Lucene search
+L

804 matches found

Positive Technologies
Positive Technologies
•added 2020/01/14 12:00 a.m.•8 views

PT-2020-1296 · Microsoft +2 · Asp.Net Core +2

Name of the Vulnerable Software and Affected Versions: ASP.NET Core affected versions not specified Description: A remote code execution issue exists due to errors in handling objects in memory. Successful exploitation by a remote attacker could allow the execution of arbitrary code in the contex...

10CVSS8.2AI score0.21007EPSS
SaveExploits0References18
BDU FSTEC
BDU FSTEC
•added 2019/12/17 12:00 a.m.•15 views

The vulnerability in the Microsoft PowerPoint presentation preparation and viewing software, as well as in the Microsoft Office and Office 365 programs, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft PowerPoint presentation preparation and viewing programs, as well as Microsoft Office and Office 365 suites, is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted web...

7.8CVSS8AI score0.17679EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2019/12/17 12:00 a.m.•16 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS7.2AI score0.01547EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/12/17 12:00 a.m.•15 views

The vulnerability of the Windows Jet Database Engine component allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component in the operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

7.8CVSS7.2AI score0.1927EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/12/17 12:00 a.m.•12 views

The vulnerability of the Windows Media Player component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of Windows Media Player on the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created file...

5.5CVSS5.5AI score0.16889EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2019/12/17 12:00 a.m.•19 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS7.1AI score0.02876EPSS
SaveExploits2References4
CNVD
CNVD
•added 2019/12/13 12:00 a.m.•26 views

Microsoft Word Denial of Service Vulnerability

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A denial of service vulnerability exists in Microsoft Word, which arises from the program's failure to properly handle objects in memory. An attacker can cause a denial of service by exploiti...

7.1CVSS6.6AI score0.04972EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/12/13 12:00 a.m.•7 views

The vulnerability of Firefox browser, related to errors in memory object handling, allows attackers to execute arbitrary code.

The vulnerability of the Firefox browser is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.02198EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2019/12/13 12:00 a.m.•11 views

The vulnerabilities of Firefox, Firefox ESR, and the email client Thunderbird, related to errors in memory object handling, allow attackers to execute arbitrary code.

The vulnerabilities of the web browsers Firefox, Firefox ESR, and the email client Thunderbird are related to errors in memory object handling. Allowing these vulnerabilities to be exploited allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.0298EPSS
SaveExploits0References10Affected Software7
BDU FSTEC
BDU FSTEC
•added 2019/12/13 12:00 a.m.•16 views

The vulnerability of the sscanf function in the newsrc.c file of the NeoMutt email client allows a hacker to execute arbitrary code due to errors in memory object handling.

The vulnerability of the sscanf function in the newsrc.c file of the NeoMutt email client is related to errors in processing objects in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.02651EPSS
SaveExploits0References5Affected Software2
OSV
OSV
•added 2019/12/10 10:15 p.m.•5 views

CVE-2019-1485

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'...

7.5CVSS7.7AI score0.08205EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/12/09 12:00 a.m.•11 views

The vulnerability of the Windows Modules Installer Service component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Modules Installer Service component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.3CVSS5.4AI score0.01745EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/12/09 12:00 a.m.•15 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially crafted document or web page...

6.5CVSS5.9AI score0.05233EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2019/12/09 12:00 a.m.•19 views

The vulnerability of the Windows Installer component allows attackers to exploit their privileges.

The vulnerability of the Windows Installer component in operating systems is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.1AI score0.00842EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/12/03 12:00 a.m.•11 views

The vulnerability of the Windows GDI component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

6.5CVSS6.1AI score0.75403EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/12/03 12:00 a.m.•17 views

The vulnerability of the Microsoft Office suite relates to errors in memory object handling, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.02352EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/12/03 12:00 a.m.•14 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.01212EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2019/12/03 12:00 a.m.•14 views

The vulnerability of the Win32k component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.02093EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/11/25 12:00 a.m.•14 views

The vulnerability of the Media Foundation component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Media Foundation component in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created QuickTime file...

7.3CVSS7.6AI score0.13843EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/11/25 12:00 a.m.•24 views

The vulnerability of the Internet Explorer browser script handler allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, or to cause a service failure through a specially created web...

7.6CVSS7.4AI score0.7729EPSS
SaveExploits4References4Affected Software1
Rows per page
Query Builder