Lucene search
+L

7378 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 3:07 p.m.10 views

CVE-2020-0685

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'...

7.8CVSS6.9AI score0.00914EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/22 12:55 p.m.7 views

Malicious code in t43est-hello-user-test-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/22 12:46 p.m.10 views

Malicious code in hello-user-test-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 10:27 a.m.19 views

CVE-2019-1405

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play UPnP service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'...

7.8CVSS9.4AI score0.2995EPSS
SaveExploits25References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:42 a.m.15 views

CVE-2019-5512

VMware Workstation 15.x before 15.0.3, 14.x before 14.1.6 running on Windows does not handle COM classes appropriately. Successful exploitation of this issue may allow hijacking of COM classes used by the VMX process, on a Windows host, leading to elevation of privilege...

8.8CVSS6.8AI score0.01227EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:09 a.m.11 views

CVE-2019-1478

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'...

7.8CVSS6.9AI score0.00827EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:20 a.m.12 views

CVE-2018-21243

An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used...

6.5CVSS6.9AI score0.009EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:15 a.m.14 views

CVE-2010-4696

Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the 1 filterorder or 2 filterorderDir parameter in a comcontact action to index.php, a different vulnerability than CVE-2010-4166. NOTE: the provenance of this...

7.5CVSS8.5AI score0.01423EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:14 a.m.15 views

CVE-2005-4844

The CLSIDApprenticeICW control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

7.1CVSS7AI score0.12416EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:12 a.m.16 views

CVE-2005-4845

The Java Plug-in 1.4.203 and 1.4.204 controls, and the 1.4.203 and 1.4.204 redirector controls, allow remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet...

5CVSS7.1AI score0.01696EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:52 p.m.16 views

CVE-2005-4842

The System Monitor Source Properties control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

7.1CVSS7AI score0.09199EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:52 p.m.13 views

CVE-2005-4841

The Outlook Progress Ctl control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

7.1CVSS7AI score0.09199EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/13 12:00 a.m.7 views

Shinnku-com 安全漏洞

Shinnku-com is an application by the individual developer of Shinnku. A security vulnerability exists in Shinnku-com v7.1.0, which originates from an arbitrary file read in /api/music/v1/cover.ts...

7.5CVSS6.8AI score0.00533EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/04/30 10:09 a.m.33 views

CVE-2025-3200

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

9.1CVSS7AI score0.00354EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/28 10:15 a.m.22 views

CVE-2025-3200

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

9.1CVSS0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/28 9:37 a.m.39 views

CVE-2025-3200 Com-Server Exposed via Weak TLS

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

9.1CVSS0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/28 9:37 a.m.15 views

CVE-2025-3200 Com-Server Exposed via Weak TLS

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

9.1CVSS7AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/28 9:37 a.m.117 views

CVE-2025-3200

CVE-2025-3200 affects the Com-Server component, where an unauthenticated remote attacker could exploit the use of insecure TLS 1.0 and TLS 1.1 to intercept and manipulate encrypted communications between the Com-Server and connected systems. The issue stems from weak cryptographic protocol suppor...

9.1CVSS7.1AI score0.00354EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/04/28 6:28 a.m.6 views

Malicious code in jd-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f205097feb67db492d1ce42f141278ef445cb7792b8c530f866eb0a837e6d47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
added 2025/04/28 6:28 a.m.7 views

MAL-2025-3497 Malicious code in jd-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f205097feb67db492d1ce42f141278ef445cb7792b8c530f866eb0a837e6d47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Rows per page
Query Builder