Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

D-Link DIR-600M Rev. Cx Cross-Site Request Forgery Vulnerability

The D-Link DIR-600M Rev. Cx is a wireless router product from AUO. A cross-site request forgery vulnerability exists in the D-Link DIR-600M Rev. Cx. It allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious operations in the context of the...

Sitecore CMS Cross-Site Scripting Vulnerability

Sitecore CMS is a content management system. A cross-site scripting vulnerability exists in Sitecore Experience Platform '/sitecore/client/Applications/List Manager/Taskpages/Contact list'. This allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-04301)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code in the context of a user running in an affected...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-04298)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code in the context of a user running in an affected...

Microsoft Windows IIS Privilege Escalation Vulnerability (4013074)

This host is missing an important security update according to Microsoft Bulletin MS17-016 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Apache Groovy CVE-2016-6814 Remote Code Execution Vulnerability

Description Apache Groovy is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Apache Groovy 2.4.4...

Multiple Cross-Site Request Forgery Vulnerabilities in Zimbra

Zimbra is an open source collaborative office suite that includes WebMail, calendar, address book, Web document management and authoring. Zimbra suffers from multiple cross-site request forgery vulnerabilities that allow remote attackers to construct malicious URIs, trick users into parsing them,...

FlightGear Arbitrary File Overwrite Vulnerability

FlightGear is an open source multi-platform flight simulator. The main goal is to create a cutting-edge flight simulator framework for the academic research field, which can also be expanded to include flight training, flight simulation, flight simulation games, and more. FlightGear suffers from ...

CVE-2016-6843

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code can be injected to contact names. When adding those contacts to a group, the script code gets executed in the context of the user which creates or changes the group by using autocomplete. In most cases this is a...

CVE-2016-4045

An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Script code can be embedded to RSS feeds using a URL notation. In case a user clicks the corresponding link at the RSS reader of App Suite, code gets executed at the context of the user. Malicious script code can be executed...

Open redirect

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code can be injected to contact names. When adding those contacts to a group, the script code gets executed in the context of the user which creates or changes the group by using autocomplete. In most cases this is a...

Open redirect

An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Script code can be embedded to RSS feeds using a URL notation. In case a user clicks the corresponding link at the RSS reader of App Suite, code gets executed at the context of the user. Malicious script code can be executed...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-12454)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. Microsoft Office suffers from a memory corruption vulnerability due to the program's failure to properly...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-12381)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A memory corruption vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code within the user context of an affected application. A failed exploit...

Adobe Flash Player Code Execution Vulnerability (CNVD-2016-12359)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A code execution vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code within the user context of an affected application. A failed exploit...