1616 matches found
Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27404)
Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...
Microsoft Windows Remote Command Execution Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote command execution vulnerability exists in Microsoft Windows. An attacker could...
Microsoft Windows MS XML CVE-2019-0756 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the current user. Failed exploit attempts will likely cause a denial-of-service condition. Technologies Affected Microsoft Windows 10 Versi...
Microsoft Edge Chakra Scripting Engine CVE-2019-0611 Remote Memory Corruption Vulnerability
Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...
Microsoft Windows VBScript Engine CVE-2019-0665 Remote Memory Corruption Vulnerability
Description Microsoft Windows VBScript Engine is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause a denial of service conditions. Internet Explorer 10 and 11 are...
COYO Cross-Site Scripting Vulnerability
COYO is a social intranet software. COYO suffers from a cross-site scripting vulnerability. The vulnerability is due to a lack of URL validation by the program and can be exploited by an attacker to execute javascript code in the user context using malicious use of missed access...
The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a...
Updated flash-player-plugin packages fix security vulnerability
Information disclosure in the context of the current user. CVE-2019-7090...
Microsoft Edge Buffer Overflow Vulnerability (CNVD-2019-27381)
Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge that stems from a program not properly accessing objects in memory. An attacker can exploit the vulnerability to...
Microsoft Edge Buffer Overflow Vulnerability (CNVD-2019-27391)
Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge that stems from a program not properly accessing objects in memory. An attacker can exploit the vulnerability to...
Adobe Acrobat 2017 Security Updates (APSB19-07) - Windows
Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27386)
Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...
Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27389)
Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge and ChakraCore. An attacker can exploit this vulnerability to execute arbitrary code in the context of the curre...
Microsoft Edge Buffer Overflow Vulnerability
Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge that stems from a program not properly accessing objects in memory. An attacker can exploit the vulnerability to...
Adobe Flash Player Within Google Chrome Security Update (APSB19-06) - Mac OS X
Adobe Flash Player is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Flash Player Within Google Chrome Security Update (APSB19-06) - Linux
Adobe Flash Player is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2019-04919)
Cisco Firepower Management Center is a Cisco device management application. A cross-site scripting vulnerability exists in the web-based management interface in Cisco FMC, which arises from a program that fails to adequately validate user-submitted input, and can be exploited by a remote attacker...
Cisco Webex Teams Cisco Spark URI Handler Remote Command Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Webex Cisco Spark. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. There is an issue with the way the product handles URIs within...
The vulnerability of the Windows Theme API component of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.
The vulnerability of the Windows Theme API component of the operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created file...