Lucene search
+L

11601 matches found

BDU FSTEC
BDU FSTEC
added 2019/05/24 12:00 a.m.10 views

The vulnerability of the User Mode Driver component of the Intel Graphics Driver allows a hacker to exploit it to disclose protected information.

The vulnerability of the User Mode Driver component of Intel Graphics Drivers arises from operations that occur outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these drivers...

3.3CVSS6AI score0.00331EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2019/05/23 12:00 a.m.13 views

Microsoft .NET Framework Buffer Overflow Vulnerability

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a Windows Store, Windows Phone, Windows Server, and Microsoft Azure applications. The platform includes the C and Visual Basic programming languages, a public language runtime library,...

5.5CVSS9.4AI score0.01748EPSS
SaveExploits0References1
NVD
NVD
added 2019/05/22 8:29 p.m.24 views

CVE-2018-7846

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller...

9.8CVSS9.2AI score0.29575EPSS
SaveExploits1References2
Prion
Prion
added 2019/05/22 8:29 p.m.22 views

Design/Logic Flaw

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller...

5CVSS9.2AI score0.29575EPSS
SaveExploits1References2
CVE
CVE
added 2019/05/22 7:57 p.m.108 views

CVE-2018-7846

CVE-2018-7846 affects Schneider Electric Modicon M580, M340, Quantum and Premium PLCs. The issue is a CWE-501 Trust Boundary Violation in the UMAS/Reservation mechanism: an unauthenticated brute-force attempt to the Modbus-based reservation session (one-byte session token) can allow unauthorized ...

9.8CVSS9.2AI score0.29575EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2019/05/22 7:57 p.m.32 views

CVE-2018-7846

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller...

9.3AI score0.29575EPSS
SaveExploits1References2
exploitpack
exploitpack
added 2019/05/22 12:00 a.m.66 views

Microsoft Windows (x86) - Task Scheduler .job Import Arbitrary Discretionary Access Control List Write Local Privilege Escalation

Microsoft Windows x86 - Task Scheduler .job Import Arbitrary Discretionary Access Control List Write Local Privilege Escalation Task Scheduler .job import arbitrary DACL write Tested on: Windows 10 32-bit Bug information: There are two folders for tasks. c:\windows\tasks c:\windows\system32\tasks...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2019/05/22 12:00 a.m.138 views

Microsoft Windows (x86) - Task Scheduler' .job' Import Arbitrary Discretionary Access Control List Write / Local Privilege Escalation

Task Scheduler .job import arbitrary DACL write Tested on: Windows 10 32-bit Bug information: There are two folders for tasks. c:\windows\tasks c:\windows\system32\tasks The first one is only there for legacy purposes. The second one gets used by the task scheduler. In the old days i.e windows xp...

5.3AI score
SaveExploits0
CNVD
CNVD
added 2019/05/22 12:00 a.m.9 views

Intel Dynamic Application Loader Buffer Overflow Vulnerability

Intel Dynamic Application Loader DAL is a dynamic application loader from Intel Corporation USA. It supports running Java code on CSME firmware. A buffer overflow vulnerability exists in the subsystem in Intel DAL versions prior to 12.0.35. The vulnerability stems from a networked system or produ...

6.7CVSS7.5AI score0.00428EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/05/17 12:00 a.m.19 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS6.9AI score0.09679EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/05/17 12:00 a.m.17 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-16206)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS6.9AI score0.09679EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/05/17 12:00 a.m.10 views

Microsoft Windows Jet Database Engine Buffer Overflow Vulnerability (CNVD-2019-24836)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A buffer overflow vulnerabilit...

9.3CVSS7.3AI score0.12837EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/05/17 12:00 a.m.9 views

Microsoft Internet Explorer and Microsoft Edge Buffer Overflow Vulnerability

Microsoft Edge and Microsoft Internet Explorer IE are both products of Microsoft Corporation.Microsoft Edge is a web browser that comes with Windows 10 and later.Microsoft Internet Explorer is a web browser that comes with Windows operating systems. Microsoft Edge is a web browser that comes with...

7.6CVSS7.1AI score0.2237EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/05/17 12:00 a.m.18 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27401)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS6.9AI score0.09679EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/05/17 12:00 a.m.62 views

HHVM Memory Corruption Vulnerability

HHMV is prone to a vulnerability where unintended memory locations are possible to access. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

9.8CVSS9.6AI score0.01537EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/05/17 12:00 a.m.11 views

Microsoft Windows Jet Database Engine Buffer Overflow Vulnerability (CNVD-2019-24830)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A buffer overflow vulnerabilit...

9.3CVSS7.3AI score0.17882EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/05/17 12:00 a.m.9 views

Microsoft Windows Jet Database Engine Buffer Overflow Vulnerability (CNVD-2019-17523)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A buffer error vulnerability...

9.3CVSS7.3AI score0.12837EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/05/17 12:00 a.m.20 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-16217)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS6.9AI score0.09679EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/05/17 12:00 a.m.22 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-16203)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS6.9AI score0.09679EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/05/17 12:00 a.m.11 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-16201)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS6.9AI score0.09679EPSS
SaveExploits0References1
Rows per page
Query Builder