Lucene search
+L

2804 matches found

CVE
CVE
added 2019/04/09 1:47 a.m.81 views

CVE-2019-0762

Technical details for CVE-2019-0762 are not publicly available in the provided documents. They describe a security feature bypass in Microsoft browsers without specifics on affected products, versions, or mitigations. Monitor for updates.

4.3CVSS6AI score0.04499EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/04/09 1:47 a.m.26 views

CVE-2019-0762

A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins, aka 'Microsoft Browsers Security Feature Bypass Vulnerability'...

6.2AI score0.04499EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2019/04/09 12:0 a.m.76 views

KLA11875 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, bypass security restrictions, spoof user interface. Below is a complete list of...

9.3CVSS9.2AI score0.4523EPSS
SaveExploits49References47
Kaspersky
Kaspersky
added 2019/04/09 12:0 a.m.253 views

KLA11462 Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Chakra Scripting Engine...

7.6CVSS8.3AI score0.81551EPSS
SaveExploits8References28
OSV
OSV
added 2019/04/08 11:29 p.m.28 views

CVE-2019-0609

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773...

7.5CVSS7.6AI score
SaveExploits0References1
Prion
Prion
added 2019/04/08 11:29 p.m.27 views

Remote code execution

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773...

7.6CVSS7.5AI score0.12047EPSS
SaveExploits0References1Affected Software2
Tenable Nessus
Tenable Nessus
added 2019/04/01 12:0 a.m.32 views

FreeBSD : Jupyter notebook -- open redirect vulnerability (fe7e322f-522d-11e9-98b5-216e512dad89)

Jupyter blog : Login pages tend to take a parameter for redirecting back to a page after successful login, e.g. /login?next=/notebooks/mynotebook.ipynb, so that you aren't disrupted too much if you try to visit a page, but have to authenticate first. An Open Redirect Vulnerability is when a...

6.1CVSS6.7AI score0.01741EPSS
SaveExploits0References4
NVD
NVD
added 2019/03/28 4:29 p.m.27 views

CVE-2019-10255

An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers Chrome, Firefox in JupyterHub before 0.9.5 allows crafted links to the login page, which will redirect to a malicious site after successful login. Servers running on a baseurl prefix are not affecte...

6.1CVSS6.2AI score0.01741EPSS
SaveExploits0References7
OSV
OSV
added 2019/03/28 4:29 p.m.25 views

CVE-2019-10255

An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers Chrome, Firefox in JupyterHub before 0.9.5 allows crafted links to the login page, which will redirect to a malicious site after successful login. Servers running on a baseurl prefix are not affecte...

6.1CVSS6.4AI score0.01741EPSS
SaveExploits0References7
FreeBSD
FreeBSD
added 2019/03/28 12:0 a.m.30 views

Jupyter notebook -- open redirect vulnerability

Jupyter blog: Login pages tend to take a parameter for redirecting back to a page after successful login, e.g. /login?next=/notebooks/mynotebook.ipynb, so that you aren't disrupted too much if you try to visit a page, but have to authenticate first. An Open Redirect Vulnerability is when a...

6.1CVSS2.2AI score0.01741EPSS
SaveExploits0References2
NVD
NVD
added 2019/03/27 1:29 p.m.23 views

CVE-2019-3877

A vulnerability was found in modauthmellon before v0.14.2. An open redirect in the logout URL allows requests with backslashes to pass through by assuming that it is a relative URL, while the browsers silently convert backslash characters into forward slashes treating them as an absolute URL. Thi...

6.1CVSS6.4AI score0.02131EPSS
SaveExploits0References8
OSV
OSV
added 2019/03/27 1:29 p.m.34 views

CVE-2019-3877

A vulnerability was found in modauthmellon before v0.14.2. An open redirect in the logout URL allows requests with backslashes to pass through by assuming that it is a relative URL, while the browsers silently convert backslash characters into forward slashes treating them as an absolute URL. Thi...

6.1CVSS6.5AI score
SaveExploits0References8
Debian CVE
Debian CVE
added 2019/03/27 12:19 p.m.36 views

CVE-2019-3877

A vulnerability was found in modauthmellon before v0.14.2. An open redirect in the logout URL allows requests with backslashes to pass through by assuming that it is a relative URL, while the browsers silently convert backslash characters into forward slashes treating them as an absolute URL. Thi...

6.1CVSS6.8AI score0.02131EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2019/03/22 1:49 p.m.32 views

CVE-2019-3877

A vulnerability was found in modauthmellon before v0.14.2. An open redirect in the logout URL allows requests with backslashes to pass through by assuming that it is a relative URL, while the browsers silently convert backslash characters into forward slashes treating them as an absolute URL. Thi...

6.1CVSS4.4AI score0.02131EPSS
SaveExploits0References3
Atlassian
Atlassian
added 2019/03/21 12:52 a.m.139 views

The version of moment.js used in Jira Service Desk was vulnerable to a regular expression denial of service

The version of moment.js used in Jira Service Desk Server before version 4.0.0 allows remote attackers to cause a denial of service in user's browsers via a regular expression denial of service. For additional details...

4.5AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/03/12 12:0 a.m.46 views

KB4489872: Windows 10 March 2019 Security Update

The remote Windows host is missing security update 4489872. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability...

9.3CVSS8.1AI score0.3126EPSS
SaveExploits2References36
Tenable Nessus
Tenable Nessus
added 2019/03/12 12:0 a.m.53 views

KB4489883: Windows 8.1 and Windows Server 2012 R2 March 2019 Security Update

The remote Windows host is missing security update 4489883 or cumulative update 4489881. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully...

9.3CVSS8.1AI score0.34209EPSS
SaveExploits2References33
Kaspersky
Kaspersky
added 2019/03/12 12:0 a.m.87 views

KLA11431 Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in...

7.6CVSS8.7AI score0.3126EPSS
SaveExploits11References36
BDU FSTEC
BDU FSTEC
added 2019/03/06 12:0 a.m.8 views

Vulnerability in Firefox web browsers, Firefox ESR, and the Thunderbird email program, related to accessing freed memory cells, allowing attackers to trigger a service failure.

The vulnerability in web browsers Firefox, Firefox ESR, and the email processing program Thunderbird relates to the release of a static flow analyzer object during use. Exploiting this vulnerability can allow an attacker to cause service interruptions using specially crafted HTML5 content with...

9.8CVSS7.7AI score0.12658EPSS
SaveExploits1References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/03/06 12:0 a.m.8 views

Vulnerability in web browsers Firefox and Firefox ESR, as well as the Thunderbird email program, related to buffer overflow in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Firefox browsers, Firefox ESR, and the email processing program Thunderbird is related to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

9.8CVSS8AI score0.03466EPSS
SaveExploits0References3Affected Software4
Rows per page
Query Builder