Lucene search
+L

1997 matches found

CNVD
CNVD
added 2019/03/13 12:0 a.m.9 views

Microsoft Windows GDI Information Disclosure Vulnerability (CNVD-2019-16753)

Microsoft Windows Server and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.Windows Graphics Device Interface GDI is one of the graphics device...

6.5CVSS5.8AI score0.0699EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:0 a.m.9 views

The vulnerability of Human Interface Devices’ components in the Windows operating system, which allows a intruder to disclose protected information

The vulnerability of Human Interface Devices in the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

4.7CVSS6.5AI score0.0185EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:0 a.m.8 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

4.7CVSS6.6AI score0.07708EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:0 a.m.11 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

10CVSS6.6AI score0.67008EPSS
SaveExploits0References3
Prion
Prion
added 2019/02/28 6:29 p.m.24 views

Code injection

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

6.8CVSS8.3AI score0.01179EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:0 a.m.6 views

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to circumvent the User Mode Code Integrity Policy (UMCI).

The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to bypass the User Mode Code Integrity Policy UMCI...

5.3CVSS7.5AI score0.01349EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:0 a.m.11 views

The vulnerability of Microsoft Hyper-V hardware virtualization technology in the Windows operating system allows a perpetrator to compromise the confidentiality of protected information.

The vulnerability of Microsoft Hyper-V hardware virtualization technology in the Windows operating system is related to the lack of protection for mission-critical data. Exploiting this vulnerability can allow attackers to compromise the confidentiality of protected information through a speciall...

5.4CVSS7.1AI score0.02435EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:0 a.m.13 views

The vulnerability of the SMBv2 component of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the SMBv2 component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code by sending a specially crafted package to the SMBv2 server...

8.5CVSS8.2AI score0.17843EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/02/07 12:0 a.m.12 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted ARF or WR...

7.8CVSS7.9AI score0.0148EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/01/22 12:0 a.m.11 views

The vulnerability of the Microsoft JET Database Engine database driver on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.7AI score0.16084EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/01/22 12:0 a.m.19 views

The vulnerability of the Microsoft JET Database Engine database driver on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.7AI score0.13596EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/01/22 12:0 a.m.10 views

The vulnerability of the Microsoft JET Database Engine database driver on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.7AI score0.17347EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2019/01/18 12:0 a.m.13 views

The vulnerability of the COM Desktop Broker component of the Windows operating system allows a hacker to execute arbitrary code with elevated privileges.

The vulnerability of the COM Desktop Broker component in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially created applicatio...

7CVSS8.2AI score0.02539EPSS
SaveExploits3References3
BDU FSTEC
BDU FSTEC
added 2019/01/18 12:0 a.m.20 views

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to execute processes with elevated privileges.

The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.3AI score0.04718EPSS
SaveExploits3References4
BDU FSTEC
BDU FSTEC
added 2019/01/18 12:0 a.m.8 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to deficiencies in the authentication process of the guest operating system. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created...

7.6CVSS8.1AI score0.04457EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/01/18 12:0 a.m.13 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to deficiencies in the authentication process of the guest operating system. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created...

7.6CVSS7.9AI score0.04457EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/01/15 12:0 a.m.6 views

The vulnerability of the DirectX Graphic Kernel component of the Windows operating system’s application programming interfaces allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphic Kernel component of the Windows operating system’s application interfaces is related to errors in the memory object storage mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially crafted application...

7.8CVSS7.3AI score0.01182EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/01/10 12:0 a.m.8 views

The vulnerability of the Graphics Device Interface (GDI) component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the Graphics Device Interface GDI component in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

4.7CVSS6.7AI score0.18869EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/01/10 12:0 a.m.13 views

The vulnerability affects the Microsoft Graphics component in the Microsoft Excel Viewer, Microsoft Office applications and Office 365, the Microsoft Office Compatibility Pack, the Microsoft Windows operating system, the Microsoft PowerPoint Viewer for presentation viewing, and the Microsoft Office Word Viewer for document reading. This allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Graphics component in the Microsoft Excel Viewer, a spreadsheet software; Microsoft Office and Office 365 applications; the Microsoft Office Compatibility Pack; the Microsoft Windows operating system; the Microsoft PowerPoint Viewer, a presentation software; and...

5.1CVSS7.9AI score0.19629EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/01/10 12:0 a.m.14 views

The vulnerability of the Windows Media Player component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of Windows Media Player on the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to determine whether files exist on the disk by using a specially created hyperlink...

4CVSS6.6AI score0.05141EPSS
SaveExploits0References4
Rows per page
Query Builder