Lucene search
+L

5964 matches found

Cvelist
Cvelist
added 2019/01/24 4:00 a.m.29 views

CVE-2018-17699

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.2AI score0.04088EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/01/22 12:00 a.m.13 views

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by using specially crafted HTTP traffic...

7.8CVSS7.2AI score0.02739EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/22 12:00 a.m.16 views

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions due to a failure in the routing daemon process rpd...

7.8CVSS7.2AI score0.01671EPSS
SaveExploits0References2Affected Software1
Source Incite
Source Incite
added 2019/01/22 12:00 a.m.38 views

SRC-2019-0022 : Adobe Acrobat Pro DC Distiller DCTDecode JPEG parsing SOS Marker Out-of-Bounds Read Information Disclosure Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...

7.5CVSS8.4AI score0.02662EPSS
SaveExploits1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.25 views

LAquis SCADA LQS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LQS files. The issue results from the lack of...

6.8CVSS3.8AI score0.01442EPSS
SaveExploits0References1
NVD
NVD
added 2019/01/09 7:29 p.m.21 views

CVE-2017-15428

Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS8.7AI score0.16604EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2019/01/09 7:29 p.m.29 views

CVE-2016-10403

Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

8.8CVSS7.2AI score0.00981EPSS
SaveExploits0References3
NVD
NVD
added 2019/01/09 7:29 p.m.29 views

CVE-2016-10403

Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

8.8CVSS8.2AI score0.00981EPSS
SaveExploits0References2
OSV
OSV
added 2019/01/09 7:29 p.m.7 views

UBUNTU-CVE-2017-15428

Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS7.7AI score0.16604EPSS
SaveExploits0References4
Prion
Prion
added 2019/01/09 7:29 p.m.27 views

Command injection

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page...

4.4CVSS7.1AI score0.00799EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2019/01/09 7:29 p.m.26 views

CVE-2017-15403

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page...

7.3CVSS7.1AI score0.00799EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2019/01/09 7:29 p.m.47 views

CVE-2017-15428

Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS7.6AI score0.16604EPSS
SaveExploits0References3
Prion
Prion
added 2019/01/09 7:29 p.m.21 views

Out-of-bounds

Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

6.8CVSS8.6AI score0.16604EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2019/01/09 7:29 p.m.34 views

CVE-2017-15403

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page...

7.3CVSS7.4AI score0.00799EPSS
SaveExploits0References3
CVE
CVE
added 2019/01/09 7:00 p.m.61 views

CVE-2017-15403

CVE-2017-15403 affects Chrome OS crosh networking (network_diag) due to insufficient data validation, enabling local command injection under chronos privileges via a crafted HTML page. Affected platforms include Chrome OS before 61.0.3163.113. Google Chrome OS update 61.0.3163.113 (stable channel...

7.3CVSS7.2AI score0.00799EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2019/01/09 7:00 p.m.42 views

CVE-2016-10403

Removed by vendor...

8.8CVSS8.8AI score0.00981EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2019/01/09 7:00 p.m.41 views

CVE-2017-15428

Removed by vendor...

8.8CVSS8.7AI score0.16604EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/01/09 7:00 p.m.32 views

CVE-2017-15428

Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.6AI score0.16604EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/01/09 7:00 p.m.30 views

CVE-2017-15403

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page...

7.2AI score0.00799EPSS
SaveExploits0References2
CVE
CVE
added 2019/01/09 7:00 p.m.109 views

CVE-2017-15428

CVE-2017-15428 affects Google Chrome’s V8 engine, specifically the builtins string generator, where insufficient data validation can lead to out-of-bounds read/write. A crafted HTML page could allow a remote attacker to execute arbitrary code inside the browser sandbox on versions prior to 62.0.3...

8.8CVSS8.6AI score0.16604EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder