash Player versions affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited by a remote...

10CVSS9.1AI score0.43408EPSS
SaveExploits21References439
Positive Technologies
Positive Technologies
added 2015/12/09 12:0 a.m.3 views

PT-2015-2860 · Adobe +3 · Integrated Runtime +4

Name of the Vulnerable Software and Affected Versions: Adobe Integrated Runtime and Flash Player affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: ...

10CVSS9.1AI score0.43408EPSS
SaveExploits21References439
CNVD
CNVD
added 2015/12/08 12:0 a.m.6 views

Google Chrome AppCache Memory Misreference Vulnerability (CNVD-2015-07956)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in the AppCache implementation of Google Chrome prior to version 47.0.2526.73. A remote attacker can exploit this vulnerability to cause a denial of service with renderer...

7.5CVSS8.8AI score0.01915EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2015/11/26 12:0 a.m.6 views

The vulnerabilities of Adobe Integrated Runtime and Flash Player software allow a perpetrator to execute arbitrary code.

The vulnerabilities of Adobe Integrated Runtime and Flash Player are related to the use of memory after it is freed. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code remotely...

10CVSS6AI score0.294EPSS
SaveExploits1References2Affected Software2
Prion
Prion
added 2015/11/19 8:59 p.m.20 views

Out-of-bounds

An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, which allows remote attackers to cause a denial of service out-of-bounds memory access...

7.8CVSS7.2AI score0.00967EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
added 2015/11/19 7:56 p.m.14 views

kernel: zero page memory arbitrary modification

mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of service page tainting via a crafted application that triggers writing to page zero...

7.8CVSS6.8AI score0.00479EPSS
SaveExploits0References4
CNVD
CNVD
added 2015/11/13 12:0 a.m.2 views

Adobe Flash Player & Compiler Memory Misreference Vulnerability (CNVD-2015-07613)

Adobe Flash Player, Adobe AIR SDK, and Adobe AIR SDK & Compiler are products of Adobe, Incorporated.Adobe Flash Player is a multimedia player; Adobe AIR SDK and Adobe AIR SDK & Compiler are standard development kits for Adobe AIR a cross-OS runtime environment. Adobe Flash Player is a multimedia...

9.3CVSS7.7AI score0.06171EPSS
SaveExploits0References1
Symantec
Symantec
added 2015/11/10 12:0 a.m.27 views

Microsoft Internet Explorer CVE-2015-6070 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

9.3CVSS0.7AI score0.13021EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2015/10/30 9:52 a.m.19 views

CVE-2013-4737

The CONFIGSTRICTMEMORYRWX implementation for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly consider certain memory sections, which makes it easier for attackers to bypass intended access restrictions by...

9.3CVSS7.2AI score0.01426EPSS
SaveExploits1References2
Xen Project
Xen Project
added 2015/10/29 11:59 a.m.78 views

x86: Long latency populate-on-demand operation is not preemptible

ISSUE DESCRIPTION When running an HVM domain in Populate-on-Demand mode, Xen would sometimes search the domain for memory to reclaim, in response to demands for population of other pages in the same domain. This search runs without preemption. The guest can, by suitable arrangement of its memory...

4.9CVSS7.1AI score0.00436EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2015/10/29 12:0 a.m.6 views

Apple Safari/iTunes WebKit Memory Corruption Vulnerability (CNVD-2015-07109)

IOS is an operating system developed by Apple for mobile devices; Safari is the latest operating system for Apple computers; the browser in Mac OS X; and iTunes is a digital media playback application. A security vulnerability exists in WebKit in Apple iOS versions prior to 9.1, Safari versions...

6.8CVSS7.6AI score0.02683EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2015/10/21 12:0 a.m.6 views

The vulnerability of the Mac OS X operating system allows a perpetrator to gain access to protected information in the kernel’s memory.

The vulnerability of the SMBClient component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an intruder, operating locally, to gain access to protected information in the kernel memory...

2.1CVSS5.5AI score0.00356EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2015/10/15 12:0 a.m.3 views

Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2015-06689)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory misreference vulnerability exists in Adobe Reader/Acrobat. This allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could crash the application or execute arbitrary code...

6.8CVSS7.3AI score0.05995EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/10/13 12:0 a.m.41 views

MS15-108: Security Update for JScript and VBScript to Address Remote Code Execution (3089659)

The VBScript and JScript engines on the remote host are affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in the VBScript and JScript engines due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by convincin...

9.3CVSS8.6AI score0.32285EPSS
SaveExploits3References5
BDU FSTEC
BDU FSTEC
added 2015/10/06 12:0 a.m.5 views

The vulnerability of the Flash Player and Adobe Integrated Runtime software allows a perpetrator to execute arbitrary code.

The vulnerability of the Flash Player and Adobe Integrated Runtime software-related programs is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS6.2AI score0.0484EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
added 2015/09/27 12:0 a.m.2 views

Adobe Flash Player Memory Error Reference Memory Corruption Vulnerability (CNVD-2015-06316)

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. A memory misreference vulnerability exists in Adobe Flash Player that could allow an...

10CVSS7.3AI score0.45511EPSS
SaveExploits1References1
CNVD
CNVD
added 2015/09/06 12:0 a.m.6 views

Google Chrome OpenJPEG Memory Misreference Vulnerability

Google Chrome is a WEB-based browser. A memory misreference vulnerability in the opjj2kcopydefaulttcpandcreatetcd function in j2k.c in OpenJPEG used in Google Chrome PDFium allows remote attackers to construct a malicious WEB page, which can be tricked into parsing by the user, and can crash the...

7.5CVSS9.4AI score0.02677EPSS
SaveExploits0References1
Rows per page
Query Builder