Lucene search
+L

506 matches found

Cvelist
Cvelist
added 2016/06/25 1:0 a.m.26 views

CVE-2016-4525

Unspecified ActiveX controls in Advantech WebAccess before 8.120160519 allow remote authenticated users to obtain sensitive information or modify data via unknown vectors, related to the INTERFACESAFEFORUNTRUSTEDCALLER aka safe for scripting flag...

6.1AI score0.00449EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2016/06/24 12:0 a.m.30 views

Advantech WebAccess Multiple Vulnerabilities

Advantech WebAccess is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.6CVSS5.4AI score0.15356EPSS
SaveExploits2References1
ThreatPost
ThreatPost
added 2016/06/22 12:27 p.m.30 views

Advantech Patches WebAccess Remote Code Execution Flaws

Advantech has published a new version of its WebAccess product to address vulnerabilities that put installations at risk to remote code execution attacks. Exploiting the vulnerabilities would be a challenge, however, according to an advisory published Tuesday by the Industrial Control Systems Cyb...

4.3CVSS0.9AI score0.00675EPSS
SaveExploits0References4
Kaspersky
Kaspersky
added 2016/06/16 12:0 a.m.23 views

KLA10832 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet explorer. For details look at KLA10830. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

7.3AI score
SaveExploits0References2
Kaspersky
Kaspersky
added 2016/05/10 12:0 a.m.37 views

KLA10811 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet explorer. For details look at KLA10810. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

7.3AI score
SaveExploits0References5
Kaspersky
Kaspersky
added 2016/04/12 12:0 a.m.64 views

KLA10782 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet explorer and Microsoft Edge. For details look at KLA10780. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player,...

7.3AI score
SaveExploits0References4
Kaspersky
Kaspersky
added 2016/03/10 12:0 a.m.64 views

KLA10774 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet explorer. For details look at KLA10757. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

9.3CVSS9.5AI score0.26227EPSS
SaveExploits9References24
Kaspersky
Kaspersky
added 2016/02/09 12:0 a.m.49 views

KLA10758 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet explorer. For details look at KLA10757. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

9.3CVSS9.4AI score0.55375EPSS
SaveExploits21References26
myhack58
myhack58
added 2016/01/15 12:0 a.m.34 views

Remotely through a browser using Microsoft Office DLL MS15-1 3 2)hijacking vulnerability-vulnerability warning-the black bar safety net

A few weeks ago, security researcher Parvez Anwar, working in their individual tweets posted on a lot of Microsoft Office DLL hijacking vulnerability1. Fig. A few weeks later, Microsoft released MS15-1 3 2 patch, fixed a related vulnerability, while addressing the is Google security research2in a...

7.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/01/08 12:0 a.m.21 views

Schneider Electric ProClima < 6.2 Multiple Vulnerabilities

Binary data 9037.prm...

6.8CVSS7.3AI score0.05734EPSS
SaveExploits0References10
NVD
NVD
added 2015/11/13 3:59 a.m.24 views

CVE-2015-6478

Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site...

6.8CVSS9.2AI score0.01553EPSS
SaveExploits0References7
Prion
Prion
added 2015/11/13 3:59 a.m.15 views

Code injection

Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site...

6.8CVSS7.1AI score0.01553EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2015/11/13 2:0 a.m.28 views

CVE-2015-6478

Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site...

6.5AI score0.01553EPSS
SaveExploits0References7
Check Point Advisories
Check Point Advisories
added 2015/05/18 12:0 a.m.47 views

Microsoft Visual Basic VBE6.DLL Stack Memory Corruption (MS10-031) - Ver2 (CVE-2010-0815)

Microsoft Visual Basic VBA is a technology for developing client desktop packaged applications and integrating them with existing data and systems. Microsoft Office products include VBA and make use of VBA to perform certain functions. A remote code execution vulnerability has been reported in th...

9.3CVSS3.6AI score0.22364EPSS
SaveExploits1
myhack58
myhack58
added 2015/05/17 12:0 a.m.22 views

ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability-vulnerability warning-the black bar safety net

Recently, ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability, the vulnerability can cause remote arbitrary code execution on the user computer, security caused great harm. Baidu security prompts the user as soon as possible o...

0.3AI score
SaveExploits0
myhack58
myhack58
added 2015/05/14 12:0 a.m.56 views

Green Alliance: the online banking security controls remote code execution vulnerability analysis V1. 2-vulnerability warning-the black bar safety net

5 on 1 1 December, nsfocus Threat Response Center reported the storm clouds announcement, ICBC security controls can lead to remote arbitrary code execution vulnerability, Tick-2 0 1 5-9 6 3 3 9, and considering the Internet financial current there are more security issues, and taking into accoun...

8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/03/16 12:0 a.m.158 views

HP OPOS CCO Drivers RCE Vulnerabilities

The HP OLE Point of Sale OPOS Common Control Objects CCO drivers installed on the remote host are prior to version 1.13.003. They are, therefore, potentially affected by unspecified vulnerabilities in the following ActiveX controls : - OPOSCashDrawer.ocx - OPOSCheckScanner.ocx - OPOSLineDisplay.o...

10CVSS5.6AI score0.10349EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
added 2015/03/09 12:0 a.m.499 views

WEBGATE ActiveX Controls Multiple Buffer Overflows

The remote host contains one or more of the following WEBGATE ActiveX controls : - Control Center : - FileConverter.FileConverterCtrl.1 - LoginContoller.LoginControllerCtrl.1 - WESPDiscovery.WESPDiscoveryCtrl.1 - WESPPlayback.WESPPlaybackCtrl.1 - eDVR Manager : - WESPDiscovery.WESPDiscoveryCtrl.1...

8.8CVSS8.4AI score0.2414EPSS
SaveExploits23References29
Zero Day Initiative
Zero Day Initiative
added 2014/10/14 12:0 a.m.34 views

Hewlett-Packard Sprinter TTF16.ocx AttachToSS Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Sprinter. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability is found in Tidestone Formula One...

6.8CVSS6.8AI score0.06936EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2014/10/14 12:0 a.m.43 views

Hewlett-Packard Sprinter TTF16.ocx DefaultFontName Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Sprinter. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability is found in Tidestone Formula One...

6.8CVSS6.7AI score0.06936EPSS
SaveExploits0References1
Rows per page
Query Builder