Lucene search
+L

2586 matches found

BDU FSTEC
BDU FSTEC
added 2019/01/10 12:0 a.m.15 views

The vulnerability affects the Microsoft Graphics component in the Microsoft Excel Viewer, Microsoft Office applications and Office 365, the Microsoft Office Compatibility Pack, the Microsoft Windows operating system, the Microsoft PowerPoint Viewer for presentation viewing, and the Microsoft Office Word Viewer for document reading. This allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Graphics component in the Microsoft Excel Viewer, a spreadsheet software; Microsoft Office and Office 365 applications; the Microsoft Office Compatibility Pack; the Microsoft Windows operating system; the Microsoft PowerPoint Viewer, a presentation software; and...

5.1CVSS7.9AI score0.19629EPSS
SaveExploits0References4
CNVD
CNVD
added 2019/01/09 12:0 a.m.10 views

Microsoft Windows COM Privilege Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows COM Desktop Broker is one of the COM desktop agent programs. An elevation of privilege vulnerability exists in Microsoft Windows COM Desktop Broker, which can be exploited by an...

8.8CVSS9AI score0.02539EPSS
SaveExploits3References1
OSV
OSV
added 2019/01/08 9:29 p.m.4 views

CVE-2019-0577

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows...

7.8CVSS7.9AI score0.17347EPSS
SaveExploits1References2
OSV
OSV
added 2019/01/08 9:29 p.m.6 views

CVE-2019-0538

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows...

7.8CVSS7.8AI score0.20505EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:0 a.m.9 views

The vulnerability of the Microsoft Windows operating system, related to errors in memory object handling, allows a perpetrator to trigger a service failure.

The vulnerability of the Connected User Experience and Telemetry Service services in the Microsoft Windows operating system is related to improper handling of objects in memory. Exploiting this vulnerability can allow a local attacker to cause service failures through a specially created...

4.7CVSS6.8AI score0.01424EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:0 a.m.13 views

The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a malicious actor to execute arbitrary code in kernel mode.

The vulnerability of the Win32k component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created application...

7CVSS8.1AI score0.01116EPSS
SaveExploits0References4
CNVD
CNVD
added 2018/12/21 12:0 a.m.51 views

Microsoft Internet Explorer Scripting Engine Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A remote code execution vulnerability exists in the way memory objects are handled in the scripting engine of Microsoft IE 9, 10, an...

7.6CVSS8.5AI score0.24305EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.16 views

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to increase their privileges and execute arbitrary code.

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially crafted application...

8.4CVSS8.2AI score0.04196EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.13 views

The vulnerability of the PowerShell command interpreter for Windows operating systems allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the PowerShell command interpreter for Windows operating systems is related to errors in processing objects in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges and execute arbitrary code using a specially crafted application...

3.3CVSS8.3AI score0.01185EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2018/12/12 12:0 a.m.10 views

Microsoft Windows Win32k Privilege Mobilization Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Win32k is a 32-bit environment for one of these operating systems. A lift vulnerability exists in the Microsoft Win32k component that stems from a program's failure to properly handle...

8.4CVSS7.3AI score0.22179EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2018/12/11 12:0 a.m.1576 views

KLA11389 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR

Multiple serious vulnerabilities were found in Mozilla Firefox and Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1...

9.9CVSS10AI score0.09646EPSS
SaveExploits2References6
BDU FSTEC
BDU FSTEC
added 2018/12/07 12:0 a.m.13 views

The vulnerability of the DirectX component in the Windows operating system allows attackers to elevate their privileges and execute arbitrary code in kernel mode.

The vulnerability of the DirectX component of the Windows operating system exists due to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...

7CVSS8.2AI score0.01193EPSS
SaveExploits0References6
Securelist
Securelist
added 2018/12/04 12:0 p.m.71 views

KoffeyMaker: notebook vs. ATM

Despite CCTV and the risk of being caught by security staff, attacks on ATMs using a direct connection — so-called black box attacks — are still popular with cybercriminals. The main reason is the low "entry requirements" for would-be cyber-robbers: specialized sites offer both the necessary tool...

0.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:0 a.m.11 views

The vulnerability of the Win32k component of the Windows operating system allows a hacker to increase their privileges and execute arbitrary code in kernel mode.

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...

7CVSS8.2AI score0.01348EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:0 a.m.13 views

The vulnerability of the DirectX component in the Windows operating system allows attackers to elevate their privileges and execute arbitrary code in kernel mode.

The vulnerability of the DirectX component in the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...

7CVSS8.2AI score0.01193EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:0 a.m.13 views

Vulnerability of the Microsoft Graphics component in the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Graphics component in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

10CVSS8.4AI score0.19059EPSS
SaveExploits0References5
n0where
n0where
added 2018/12/03 10:47 p.m.66 views

Powershell Script for Enumerating Vulnerable DCOM Applications: DCOMrade

DCOMrade is a Powershell script that is able to enumerate the possible vulnerable DCOM applications that might allow for lateral movement, code execution, data exfiltration, etc. The script is build to work with Powershell 2.0 but will work with all versions above as well. The script currently...

SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2018/11/23 12:0 a.m.8 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems stems from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted files in the Advanced Recordin...

7.8CVSS6AI score0.02125EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2018/11/20 12:0 a.m.12 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems stems from insufficient validation of input data, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted files in the Advanced Recordin...

7.8CVSS6AI score0.02015EPSS
SaveExploits0References4Affected Software5
CNVD
CNVD
added 2018/11/15 12:0 a.m.15 views

Microsoft Windows COM Aggregate Marshaler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 and others are operating systems released by Microsoft Corporation USA.Windows COM Aggregate Marshaler is one of the components. An elevation of privilege vulnerability exists in Microsoft Windows COM Aggregate Marshaler. An attacker can exploit this vulnerability an...

7.8CVSS8.8AI score0.03295EPSS
SaveExploits4References1
Rows per page
Query Builder