Lucene search
+L

2677 matches found

Symantec
Symantec
added 2017/12/12 12:00 a.m.45 views

Microsoft Excel CVE-2017-11935 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...

9.3CVSS1.1AI score0.17064EPSS
SaveExploits0Affected Software1
Symantec
Symantec
added 2017/12/12 12:00 a.m.48 views

Microsoft Office Outlook CVE-2017-11939 Information Disclosure Vulnerability

Description Microsoft Office Outlook is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Outlook 2016 Click-to-Run C2R for 32-bit edition Microsoft Outlook 2016...

4CVSS6.5AI score0.05687EPSS
SaveExploits0Affected Software1
Prion
Prion
added 2017/12/07 3:29 p.m.17 views

Design/Logic Flaw

IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against t...

3.5CVSS5.4AI score0.00861EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2017/12/07 3:29 p.m.20 views

CVE-2017-1465

IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against t...

5.4CVSS5.4AI score0.00861EPSS
SaveExploits0References2
OSV
OSV
added 2017/12/07 3:29 p.m.4 views

CVE-2017-1465

IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against t...

5.4CVSS5.8AI score0.00861EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2017/12/07 3:00 p.m.27 views

CVE-2017-1465

IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against t...

5.4AI score0.00861EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/12/04 12:00 a.m.10 views

The vulnerability of the Click-to-Run software package from Microsoft Office allows a malicious actor to execute actions on the system with privileges of the current user.

The vulnerability of the Click-to-Run software package from Microsoft Office relates to improper handling of objects in memory, which leads to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute actions on the system with privileges of the current user, using a...

9.3CVSS7.6AI score0.17833EPSS
SaveExploits0References4
Microsoft Malware Protection
Microsoft Malware Protection
added 2017/11/20 1:59 p.m.82 views

New tech support scam launches communication or phone call app

A new tech support scam technique streamlines the entire scam experience, leaving potential victims only one click or tap away from speaking with a scammer. We recently found a new tech support scam website that opens your default communication or phone call app, automatically prompting you to ca...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2017/11/16 12:00 a.m.9 views

Microsoft Excel 2016 Click-to-Run Remote Code Execution Vulnerability

Microsoft Excel 2016 is a spreadsheet processing software in the Office suite of Microsoft Corporation USA.Click-to-Run is one of the updating tools available. A remote code execution vulnerability exists in Microsoft Excel 2016 Click-to-Run that stems from the program failing to properly handle...

9.3CVSS8.2AI score0.0975EPSS
SaveExploits0References1
OSV
OSV
added 2017/11/15 3:29 a.m.11 views

CVE-2017-11884

Microsoft Excel 2016 Click-to-Run C2R allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882...

7.8CVSS6AI score0.0975EPSS
SaveExploits0References3
NVD
NVD
added 2017/11/15 3:29 a.m.40 views

CVE-2017-11884

Microsoft Excel 2016 Click-to-Run C2R allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882...

9.3CVSS8.2AI score0.0975EPSS
SaveExploits0References3
Prion
Prion
added 2017/11/15 3:29 a.m.41 views

Memory corruption

Microsoft Excel 2016 Click-to-Run C2R allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882...

9.3CVSS7.9AI score0.99945EPSS
SaveExploits33References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2017/11/15 3:29 a.m.8 views

CVE-2017-11884

Microsoft Excel 2016 Click-to-Run C2R allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882...

9.3CVSS5.9AI score0.99945EPSS
SaveExploits33References4
Cvelist
Cvelist
added 2017/11/15 3:00 a.m.49 views

CVE-2017-11884

Microsoft Excel 2016 Click-to-Run C2R allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882...

8.2AI score0.0975EPSS
SaveExploits0References3
CVE
CVE
added 2017/11/15 3:00 a.m.287 views

CVE-2017-11884

Technical details about CVE-2017-11884 are not publicly provided in the connected documents; no specific affected products, versions, exploit vectors, or remediation are disclosed here. Monitor for updates.

9.3CVSS8.3AI score0.0975EPSS
SaveIn wildExploits0References3Affected Software1
CNVD
CNVD
added 2017/11/15 12:00 a.m.7 views

SICAM RTU SM-2556 COM Module Cross-Site Scripting Vulnerability

The SM-2556 communication module is a protocol element for LAN / WAN communication with a Fast Ethernet interface to the SICAM 1703 and SICAM RTU substation controllers. A cross-site scripting vulnerability exists in the SICAM RTU SM-2556 COM module, which can be exploited by an attacker to trick...

6.1CVSS6.2AI score0.01145EPSS
SaveExploits2References1
Symantec
Symantec
added 2017/11/14 12:00 a.m.54 views

Microsoft Office CVE-2017-11884 Memory Corruption Vulnerability

Description Microsoft Office is prone to a memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft Exc...

9.3CVSS1AI score0.0975EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2017/11/14 12:00 a.m.7 views

PT-2017-3276 · Microsoft · Excel 2016

Name of the Vulnerable Software and Affected Versions: Microsoft Excel 2016 Click-to-Run C2R Description: The issue is related to the improper handling of objects in memory by Microsoft Excel, which can be exploited by a remote attacker to execute arbitrary code in the context of the current user...

9.3CVSS8.3AI score0.0975EPSS
SaveExploits0References8
Prion
Prion
added 2017/11/13 8:29 p.m.22 views

Information disclosure

In AutomationDirect CLICK Programming Software Part Number C0-PGMSW Versions 2.10 and prior; C-More Programming Software Part Number EA9-PGMSW Versions 6.30 and prior; C-More Micro Part Number EA-PGMSW Versions 4.20.01.0 and prior; Do-more Designer Software Part Number DM-PGMSW Versions 2.0.3 and...

9.3CVSS7.6AI score0.01567EPSS
SaveExploits0References2Affected Software5
OSV
OSV
added 2017/11/13 8:29 p.m.7 views

CVE-2017-14020

In AutomationDirect CLICK Programming Software Part Number C0-PGMSW Versions 2.10 and prior; C-More Programming Software Part Number EA9-PGMSW Versions 6.30 and prior; C-More Micro Part Number EA-PGMSW Versions 4.20.01.0 and prior; Do-more Designer Software Part Number DM-PGMSW Versions 2.0.3 and...

7.8CVSS5.8AI score0.01567EPSS
SaveExploits0References2
Rows per page
Query Builder