Symantec Messaging Gateway Cross-Site Request Forgery Vulnerability (CNVD-2017-28445)

Symantec Messaging Gateway is Symantec's email virus protection software. Symantec Messaging Gateway suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs and trick users into parsing them, which can perform malicious actions in the conte...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

Apache Storm Code Execution Vulnerability

Apache Storm is a free and open source distributed real-time computing system. Apache Storm suffers from a code execution vulnerability that can be exploited by an attacker to execute arbitrary code in the context of different users...

Microsoft Edge Remote Code Execution Vulnerability (CNVD-2017-24171)

Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. A remote code execution vulnerability exists in Microsoft Internet Explorer. An attacker can...

CVE-2017-8651

Internet Explorer in Microsoft Windows Server 2008 SP2 and Windows Server 2012 allows an attacker to execute arbitrary code in the context of the current user due to Internet Explorer improperly accessing objects in memory, aka "Internet Explorer Memory Corruption Vulnerability"...

Memory corruption

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to Microsoft browsers...

Memory corruption

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to Microsoft...

The vulnerability of the Microsoft Edge browser’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Edge browser’s kernel relates to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user memory corruption...

The vulnerability of the Internet Explorer browser’s memory handler on the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Internet Explorer browser’s memory handler in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

The vulnerability of JavaScript handlers in the Microsoft Edge browser for the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of Microsoft Edge’s JavaScript handlers arises from an operation going beyond the buffer boundaries due to a memory object processing error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

The vulnerability of JavaScript handlers in the Microsoft Edge browser for the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of Microsoft Edge’s JavaScript handlers arises from an operation going beyond the buffer boundaries due to a memory object processing error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

The vulnerability of JavaScript handlers in the Microsoft Edge browser for the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of Microsoft Edge’s JavaScript handlers arises from an operation going beyond the buffer boundaries due to a memory object processing error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

Trend Micro InterScan Messaging Security Proxy Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro InterScan Messaging Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code in the context of the current user

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code in the context of the current user

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code in the context of the current user

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

CVE-2017-1000033

Wordpress Plugin Vospari Forms version 1.4 is vulnerable to a reflected cross site scripting in the form submission resulting in javascript code execution in the context on the current user...

Microsoft Office 2007 Service Pack 3 Remote Code Execution Vulnerability (KB2880514)

This host is missing an important security update according to Microsoft KB2880514 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14609)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle memory objects and has a remote memory corruption vulnerability in its implementation that can be exploited by an attacker to execute arbitrary code in the current user context...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14450)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists where Microsoft Edge fails to properly handle memory objects. An attacker can exploit the vulnerability to execute arbitrary code in the current user context...