Lucene search
+L

2171 matches found

CNVD
CNVD
•added 2019/04/10 12:00 a.m.•19 views

Microsoft Internet Explorer VBScript Engine Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in Microsoft Internet Explorer VBScript Engine. An attacker could exploit this vulnerability to execute arbitrary code in...

7.6CVSS8.2AI score0.11107EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/04/10 12:00 a.m.•21 views

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege-lifting vulnerability exists in Microsoft Windows that stems from Windows'...

7.8CVSS8.5AI score0.04352EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
•added 2019/04/04 12:00 a.m.•6 views

PT-2019-1846 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in object handling in memory within the Win32k component of the Windows operating system. This can allow a remote attacker to elevate their...

7.8CVSS7.3AI score0.44954EPSS
SaveExploits26References16
OSV
OSV
•added 2019/04/03 6:29 p.m.•7 views

DEBIAN-CVE-2018-4345

A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

6.1CVSS7.7AI score0.01471EPSS
SaveExploits0References1
OSV
OSV
•added 2019/04/03 6:29 p.m.•9 views

UBUNTU-CVE-2018-4271

Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

6.5CVSS6.9AI score0.01608EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/03/27 12:00 a.m.•18 views

The vulnerability of the Microsoft XML Core Services MSXML on the Windows operating system allows a hacker to execute malicious code and gain control over the system.

The vulnerability of the Microsoft XML Core Services MSXML in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to execute malicious code remotely and gain control over the system...

7.6CVSS7.8AI score0.12499EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/03/27 12:00 a.m.•14 views

The vulnerability of the comctl32.dll file in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the comctl32.dll file in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS8.2AI score0.14334EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/03/27 12:00 a.m.•18 views

The vulnerability of the VBScript mechanism in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the VBScript mechanism in the Windows operating system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

7.6CVSS8.2AI score0.1316EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/03/22 12:00 a.m.•12 views

The vulnerability of the Active Directory Forest catalog service for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Active Directory catalog service for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

7.8CVSS6.9AI score0.03357EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/03/22 12:00 a.m.•18 views

The vulnerability of the Microsoft XML Core Services on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft XML Core Services on the Windows operating system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote...

7.5CVSS8.4AI score0.22094EPSS
SaveExploits0References3
OSV
OSV
•added 2019/03/14 8:29 p.m.•11 views

CVE-2018-12218

Unhandled exception in User Mode Driver in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 potentially enables an unprivileged user to cause a memory lea...

3.3CVSS5.8AI score0.00307EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/03/14 12:00 a.m.•14 views

Microsoft Internet Explorer VBScript Engine Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A remote code execution vulnerability exists in the way memory objects are handled in the VBScript Engine of...

7.6CVSS7.9AI score0.20403EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/03/14 12:00 a.m.•18 views

Microsoft Internet Explorer VBScript Engine Remote Memory Corruption Vulnerability (CNVD-2019-10618)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A remote memory corruption vulnerability exists in the way memory objects are handled in the VBScript Engine o...

7.6CVSS7.4AI score0.08261EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/03/13 12:00 a.m.•19 views

Microsoft Windows GDI Information Disclosure Vulnerability (CNVD-2019-16754)

Microsoft Windows Server and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.Windows Graphics Device Interface GDI is one of the graphics device...

6.5CVSS5.9AI score0.06553EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/03/13 12:00 a.m.•20 views

Microsoft Windows GDI Information Disclosure Vulnerability (CNVD-2019-16753)

Microsoft Windows Server and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.Windows Graphics Device Interface GDI is one of the graphics device...

6.5CVSS5.8AI score0.0699EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/03/01 12:00 a.m.•15 views

The vulnerability of Human Interface Devices’ components in the Windows operating system, which allows a intruder to disclose protected information

The vulnerability of Human Interface Devices in the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

4.7CVSS6.5AI score0.0185EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/03/01 12:00 a.m.•14 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

4.7CVSS6.6AI score0.07708EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/03/01 12:00 a.m.•19 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

10CVSS6.6AI score0.67008EPSS
SaveExploits0References3
Prion
Prion
•added 2019/02/28 6:29 p.m.•28 views

Code injection

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

6.8CVSS8.3AI score0.01179EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/02/26 12:00 a.m.•15 views

The vulnerability of Microsoft Hyper-V hardware virtualization technology in the Windows operating system allows a perpetrator to compromise the confidentiality of protected information.

The vulnerability of Microsoft Hyper-V hardware virtualization technology in the Windows operating system is related to the lack of protection for mission-critical data. Exploiting this vulnerability can allow attackers to compromise the confidentiality of protected information through a speciall...

5.4CVSS7.1AI score0.02435EPSS
SaveExploits0References3
Rows per page
Query Builder