Lucene search
K

565 matches found

BDU FSTEC
BDU FSTEC
added 2019/10/01 12:0 a.m.4 views

The vulnerability of the Microsoft JET Database Engine database driver on Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.11155EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:0 a.m.4 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created document or visiting a...

5.5CVSS5.5AI score0.01585EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:0 a.m.2 views

The vulnerability of the Windows AppX Deployment Server component on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows AppX Deployment Server component in Windows operating systems is related to errors in connection handling. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS5.5AI score0.01142EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2019/09/27 5:14 p.m.25 views

CVE-2019-11751

Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks on malicious links in a chat application. This can be used to write a log file to an arbitrary location such as the Windows 'Startup' folder. Note: this issue...

8.8CVSS9.5AI score0.01062EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2019/09/17 12:0 a.m.2 views

The vulnerability of the Windows Text Service Framework component in operating systems Windows, which allows a hacker to increase their privileges

The vulnerability of the Windows Text Service Framework component in operating systems exists due to insufficient checks on the input data at the TSF server. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS5.5AI score0.00577EPSS
Exploits0References2
Microsoft KB
Microsoft KB
added 2019/09/10 7:0 a.m.642 views

Security Update for Adobe Flash Player: September 10, 2019

Security Update for Adobe Flash Player: September 10, 2019 Summary This security update resolves vulnerabilities in Adobe Flash Player that is installed on any of the operating systems that are listed in the "Applies to" section. To learn more about these vulnerabilities, see ADV190022. More...

6.6AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2019/08/27 12:0 a.m.1 views

The vulnerability of RDP servers on Windows operating systems, which allows attackers to disclose sensitive information

The vulnerability of RDP servers on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created application...

7.8CVSS5.4AI score0.09503EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/07/18 12:0 a.m.2 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.06728EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/07/18 12:0 a.m.2 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the DirectWrite application programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.23668EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/27 12:0 a.m.1 views

The vulnerability of the Windows Audio service on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Audio service on Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges by using a specially created program...

7.8CVSS5.5AI score0.00884EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.3 views

The vulnerability of the Jet Database Engine database management system in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Jet Database Engine database management system for Windows operating systems relates to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS6.1AI score0.2021EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2019/05/19 11:32 p.m.4 views

Exploit for Use After Free in Microsoft

CVE-2019-0708-PoC-Hitting-Path Really Really Bad, don't judg...

10CVSS8.7AI score0.99999EPSS
Exploits123
BDU FSTEC
BDU FSTEC
added 2019/05/07 12:0 a.m.1 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS7.5AI score0.53298EPSS
Exploits10References2
NVD
NVD
added 2019/04/26 5:29 p.m.12 views

CVE-2019-9794

A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the...

9.8CVSS9.2AI score0.01774EPSS
Exploits0References4
NVD
NVD
added 2019/04/26 5:29 p.m.22 views

CVE-2019-9801

Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows operating systems. This should only happen if the program has specifically registered itself as a "URL Handler" in the Windows registry...

5.3CVSS5.6AI score0.0131EPSS
Exploits0References4
Cvelist
Cvelist
added 2019/04/26 4:13 p.m.23 views

CVE-2019-9801

Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows operating systems. This should only happen if the program has specifically registered itself as a "URL Handler" in the Windows registry...

6.3AI score0.0131EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2019/04/26 4:13 p.m.24 views

CVE-2019-9794

A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the...

9.8CVSS9.8AI score0.01774EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.3 views

The vulnerability of the Microsoft JET Database Engine database driver on Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft JET Database Engine database driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

9.3CVSS7.8AI score0.16119EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.4 views

Vulnerability of Windows operating systems, related to errors in memory object handling, allows attackers to gain unauthorized access to protected information.

The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS6.2AI score0.02127EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:0 a.m.4 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS7.6AI score0.0189EPSS
Exploits0References2
Rows per page
Query Builder