Lucene search
+L

1326 matches found

CNVD
CNVD
added 2016/02/23 12:0 a.m.6 views

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-01245)

Google Chrome is a popular web browser. Google Chrome fails to properly process JPEG2000 images, allowing remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by users, which can crash applications or execute arbitrary code...

6.8CVSS9AI score0.01883EPSS
SaveExploits0References1
Fedora
Fedora
added 2016/02/15 3:0 a.m.11 views

[SECURITY] Fedora 23 Update: php-5.6.18-1.fc23

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

0.4AI score
SaveExploits0
Cisco
Cisco
added 2016/02/10 10:0 p.m.43 views

Cisco Spark Representational State Transfer Interface Unauthorized Access Vulnerability

A vulnerability in the Representational State Transfer REST interface of Cisco Spark could allow an unauthenticated, remote attacker to make changes to an affected system system. The vulnerability is due to improper implementation of authorization controls when accessing certain web pages of the...

5CVSS7.6AI score0.01256EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/02/08 12:0 a.m.3 views

LEADTOOLS ActiveX control DLL Load Arbitrary Code Execution Vulnerability

LEADTOOLS ActiveX control is an ActiveX control. A security vulnerability exists in LEADTOOLS ActiveX control that allows remote attackers to construct malicious web pages that can be tricked into parsing, leading to arbitrary code execution...

7.9AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2016/01/29 12:0 a.m.7 views

Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to trigger service failures or execute arbitrary code.

The vulnerabilities of Microsoft Edge and Internet Explorer are caused by buffer overflow attacks. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

9.3CVSS6.4AI score0.16815EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/01/29 12:0 a.m.8 views

Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to trigger service failures or execute arbitrary code.

The vulnerabilities of Microsoft Edge and Internet Explorer are caused by buffer overflow attacks. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

9.3CVSS6.4AI score0.16815EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2016/01/28 12:0 a.m.10 views

Google Chrome Omnibox Security Bypass Vulnerability

Google Chrome is a web browser. Google V8 is one of the open source JavaScript engines. A security vulnerability in Google Chrome's Omnibox implementation allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing and falsifying the origin o...

6.5CVSS9AI score0.01662EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/01/15 12:0 a.m.8 views

Microsoft Edge Arbitrary Code Execution Vulnerability

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security vulnerability in Microsoft Edge's Chakra JavaScript engine allows a remote attacker to build special WEB pages that can be tricked into parsing by user...

9.3CVSS7.1AI score0.178EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/01/15 12:0 a.m.5 views

Microsoft Internet Explorer Security Mechanism Bypass Vulnerability (CNVD-2016-00287)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A security vulnerability exists in Microsoft Internet Explorer that could be exploited by remote attackers to construct malicious Web pages that could be tricked into parsin...

4.3CVSS6.8AI score0.28206EPSS
SaveExploits0References1
exploitpack
exploitpack
added 2015/12/26 12:0 a.m.33 views

AccessDiver 4.301 - Buffer Overflow

AccessDiver 4.301 - Buffer Overflow + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ACCESSDIVER-BUFFER-OVERFLOW.txt Vendor: ============== M. Jean Fages www.accessdiver.com circa 1998-2006 Product: =============================...

1.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2015/12/26 12:0 a.m.35 views

AccessDiver 4.301 - Buffer Overflow

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ACCESSDIVER-BUFFER-OVERFLOW.txt Vendor: ============== M. Jean Fages www.accessdiver.com circa 1998-2006 Product: ============================= AccessDiver V4.301 build 5888 AccessDiver is...

5.3AI score
SaveExploits0
CNVD
CNVD
added 2015/12/13 12:0 a.m.6 views

Apple OS X OpenGL Memory Corruption Arbitrary Code Execution Vulnerability (CNVD-2015-08150)

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles OpenGL with a memory corruption vulnerability that allows attackers to construct special WEB pages that can be tricked into loading by the user, which can crash the application or execute arbitrary code...

6.8CVSS7.3AI score0.02722EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/12/13 12:0 a.m.5 views

Apple OS X OpenGL Memory Corruption Arbitrary Code Execution Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles OpenGL with a memory corruption vulnerability that allows attackers to construct special WEB pages that can be tricked into loading by the user, which can crash the application or execute arbitrary code...

6.8CVSS7.3AI score0.02722EPSS
SaveExploits0References1
NVD
NVD
added 2015/12/12 11:59 a.m.17 views

CVE-2015-6395

Cisco Prime Service Catalog 10.0, 10.0R2, 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188...

6.5CVSS6.6AI score0.0151EPSS
SaveExploits0References2
0day.today
0day.today
added 2015/11/27 12:0 a.m.19 views

QuikCms 6.1 - CSRF Delete Web Pages Exploit

Exploit for php platform in category web applications Title : QuikCms 6.1 - CSRF Exploit Delete Web Pages Author : ZwX Vendor : http://opensolution.org/ Download Link : http://opensolution.org/download/home.html?sFile=Quick.Cmsv6.1-en.zip Version : 6.1 Security Level : Medium Tested Os : Windows ...

7.1AI score
SaveExploits0
myhack58
myhack58
added 2015/11/24 12:0 a.m.12 views

Advertising Alliance to morph hung it to the Union HackingTeam vulnerability weapons attack millions of Internet users-vulnerability warning-the black bar safety net

In the 1 1 month, 3 6 0 Internet Security Center monitoring to a product called“restartokwecha“Downloader Trojan to intercept the amount of surge,and its trace is found, the Trojan turned out from the PConline Pacific computer network, the 1ting a listen to the music network, the...

1AI score
SaveExploits0
CNVD
CNVD
added 2015/11/07 12:0 a.m.3 views

Mozilla Firefox and Firefox ESR Browser Engine Buffer Overflow Vulnerability

Mozilla Firefox is an open source web browser.Firefox ESR is an extended support version of Firefox. A security vulnerability exists in the browser engine of Mozilla Firefox that allows remote attackers to construct malicious WEB pages that can be tricked into parsing the application to perform...

7.5CVSS8.9AI score0.04219EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/11/04 12:0 a.m.35 views

Debian DSA-3391-1 : php-horde - security update

It was discovered that the web-based administration interface in the Horde Application Framework did not guard against Cross-Site Request Forgery CSRF attacks. As a result, other, malicious web pages could cause Horde applications to perform actions as the Horde user. The oldstable distribution...

6.8CVSS5.5AI score0.04116EPSS
SaveExploits5References4
BDU FSTEC
BDU FSTEC
added 2015/10/01 12:0 a.m.11 views

The vulnerability of the iOS operating system allows a hacker to replace the content of web pages.

The vulnerability of the Safari browser’s user interface on the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace a web page by changing its URL address...

4.3CVSS5.6AI score0.01915EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2015/09/27 12:0 a.m.7 views

Mozilla Firefox 'SavedStacks' Class Denial of Service Vulnerability

Mozilla Firefox is an open source web browser. A security vulnerability in the Mozilla Firefox JavaScript implementation of the 'SavedStacks' class allows remote attackers to construct malicious WEB pages that can crash an application by tricking the user into parsing them...

5.1CVSS8.9AI score0.03211EPSS
SaveExploits0References1
Rows per page
Query Builder