Lucene search
+L

10860 matches found

Microsoft CVE
Microsoft CVE
added 2017/12/12 8:00 a.m.24 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

7.6CVSS7.9AI score0.08474EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/12/12 8:00 a.m.35 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

7.6CVSS7.9AI score0.50051EPSS
SaveExploits5
Microsoft CVE
Microsoft CVE
added 2017/12/12 8:00 a.m.22 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

7.6CVSS7.9AI score0.08474EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/12/12 8:00 a.m.37 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

7.6CVSS7.9AI score0.07912EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/12/12 8:00 a.m.30 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

7.6CVSS7.9AI score0.08643EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2017/12/12 12:00 a.m.76 views

Adobe Flash Player <= 27.0.0.187 (APSB17-42)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 27.0.0.187. It is, therefore, affected by a vulnerability which may allow an attacker to reset the global settings preference file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

6.5CVSS6.9AI score0.03642EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2017/11/30 12:00 a.m.64 views

Security Updates for Internet Explorer (August 2017)

The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft browsers. The vulnerability...

7.6CVSS8.6AI score0.72116EPSS
SaveExploits21References11
Microsoft CVE
Microsoft CVE
added 2017/11/14 8:00 a.m.34 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

7.5CVSS7.6AI score0.07701EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/11/14 8:00 a.m.26 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

7.6CVSS7.6AI score0.08546EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/11/14 8:00 a.m.29 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

7.6CVSS7.6AI score0.08546EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2017/11/14 12:00 a.m.257 views

KB4048951: Security update for Adobe Flash Player (November 2017)

The remote Windows host is missing security update KB4048951. It is, therefore, affected by multiple remote code execution vulnerabilities in Adobe Flash Player. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104547; scriptversion"1.13";...

10CVSS9AI score0.06518EPSS
SaveExploits0References7
OSV
OSV
added 2017/11/10 2:29 a.m.7 views

CVE-2017-12969

Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service heap corruption and crash or execute arbitrary code via a long string to the open method...

8.8CVSS6.1AI score0.10079EPSS
SaveExploits4References6
Prion
Prion
added 2017/11/10 2:29 a.m.18 views

Buffer overflow

Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service heap corruption and crash or execute arbitrary code via a long string to the open method...

6.8CVSS9.1AI score0.10079EPSS
SaveExploits4References6Affected Software1
CVE
CVE
added 2017/11/09 7:00 p.m.75 views

CVE-2017-12969

CVE-2017-12969 describes a buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control used by Avaya IP Office Contact Center prior to 10.1.1. An attacker can supply a long string to the open method, enabling remote denial-of-service through heap corruption and crash, or potentially arbitrary...

8.8CVSS9.1AI score0.10079EPSS
SaveExploits4References6Affected Software1
Cvelist
Cvelist
added 2017/11/09 7:00 p.m.35 views

CVE-2017-12969

Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service heap corruption and crash or execute arbitrary code via a long string to the open method...

9.2AI score0.10079EPSS
SaveExploits4References6
CNVD
CNVD
added 2017/11/06 12:00 a.m.8 views

Avaya IP Office Contact Center Buffer Overflow Vulnerability

Avaya IP Office is a stackable, scalable, single small business communications system from Avaya, USA. The system manages voice communications, instant messaging, and e-mail through a single PC-based portal and supports a variety of drag-and-drop application tools.Contact Center is one of the...

8.8CVSS7.8AI score0.10079EPSS
SaveExploits4References1
exploitpack
exploitpack
added 2017/11/05 12:00 a.m.87 views

Avaya IP Office (IPO) 10.1 - ActiveX Buffer Overflow

Avaya IP Office IPO 10.1 - ActiveX Buffer Overflow + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-IPO-v9.1.0-10.1-VIEWERCTRL-ACTIVE-X-BUFFER-OVERFLOW-0DAY.txt + ISR: ApparitionSec Vendor: =============...

6.8CVSS0.7AI score0.10079EPSS
SaveExploits4
zdt
zdt
added 2017/11/05 12:00 a.m.80 views

Avaya OfficeScan (IPO) Remote ActiveX Buffer Overflow Exploit

Exploit for windows platform in category dos / poc + Credits: John Page aka hyp3rlinx Vendor: ============= www.avaya.com Product: =========== Avaya IP Office IPO v9.1.0 - 10.1 IP Office is Avaya's global midsize solution for enterprises, supporting up to 3,000 users at a single location with IP...

6.8CVSS8.7AI score0.10079EPSS
SaveExploits4
Exploit DB
Exploit DB
added 2017/11/05 12:00 a.m.57 views

Avaya IP Office (IPO) < 10.1 - ActiveX Buffer Overflow

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-IPO-v9.1.0-10.1-VIEWERCTRL-ACTIVE-X-BUFFER-OVERFLOW-0DAY.txt + ISR: ApparitionSec Vendor: ============= www.avaya.com Product: =========== Avaya IP Office IPO...

8.8CVSS7.9AI score0.10079EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
added 2017/10/17 12:00 a.m.7 views

Microsoft Edge browser’s vulnerability, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge browser on Microsoft Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page, Active...

7.6CVSS7.8AI score0.16419EPSS
SaveExploits0References4
Rows per page
Query Builder