Lucene search
+L

1803 matches found

Positive Technologies
Positive Technologies
added 2020/08/13 12:0 a.m.7 views

PT-2020-5544 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: GhostScript versions prior to 9.51 Description: A null pointer dereference issue in the compose group nonknockout nonblend isolated allmask common function in base/gxblend.c allows a remote attacker to cause a denial of service via a crafted...

9.8CVSS6.5AI score0.11397EPSS
SaveExploits28References237
Microsoft CVE
Microsoft CVE
added 2020/08/11 7:0 a.m.30 views

Media Foundation Memory Corruption Vulnerability

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

7.8CVSS2.5AI score0.02508EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/08/11 12:0 a.m.11 views

PT-2020-3653 · Microsoft · Windows Media Foundation +1

Name of the Vulnerable Software and Affected Versions: Windows Media Foundation affected versions not specified Description: The issue is caused by a memory corruption vulnerability in Windows Media Foundation, allowing an attacker to install programs, view, change, or delete data, or create new...

7.8CVSS7.7AI score0.03463EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2020/08/11 12:0 a.m.5 views

PT-2020-3819 · Microsoft · Office +3

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Microsoft Office affected versions not specified Microsoft Office Online Server affected versions not specified SharePoint Server affected versions not specified Description: An information...

5.5CVSS5.7AI score0.04639EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2020/08/11 12:0 a.m.6 views

PT-2020-3675 · Microsoft · Windows Media Audio Decoder +1

Name of the Vulnerable Software and Affected Versions: Windows Media Audio Codec affected versions not specified Description: A remote code execution issue exists due to improper handling of objects by Windows Media Audio Codec, allowing an attacker to potentially take control of an affected...

9.3CVSS8.2AI score0.0343EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2020/08/11 12:0 a.m.6 views

PT-2020-3813 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: An information disclosure issue exists due to Microsoft Word improperly disclosing its memory contents. This could allow an attacker to compromise a user's computer or data by...

5.5CVSS5.7AI score0.04553EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2020/08/11 12:0 a.m.11 views

PT-2020-3716 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: An information disclosure issue exists due to Microsoft Word's improper handling of objects in memory. This could allow a remote attacker to disclose protected information. The...

8.8CVSS8.1AI score0.04906EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2020/08/11 12:0 a.m.5 views

PT-2020-3815 · Microsoft · Office +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Description: An information disclosure issue exists due to improper handling of objects in memory by Microsoft Excel. This could allow an attacke...

5.5CVSS5.8AI score0.04639EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/07/31 12:0 a.m.5 views

The vulnerability of the Microsoft 365 Apps for Enterprise package lies in the use of an insecure search path, allowing a hacker to execute arbitrary code.

The vulnerability of the Microsoft 365 Apps for Enterprise package is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created document...

9.3CVSS7.9AI score0.10889EPSS
SaveExploits0References2
OSV
OSV
added 2020/07/22 5:15 p.m.3 views

UBUNTU-CVE-2020-6513

Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

8.8CVSS7.6AI score0.02965EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2020/07/14 7:0 a.m.131 views

.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the process responsible...

7.8CVSS4AI score0.94243EPSS
SaveExploits10
OSV
OSV
added 2020/06/19 3:15 p.m.12 views

CVE-2019-20860

An issue was discovered in Mattermost Server before 5.14.0, 5.13.3, 5.12.6, and 5.9.4. It allows remote attackers to cause a denial of service application hang via a crafted SVG document...

5.5CVSS6.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:0 a.m.7 views

The vulnerability of the /Pattern component of the Nitro Pro application for reading and editing PDF files, which allows a hacker to execute arbitrary code.

The vulnerability of the Nitro Pro PDF reading and editing application’s /Pattern component is related to a numerical overflow in the memory buffer. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted PDF file...

9.3CVSS7.8AI score0.42268EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:0 a.m.7 views

The vulnerability of the PDF reader application for reading and editing PDF files, Nitro Pro, allows a perpetrator to execute arbitrary code.

The vulnerability of the Nitro Pro PDF reading and editing application’s parser is related to a memory corruption issue after memory is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially crafted PDF file...

9.3CVSS8.1AI score0.40879EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:0 a.m.8 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to an operation that goes beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerabili...

10CVSS8AI score0.04104EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:0 a.m.8 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to privilege management errors, allowing an attacker to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 are related to privilege management errors. Exploiting these vulnerabilities can all...

10CVSS8AI score0.02328EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:0 a.m.8 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to an operation that goes beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerabili...

10CVSS8AI score0.04104EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
added 2020/06/09 7:0 a.m.31 views

Media Foundation Memory Corruption Vulnerability

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

8.8CVSS2.5AI score0.05928EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.9 views

The vulnerability of Microsoft Excel’s spreadsheet editor involves an operation where data is written beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document...

10CVSS8.2AI score0.11563EPSS
SaveExploits0References2
OSV
OSV
added 2020/05/21 4:15 a.m.0 views

DEBIAN-CVE-2020-6458

Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

8.8CVSS8.3AI score0.01326EPSS
SaveExploits0References1
Rows per page
Query Builder