Lucene search
+L

1705 matches found

CNVD
CNVD
•added 2018/02/14 12:00 a.m.•14 views

Microsoft Edge scripting engine remote memory corruption vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation.Microsoft Edge is one of the web browsers that comes with the system.scripting engine is one of the JavaScript engine components. A remote memory corruption vulnerability exists in the Microsoft Edge scripting...

9.3CVSS7.3AI score0.1483EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/02/14 12:00 a.m.•47 views

Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-03515)

Microsoft Windows is a series of operating systems released by Microsoft Corporation.Edge is one of the browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and can also be used as a stand-alone JavaScript engine. A remote memory corruption...

7.6CVSS7.6AI score0.65312EPSS
SaveExploits4References1
Microsoft CVE
Microsoft CVE
•added 2018/02/13 8:00 a.m.•43 views

StructuredQuery Remote Code Execution Vulnerability

A remote code execution vulnerability exists in StructuredQuery when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative...

8.1CVSS2.4AI score0.16479EPSS
SaveExploits0
Symantec
Symantec
•added 2018/02/13 12:00 a.m.•60 views

Microsoft Windows StructuredQuery CVE-2018-0825 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current user. Failed exploit attempts may result in a denial of service condition. Technologies Affected Microsoft Windows 10 Version...

7.8AI score0.16479EPSS
SaveExploits0Affected Software3
NVD
NVD
•added 2018/01/23 1:29 a.m.•37 views

CVE-2017-16608

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within exec.jsp. The issue results from the lack of proper validation of a...

9.8CVSS9.7AI score0.04232EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2018/01/18 12:00 a.m.•17 views

The vulnerability of Microsoft Excel’s spreadsheet editor lies in its improper handling of objects in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

9.3CVSS6AI score0.09494EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2018/01/18 12:00 a.m.•14 views

The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

7.6CVSS6.2AI score0.0793EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2018/01/10 12:00 a.m.•124 views

Microsoft Word 2007 Service Pack 3 Multiple Vulnerabilities (KB4011657)

This host is missing a critical security update according to Microsoft KB4011657 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS8.7AI score0.95121EPSS
SaveExploits7References3
OpenVAS
OpenVAS
•added 2018/01/10 12:00 a.m.•50 views

Microsoft Excel Viewer 2007 Service Pack 3 Remote Code Execution Vulnerability (KB4011606)

This host is missing an important security update according to Microsoft KB4011606 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.3CVSS8.6AI score0.23257EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2018/01/09 12:00 a.m.•12 views

VulnCheck KEV: CVE-2018-0802

Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798...

9.3CVSS8.2AI score0.93289EPSS
SaveIn wildExploits7References58
Symantec
Symantec
•added 2018/01/03 12:00 a.m.•39 views

Microsoft Edge Scripting Engine CVE-2018-0773 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Edge Recommendations...

7.6CVSS7.8AI score0.08643EPSS
SaveExploits0
CNVD
CNVD
•added 2017/12/27 12:00 a.m.•14 views

NetGain Systems Enterprise Manager Remote Code Execution Vulnerability

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Enterprise Manager suffers from a remote code execution vulnerability in its implementation, which can be exploited by an attacker to execute arbitrary code in the current user context...

9.8CVSS8.5AI score0.04849EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/12/27 12:00 a.m.•19 views

NetGain Systems Enterprise Manager Remote Code Execution Vulnerability (CNVD-2018-01638)

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Enterprise Manager suffers from a remote code execution vulnerability in its implementation, which can be exploited by an attacker to execute arbitrary code in the current user context...

9.8CVSS8.5AI score0.04232EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/12/13 12:00 a.m.•6 views

Microsoft Windows Internet Explorer and Microsoft ChakraCore Remote Code Execution Vulnerability

Microsoft Windows is an operating system released by Microsoft Corporation.Internet Explorer IE is a web browser that comes with the Windows operating system.ChakraCore is the core of an open-source JavaScript engine used in IE, and can also be used as a stand-alone JavaScript engine. ChakraCore ...

7.6CVSS8.2AI score0.08643EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2017/12/12 9:29 p.m.•14 views

CVE-2017-11886

Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handle...

7.6CVSS6.1AI score0.68491EPSS
SaveExploits36References4
attackerkb
attackerkb
•added 2017/12/12 9:29 p.m.•8 views

CVE-2017-11908

ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889,...

7.6CVSS6AI score0.68491EPSS
SaveExploits36References4
Symantec
Symantec
•added 2017/12/12 12:00 a.m.•51 views

Microsoft Excel CVE-2017-11935 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...

9.3CVSS1.1AI score0.18881EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/12 12:00 a.m.•4 views

CVE-2017-11886: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handle...

7.6CVSS7.9AI score0.08643EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/11/16 12:00 a.m.•8 views

Microsoft Internet Explorer/Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-34715)

Internet Explorer is a web browser from Microsoft.Microsoft Edge is the web browser built into Windows 10 versions. Microsoft Edge/Microsoft Internet Explorer suffers from a memory corruption-wide vulnerability in the scripting engine implementation due to incorrect memory manipulation. An...

7.6CVSS7.3AI score0.08474EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/11/16 12:00 a.m.•8 views

Microsoft Internet Explorer/Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-34720)

Internet Explorer is a web browser from Microsoft.Microsoft Edge is the web browser built into Windows 10 versions. A memory corruption vulnerability exists in the scripting engine implementation of Microsoft Edge/Microsoft Internet Explorer, which can be exploited by an unauthenticated, remote...

7.5CVSS7.5AI score0.07701EPSS
SaveExploits0References1
Rows per page
Query Builder