Lucene search
+L

217 matches found

ATTACKERKB
ATTACKERKB
added 2023/10/10 12:00 a.m.44 views

CVE-2023-36563

Microsoft WordPad Information Disclosure Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

6.5CVSS6.6AI score0.20719EPSS
SaveIn wildExploits0References2
CNNVD
CNNVD
added 2023/10/10 12:00 a.m.14 views

Microsoft WordPad 安全漏洞

Microsoft WordPad is a word processor from Microsoft USA. The Microsoft WordPad information disclosure vulnerability can be exploited by an attacker to obtain sensitive information...

6.5CVSS8.4AI score0.20719EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/10/10 12:00 a.m.15 views

PT-2023-5940

Name of the Vulnerable Software and Affected Versions Microsoft WordPad affected versions not specified Description The vulnerability in Microsoft WordPad is related to the disclosure of NTLM hashes, which can be exploited by attackers to obtain sensitive information. This issue can affect the...

7.8CVSS7.8AI score0.20719EPSS
SaveExploits0References43
Tenable Nessus
Tenable Nessus
added 2023/07/13 12:00 a.m.203 views

Office and Windows HTML Remote Code Execution Vulnerability (CVE-2023-36884) Mitigation

The remote system may be vulnerable to CVE-2023-36884 since it does not have the correct FEATUREBLOCKCROSSPROTOCOLFILENAVIGATION registry key mitigations applied as referenced in the vendor advisory. An unauthenticated, remote attacker could exploit this, by using specially-crafted Microsoft Offi...

8.9AI score0.98932EPSS
SaveExploits3References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:06 a.m.12 views

SUSE CVE-2008-4841

The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted 1 .doc, 2 .wri, or 3 .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: ...

9.3CVSS7.8AI score0.4303EPSS
SaveExploits7References3
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.72 views

Microsoft Office and WordPad Remote Code Execution Vulnerability

Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution...

9.3CVSS8.1AI score0.99933EPSS
SaveIn wildExploits30
Microsoft KB
Microsoft KB
added 2020/04/16 8:19 a.m.48 views

MS10-083: Vulnerability in COM Validation in Windows Shell and WordPad could allow remote code execution

Resolves a vulnerability in Microsoft Windows that could allow remote code execution if a user opened a specially crafted file using WordPad or selects or opens a shortcut file that is on a network or WebDAV share.Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue...

9.3CVSS6.5AI score0.28561EPSS
SaveExploits1
Exploit DB
Exploit DB
added 2020/04/03 12:00 a.m.211 views

AIDA64 Engineer 6.20.5300 - 'Report File' filename Buffer Overflow (SEH)

Exploit Title: AIDA64 Engineer 6.20.5300 - 'Report File' filename Buffer Overflow SEH Date: 2020-04-02 Exploit Author: Hodorsec Version: v6.20.5300 Software Link: http://download.aida64.com/aida64engineer620.exe Vendor Homepage: https://www.aida64.com/products/aida64-engineer Tested on: Win7 x86...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/04/01 12:00 a.m.210 views

10Strike LANState 9.32 - 'Force Check' Buffer Overflow (SEH)

Exploit Title: 10Strike LANState 9.32 - 'Force Check' Buffer Overflow SEH Date: 2020-04-01 Exploit Author: Hodorsec Version: v9.32 x86 Software Link: https://www.10-strike.com/lanstate/lanstate-setup.exe Vendor Homepage: https://www.freecommander.com Tested on: Win7 x86 SP1 - Build 7601...

5.3AI score
SaveExploits0
zdt
zdt
added 2020/04/01 12:00 a.m.205 views

10Strike LANState 9.32 - (Force Check) Buffer Overflow (SEH) Exploit

Exploit Title: 10Strike LANState 9.32 - 'Force Check' Buffer Overflow SEH Exploit Author: Hodorsec Version: v9.32 x86 Software Link: https://www.10-strike.com/lanstate/lanstate-setup.exe Vendor Homepage: https://www.freecommander.com Tested on: Win7 x86 SP1 - Build 7601 Description: - Exploits th...

SaveExploits0
zdt
zdt
added 2020/03/28 12:00 a.m.234 views

FreeCommander XE 2020 Pathname Buffer Overflow Exploit

!/usr/bin/python Exploit Title: FreeCommander XE 2020 - Pathname Buffer Overflow SEH Version: Build 810a 32-bit Software Link: https://freecommander.com/downloads/FreeCommanderXE-32-publicsetup.zip Exploit Author: Hodorsec email protected / email protected Vendor Homepage:...

0.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2018/07/13 12:00 a.m.35 views

Microsoft Windows WordPad Privilege Chaining Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists due to the fact that...

6.8CVSS3.7AI score0.03714EPSS
SaveExploits0References1
OSV
OSV
added 2018/07/11 12:29 a.m.10 views

CVE-2018-8307

A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server...

5.3CVSS5.8AI score0.03714EPSS
SaveExploits0References3
NVD
NVD
added 2018/07/11 12:29 a.m.30 views

CVE-2018-8307

A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server...

6.8CVSS5.2AI score0.03714EPSS
SaveExploits0References3
Prion
Prion
added 2018/07/11 12:29 a.m.31 views

Security feature bypass

A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server...

6.8CVSS5.3AI score0.03714EPSS
SaveExploits0References3Affected Software5
OpenVAS
OpenVAS
added 2018/07/11 12:00 a.m.150 views

Microsoft Windows Multiple Vulnerabilities (KB4338829)

This host is missing a critical security update according to Microsoft KB4338829 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.69009EPSS
SaveExploits8References1
OpenVAS
OpenVAS
added 2018/07/11 12:00 a.m.139 views

Microsoft Windows Multiple Vulnerabilities (KB4338814)

This host is missing a critical security update according to Microsoft KB4338814 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7AI score0.69009EPSS
SaveExploits8References1
OpenVAS
OpenVAS
added 2018/07/11 12:00 a.m.320 views

Microsoft Windows Multiple Vulnerabilities (KB4338815)

This host is missing a critical security update according to Microsoft KB4338815 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS7.7AI score0.93838EPSS
SaveExploits25References2
CNVD
CNVD
added 2018/07/11 12:00 a.m.18 views

Microsoft Windows WordPad Security Bypass Vulnerability

Microsoft Windows 7 and others are a series of operating systems released by Microsoft Corporation in the U.S. WordPad is one of the filters that is installed by default on all Windows systems. A security bypass vulnerability exists in Microsoft Windows WordPad, which arises from the program's...

6.8CVSS6.2AI score0.03714EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/07/11 12:00 a.m.38 views

CVE-2018-8307

A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server...

6.6AI score0.03714EPSS
SaveExploits0References3
Rows per page
Query Builder