Lucene search
+L

7020 matches found

BDU FSTEC
BDU FSTEC
added 2024/12/16 12:0 a.m.11 views

The vulnerability of the Microsoft Access database management system, Microsoft Office applications, and 365 Enterprise Apps relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Access database management systems, Microsoft Office applications, and 365 Enterprise Apps is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS8.1AI score0.0105EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:0 a.m.12 views

Vulnerability of Microsoft Office packages, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server: This vulnerability stems from operations that occur outside of the buffer in memory, allowing attackers to execute arbitrary code.

Packages such as Microsoft Office, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server are associated with operations that involve writing data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

5.5CVSS6.1AI score0.01062EPSS
SaveExploits0References2
Kaspersky
Kaspersky
added 2024/12/12 12:0 a.m.19 views

KLA78054 PE vulnerability in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-49147 Related products Microsoft-PC-Manager CVE list CVE-2024-49147 critical Solution Install necessary updates from the KB section,...

9.8CVSS9.8AI score0.01314EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/12/12 12:0 a.m.10 views

Vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Excel, related to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Excel relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.01124EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/12/11 12:0 a.m.16 views

Oracle Siebel Server (April 2024 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the April 2024 CPU advisory. - Vulnerability in the Siebel Apps - Public Sector product of Oracle Siebel CRM component: Other Google Guava. Supported versions that are affected are 24.2...

7.1CVSS6.5AI score0.00248EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/12/11 12:0 a.m.23 views

Oracle Siebel Server (October 2022 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2022 CPU advisory. - Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Marketing XMLBeans. Supported versions that are affected a...

9.3CVSS7.7AI score0.39361EPSS
SaveExploits3References15
Tenable Nessus
Tenable Nessus
added 2024/12/11 12:0 a.m.10 views

Oracle Siebel Server <= 20.7 (October 2020 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2020 CPU advisory. - Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Mktg/Email Mktg Stand-Alone Apache Commons File Upload. Th...

9.8CVSS7.1AI score0.72988EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2024/12/10 9:12 a.m.8 views

CERT-UA Warns of Phishing Attacks Targeting Ukraine's Defense and Security Force

The Computer Emergency Response Team of Ukraine CERT-UA has warned of a new set of cyber attacks that it said were aimed at defense companies in the country as well as its security and defense forces. The phishing attacks have been attributed to a Russia-linked threat actor called UAC-0185 aka...

7.8AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2024/12/10 8:0 a.m.59 views

December 10, 2024—KB5048703 (OS Build 10240.20857) - EXPIRED

None None...

9.8CVSS6.9AI score0.82992EPSS
SaveExploits14
Positive Technologies
Positive Technologies
added 2024/12/10 12:0 a.m.13 views

PT-2024-9518 · Microsoft · Sharepoint Server +3

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps affected versions not specified Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description...

5.5CVSS8.3AI score0.01062EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/12/09 11:39 a.m.25 views

CVE-2023-48277 WordPress Super Progressive Web Apps plugin <= 2.2.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in SuperPWA Super Progressive Web Apps super-progressive-web-apps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Progressive Web Apps: from n/a through = 2.2.21...

4.3CVSS0.00584EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:39 a.m.16 views

CVE-2023-48277 WordPress Super Progressive Web Apps plugin <= 2.2.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in SuperPWA Super Progressive Web Apps super-progressive-web-apps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Progressive Web Apps: from n/a through = 2.2.21...

4.3CVSS8.6AI score0.00584EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.6 views

WordPress plugin Super Progressive Web Apps 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

4.3CVSS8.7AI score0.00584EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2024/12/07 8:18 a.m.6 views

Hackers Using Fake Video Conferencing Apps to Steal Web3 Professionals' Data

Cybersecurity researchers have warned of a new scam campaign that leverages fake video conferencing apps to deliver an information stealer called Realst targeting people working in Web3 under the guise of fake business meetings. "The threat actors behind the malware have set up fake companies usi...

6.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/12/06 12:0 a.m.10 views

PT-2024-16535 · Unknown · Appmanager

Name of the Vulnerable Software and Affected Versions: AppManager affected versions not specified Description: The issue allows Lua apps to be deployed, removed, started, reloaded, or stopped without authorization via AppManager. This enables an attacker to remove legitimate apps, creating a...

8.2CVSS6.8AI score0.00481EPSS
SaveExploits0References10
HackRead
HackRead
added 2024/12/05 5:32 p.m.14 views

The Future of eCommerce: How Custom Apps Help You Get Ahead of the Competition

Discover the future of eCommerce with bespoke app development. Learn how tailored solutions enhance user experience, security, and performance while empowering businesses to meet unique needs and gain a competitive edge...

7.4AI score
SaveExploits0
NVD
NVD
added 2024/12/04 4:15 p.m.27 views

CVE-2024-37574

The GriceMobile com.grice.call application 4.5.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.iui.mobile.presentation.MobileActivity...

8.2CVSS0.00346EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/04 12:0 a.m.10 views

solana/web3.js 信息泄露漏洞

solana/web3.js is a JavaScript library from Solana Labs. An information disclosure vulnerability exists in solana/web3.js versions 1.95.6 and 1.95.7, which stems from a vulnerability that allows an attacker to distribute unauthorized malicious packages that have been modified to steal private key...

8.3CVSS6.2AI score0.00431EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/04 12:0 a.m.11 views

The vulnerability of Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise, related to insufficient validation of input data, allows attackers to disable the protected viewing mode.

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to disable the protected mode of operation...

7.6CVSS5.4AI score0.02072EPSS
SaveExploits0References2
OSV
OSV
added 2024/12/03 6:15 a.m.8 views

CVE-2024-49414

Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to temporarily access to recent app list...

2.4CVSS5.8AI score0.0022EPSS
SaveExploits0References1
Rows per page
Query Builder