Lucene search
+L

216 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2023/10/10 12:0 a.m.64 views

Microsoft WordPad Information Disclosure Vulnerability

Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure...

6.5CVSS6.5AI score0.20719EPSS
In wildExploits0
ATTACKERKB
ATTACKERKB
added 2023/10/10 12:0 a.m.43 views

CVE-2023-36563

Microsoft WordPad Information Disclosure Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

6.5CVSS6.6AI score0.20719EPSS
In wildExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/07/13 12:0 a.m.192 views

Office and Windows HTML Remote Code Execution Vulnerability (CVE-2023-36884) Mitigation

The remote system may be vulnerable to CVE-2023-36884 since it does not have the correct FEATUREBLOCKCROSSPROTOCOLFILENAVIGATION registry key mitigations applied as referenced in the vendor advisory. An unauthenticated, remote attacker could exploit this, by using specially-crafted Microsoft Offi...

8.9AI score0.98998EPSS
Exploits3References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:6 a.m.7 views

SUSE CVE-2008-4841

The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted 1 .doc, 2 .wri, or 3 .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: ...

9.3CVSS7.8AI score0.4303EPSS
Exploits6References3
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.35 views

Microsoft Office and WordPad Remote Code Execution Vulnerability

Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution...

9.3CVSS8.1AI score0.99933EPSS
In wildExploits29
Microsoft KB
Microsoft KB
added 2020/04/16 8:19 a.m.39 views

MS10-083: Vulnerability in COM Validation in Windows Shell and WordPad could allow remote code execution

Resolves a vulnerability in Microsoft Windows that could allow remote code execution if a user opened a specially crafted file using WordPad or selects or opens a shortcut file that is on a network or WebDAV share.Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue...

9.3CVSS6.5AI score0.28561EPSS
Exploits1
Exploit DB
Exploit DB
added 2020/04/03 12:0 a.m.204 views

AIDA64 Engineer 6.20.5300 - 'Report File' filename Buffer Overflow (SEH)

Exploit Title: AIDA64 Engineer 6.20.5300 - 'Report File' filename Buffer Overflow SEH Date: 2020-04-02 Exploit Author: Hodorsec Version: v6.20.5300 Software Link: http://download.aida64.com/aida64engineer620.exe Vendor Homepage: https://www.aida64.com/products/aida64-engineer Tested on: Win7 x86...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2020/04/01 12:0 a.m.202 views

10Strike LANState 9.32 - 'Force Check' Buffer Overflow (SEH)

Exploit Title: 10Strike LANState 9.32 - 'Force Check' Buffer Overflow SEH Date: 2020-04-01 Exploit Author: Hodorsec Version: v9.32 x86 Software Link: https://www.10-strike.com/lanstate/lanstate-setup.exe Vendor Homepage: https://www.freecommander.com Tested on: Win7 x86 SP1 - Build 7601...

7AI score
Exploits0
0day.today
0day.today
added 2020/04/01 12:0 a.m.201 views

10Strike LANState 9.32 - (Force Check) Buffer Overflow (SEH) Exploit

Exploit Title: 10Strike LANState 9.32 - 'Force Check' Buffer Overflow SEH Exploit Author: Hodorsec Version: v9.32 x86 Software Link: https://www.10-strike.com/lanstate/lanstate-setup.exe Vendor Homepage: https://www.freecommander.com Tested on: Win7 x86 SP1 - Build 7601 Description: - Exploits th...

Exploits0
0day.today
0day.today
added 2020/03/28 12:0 a.m.228 views

FreeCommander XE 2020 Pathname Buffer Overflow Exploit

!/usr/bin/python Exploit Title: FreeCommander XE 2020 - Pathname Buffer Overflow SEH Version: Build 810a 32-bit Software Link: https://freecommander.com/downloads/FreeCommanderXE-32-publicsetup.zip Exploit Author: Hodorsec email protected / email protected Vendor Homepage:...

0.1AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2018/07/13 12:0 a.m.32 views

Microsoft Windows WordPad Privilege Chaining Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists due to the fact that...

6.8CVSS3.7AI score0.03434EPSS
Exploits0References1
NVD
NVD
added 2018/07/11 12:29 a.m.20 views

CVE-2018-8307

A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server...

6.8CVSS5.2AI score0.03434EPSS
Exploits0References3
OSV
OSV
added 2018/07/11 12:29 a.m.5 views

CVE-2018-8307

A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server...

5.3CVSS5.8AI score0.03434EPSS
Exploits0References3
Prion
Prion
added 2018/07/11 12:29 a.m.26 views

Security feature bypass

A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server...

6.8CVSS5.3AI score0.03434EPSS
Exploits0References3Affected Software5
CVE
CVE
added 2018/07/11 12:0 a.m.126 views

CVE-2018-8307

CVE-2018-8307 is a WordPad security feature bypass affecting multiple Windows versions (e.g., Windows 7, 8.1, 10, and corresponding Server editions) where embedded OLE objects are improperly handled. The vulnerability is described as a bypass of security features when WordPad processes OLE object...

6.8CVSS6.5AI score0.03434EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2018/07/11 12:0 a.m.28 views

CVE-2018-8307

A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server...

6.6AI score0.03434EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2018/07/11 12:0 a.m.136 views

Microsoft Windows Multiple Vulnerabilities (KB4338829)

This host is missing a critical security update according to Microsoft KB4338829 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.70028EPSS
Exploits6References1
OpenVAS
OpenVAS
added 2018/07/11 12:0 a.m.286 views

Microsoft Windows Multiple Vulnerabilities (KB4338825)

This host is missing a critical security update according to Microsoft KB4338825 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7AI score0.71043EPSS
Exploits9References1
OpenVAS
OpenVAS
added 2018/07/11 12:0 a.m.55 views

Microsoft Windows Multiple Vulnerabilities (KB4338826)

This host is missing a critical security update according to Microsoft KB4338826 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7AI score0.71043EPSS
Exploits9References1
CNVD
CNVD
added 2018/07/11 12:0 a.m.5 views

Microsoft Windows WordPad Security Bypass Vulnerability

Microsoft Windows 7 and others are a series of operating systems released by Microsoft Corporation in the U.S. WordPad is one of the filters that is installed by default on all Windows systems. A security bypass vulnerability exists in Microsoft Windows WordPad, which arises from the program's...

6.8CVSS6.2AI score0.03434EPSS
Exploits0References1
Rows per page
Query Builder