Lucene search
K

34 matches found

OSV
OSV
added 2026/03/18 1:4 p.m.1 views

MAL-2026-1820 Malicious code in player-common-controls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aef58425992286c8ee1bba6bb26ba161a52a852bb7ed8a6087e737b91d02e8b The package player-common-controls was found to contain malicious code...

5.8AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/18 1:4 p.m.2 views

Malicious code in player-common-controls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aef58425992286c8ee1bba6bb26ba161a52a852bb7ed8a6087e737b91d02e8b The package player-common-controls was found to contain malicious code...

5.8AI score
Exploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:0 a.m.23 views

Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted 1 document or 2 web page that triggers system-state corruption...

9.3CVSS8.3AI score0.91552EPSS
In wildExploits1
Qualys Blog
Qualys Blog
added 2019/01/22 6:38 p.m.88 views

Qualys Policy Compliance Notification: Policy Library Update

Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...

0.2AI score
Exploits0
Qualys Blog
Qualys Blog
added 2018/03/14 4:54 p.m.36 views

Qualys Policy Compliance Notification: Policy Library Update

Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from vendo...

6.8AI score
Exploits0
Prion
Prion
added 2015/06/10 1:59 a.m.16 views

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows user-assisted remote attackers to execute arbitrary code via a...

9.3CVSS7.8AI score0.44309EPSS
Exploits0References3Affected Software4
CVE
CVE
added 2015/06/10 1:0 a.m.76 views

CVE-2015-1756

CVE-2015-1756 is a use-after-free vulnerability in Microsoft Windows Common Controls that could allow remote code execution when a user visits a crafted web page and then uses Internet Explorer F12 Developer Tools. The issue affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2 SP1, 7 ...

9.3CVSS7.4AI score0.44309EPSS
Exploits0References3Affected Software8
CNVD
CNVD
added 2015/06/10 12:0 a.m.1 views

Microsoft Windows Common Controls Memory Misreference Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability in the Microsoft windows universal control allows an attacker to construct specially crafted links to trick users into loading them, which when followed by the targeted user using the F12 exploit tool in Internet Explorer,...

9.3CVSS7.2AI score0.44309EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2015/06/09 12:0 a.m.151 views

MS15-060: Vulnerability in Microsoft Common Controls Could Allow Remote Code Execution (3059317)

The remote Windows host is affected by a remote code execution vulnerability due to a user-after-free error in Microsoft Common Controls. A remote attacker can exploit this vulnerability by convincing a user to click a specially crafted link, resulting in the execution of arbitrary code in the...

9.3CVSS6.2AI score0.44309EPSS
Exploits0References2
Check Point Advisories
Check Point Advisories
added 2014/03/31 12:0 a.m.5 views

Microsoft Windows Common Controls Remote Code Execution - Ver2 (CVE-2012-1856)

A code execution vulnerability has been reported in the Windows Common Controls. The vulnerability is due to a corruption of the system state by the TabStrip ActiveX control. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected syst...

7.6AI score0.91552EPSS
Exploits1
Check Point Advisories
Check Point Advisories
added 2014/03/03 12:0 a.m.1 views

CCRP Control BrowseDialog Denial of Service - Ver2 (CVE-2007-0371)

A denial-of-service vulnerability has been reported in Common Controls Replacement Project Browsedialog Server. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

6.2AI score0.05887EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2013/10/09 12:0 a.m.3 views

PT-2013-4219 · Microsoft · Windows Xp +10

Name of the Vulnerable Software and Affected Versions: Windows common control library versions in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT Description: A remote code...

10CVSS7.6AI score0.62976EPSS
Exploits0References7
VulnCheck KEV
VulnCheck KEV
added 2013/09/25 12:0 a.m.2 views

VulnCheck KEV: CVE-2012-1856

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted 1 document or 2 web page that triggers system-state corruption...

9.3CVSS6.4AI score0.91552EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2013/02/14 12:0 a.m.36 views

Microsoft Windows OLE Automation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Microsoft...

6.8CVSS3.3AI score0.60994EPSS
Exploits0References1
Check Point Advisories
Check Point Advisories
added 2013/02/12 12:0 a.m.4 views

Microsoft Windows Common Controls OLE Remote Code Execution (MS13-020; CVE-2013-1313)

A remote code execution vulnerability has been reported in Microsoft Windows...

7.3AI score0.60994EPSS
Exploits0
Packet Storm
Packet Storm
added 2012/10/07 12:0 a.m.25 views

HCView WriteAV Crash Proof Of Concept

!/usr/bin/perl Hardcoreview WriteAV Arbitrary Code Execution Author: Jean Pascal Pereira Vendor URI: http://sourceforge.net/projects/hardcoreview/ Vendor Description: Image browser. Designed and created for profesional and amature watching image files. All kind of image files ; . Support .jpg,...

0.2AI score
Exploits0
OpenVAS
OpenVAS
added 2012/08/15 12:0 a.m.85 views

Microsoft Windows Common Controls Remote Code Execution Vulnerability (2720573)

This host is missing a critical security update according to Microsoft Bulletin MS12-060. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5.6AI score0.91552EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2012/08/15 12:0 a.m.746 views

MS12-060: Vulnerability in Windows Common Controls Could Allow Remote Code Execution (2720573)

There is an unspecified remote code execution vulnerability in Windows common controls, which is included in several Microsoft products. An attacker could exploit this by tricking a user into viewing a maliciously crafted web page, resulting in arbitrary code execution. %NASLMINLEVEL 70300 C...

9.3CVSS7.2AI score0.91552EPSS
Exploits1References3
Microsoft KB
Microsoft KB
added 2012/08/14 12:0 a.m.422 views

MS12-060: Vulnerability in Windows common controls could allow remote code execution: August 14, 2012

Resolves a vulnerability in Windows common controls that could allow remote code exescution if a user visits a website that contains specially crafted content that is designed to exploit the vulnerability.View products that this article applies to.IntroductionMicrosoft has released security...

9.3CVSS6.7AI score0.91552EPSS
Exploits1
Check Point Advisories
Check Point Advisories
added 2012/08/14 12:0 a.m.16 views

Microsoft Windows Common Controls Remote Code Execution (MS12-060; CVE-2012-1856)

A remote code execution vulnerability has been reported in the Windows common controls...

7.3AI score0.91552EPSS
Exploits1
Rows per page
Query Builder