Lucene search
+L

1638 matches found

CNVD
CNVD
added 2017/07/12 12:00 a.m.17 views

Microsoft Office Remote Code Execution Vulnerability (CNVD-2017-16982)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A remote code execution vulnerability exists in Microsoft Office's handling of memory objects, which could allow an attacker to perform an operation in the current user security context vi...

9.3CVSS7.8AI score0.20051EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/07/12 12:00 a.m.14 views

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14448)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle memory objects and is implemented with a remote memory corruption vulnerability that allows an attacker to execute arbitrary code in the current user context...

7.6CVSS7.7AI score0.08609EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/07/12 12:00 a.m.11 views

Microsoft Edge Remote Code Execution Vulnerability (CNVD-2017-14640)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge does not properly handle memory objects and has a remote code execution vulnerability in its implementation that could be exploited by an attacker to execute arbitrary code in the current user context...

7.6CVSS8.3AI score0.11441EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/07/12 12:00 a.m.10 views

Microsoft Edge Remote Code Execution Vulnerability (CNVD-2017-14639)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle in-memory objects and has a remote code execution vulnerability in its implementation that could lead an attacker to execute arbitrary code in the current user context...

7.6CVSS8.3AI score0.16201EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/07/12 12:00 a.m.9 views

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14607)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle memory objects and is implemented with a remote memory corruption vulnerability that can be exploited by an attacker to execute arbitrary code in the current user context...

7.6CVSS7.7AI score0.09438EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/07/12 12:00 a.m.7 views

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14451)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle in-memory objects, and a remote code execution vulnerability exists in the scripting engine presentation, where an attacker could execute arbitrary code in the current user context...

7.6CVSS7.9AI score0.09438EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/07/12 12:00 a.m.33 views

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2017-14447)

Internet Explorer is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer prior to version 6 and Windows Internet Explorer versions 7, 8, 9, 10, 11, or IE for short. Microsoft Internet Explorer fails to properly access memory objects and is implemented with a remote memory...

7.6CVSS7.8AI score0.38168EPSS
SaveExploits4References1
CNVD
CNVD
added 2017/07/12 12:00 a.m.6 views

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14642)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle memory objects and is implemented with a remote memory corruption vulnerability that can be exploited by an attacker to execute arbitrary code in the current user context...

7.6CVSS7.7AI score0.09438EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/07/12 12:00 a.m.11 views

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14449)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle memory objects and is implemented with a remote memory corruption vulnerability that can be exploited by an attacker to execute arbitrary code in the current user context...

7.6CVSS7.7AI score0.06459EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/07/12 12:00 a.m.8 views

Microsoft Office Remote Code Execution Vulnerability (CNVD-2017-16983)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A remote code execution vulnerability exists in Microsoft Office's handling of memory objects, which could allow an attacker to perform an operation in the current user security context vi...

9.3CVSS7.8AI score0.89889EPSS
SaveExploits14References1
Prion
Prion
added 2017/07/11 9:29 p.m.31 views

Memory corruption

Microsoft Internet Explorer in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Internet Explorer, aka...

7.6CVSS7.7AI score0.54951EPSS
SaveExploits9References3
Microsoft CVE
Microsoft CVE
added 2017/07/11 7:00 a.m.36 views

Windows Explorer Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Windows Explorer improperly handles executable files and shares during rename operations. An attacker who successfully exploited this vulnerability could run arbitrary code in the context of another user. Users not running as administrators would ...

9.3CVSS4.9AI score0.17978EPSS
SaveExploits0
CNVD
CNVD
added 2017/07/07 12:00 a.m.10 views

Aruba Networks ClearPass Policy Manager SQL Injection Vulnerability

Aruba Networks ClearPass Policy Manager is a BYOD network access control policy enforcement platform. An SQL injection vulnerability in Aruba Networks ClearPass Policy Manager allows remote attackers to construct malicious URIs, trick users into parsing them, and perform malicious actions in the...

9.8CVSS9.8AI score0.00966EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2017/06/30 12:00 a.m.13 views

The vulnerability in the JavaScript kernel of Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability in the Microsoft Edge JavaScript kernel relates to improper access to objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

7.6CVSS8AI score0.08975EPSS
SaveExploits0References3
CNVD
CNVD
added 2017/06/27 12:00 a.m.5 views

D-Link DIR-100 Cross-Site Request Forgery Vulnerability

The D-Link DIR-100 is a compact broadband router with integrated firewall functionality. A cross-site request forgery vulnerability exists in D-Link DIR-100 version 1.01. It allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in th...

7AI score
SaveExploits0References1
OSV
OSV
added 2017/06/15 1:29 a.m.5 views

CVE-2017-8519

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory, aka "Internet...

7.5CVSS6.1AI score0.06415EPSS
SaveExploits0References2
CNVD
CNVD
added 2017/06/15 12:00 a.m.34 views

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-12098)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A remote memory corruption vulnerability exists in Microsoft Edge. A remote attacker can exploit this vulnerability to execute arbitrary code or cause a denial of...

7.6CVSS7.7AI score0.08975EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/06/15 12:00 a.m.14 views

Microsoft Windows Remote Code Execution Vulnerability (CNVD-2017-12780)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service in the current user context...

9.3CVSS8.3AI score0.15247EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2017/06/15 12:00 a.m.63 views

Microsoft SharePoint Server Multiple RCE Vulnerabilities (KB3172445)

This host is missing an important security update according to Microsoft KB3172445 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS7.7AI score0.19441EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2017/06/15 12:00 a.m.57 views

Microsoft SharePoint Enterprise Server Remote Code Execution Vulnerability (KB3203430)

This host is missing an important security update according to Microsoft KB3203430. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS7.7AI score0.16808EPSS
SaveExploits0References2
Rows per page
Query Builder