Lucene search
K

6126 matches found

CNVD
CNVD
added 2020/09/10 12:0 a.m.23 views

Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-65598)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation Microsoft, a U.S. Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft...

8.8CVSS2.8AI score0.01278EPSS
Exploits0References1
CNVD
CNVD
added 2020/09/10 12:0 a.m.23 views

Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-65599)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server, which...

9.3CVSS8.2AI score0.01635EPSS
Exploits0References1
OSV
OSV
added 2020/09/09 2:15 p.m.11 views

CVE-2020-24074

The decode program in silk-v3-decoder Version:20160922 Build By kn007 does not strictly check data, resulting in a buffer overflow...

9.8CVSS7.1AI score
Exploits0References2
NVD
NVD
added 2020/09/09 2:15 p.m.7 views

CVE-2020-24074

The decode program in silk-v3-decoder Version:20160922 Build By kn007 does not strictly check data, resulting in a buffer overflow...

9.8CVSS0.00459EPSS
Exploits1References2
Prion
Prion
added 2020/09/09 2:15 p.m.24 views

Buffer overflow

The decode program in silk-v3-decoder Version:20160922 Build By kn007 does not strictly check data, resulting in a buffer overflow...

7.5CVSS9.5AI score0.00459EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2020/09/09 2:2 p.m.37 views

CVE-2020-24074

CVE-2020-24074 concerns the silk-v3-decoder’s decode program. Connected sources consistently identify that silk-v3-decoder Version 20160922 (Build By kn007) does not strictly validate input data, which can lead to a buffer overflow. The affected component is the decode routine within silk-v3-deco...

9.8CVSS9.5AI score0.00459EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2020/09/09 2:2 p.m.12 views

CVE-2020-24074

The decode program in silk-v3-decoder Version:20160922 Build By kn007 does not strictly check data, resulting in a buffer overflow...

9.6AI score0.00459EPSS
Exploits1References2
Microsoft CVE
Microsoft CVE
added 2020/09/08 7:0 a.m.28 views

Windows Media Audio Decoder Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a...

8.8CVSS4.8AI score0.01278EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2020/09/08 7:0 a.m.36 views

Windows Media Audio Decoder Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a...

9.3CVSS4.8AI score0.01635EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2020/09/08 12:0 a.m.3 views

PT-2020-4150 · Microsoft · Windows Media Audio Decoder +1

Name of the Vulnerable Software and Affected Versions: Windows Media Audio Decoder affected versions not specified Description: A remote code execution issue exists due to improper handling of objects by Windows Media Audio Decoder, allowing an attacker to potentially take control of an affected...

9.3CVSS7.8AI score0.01635EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2020/09/08 12:0 a.m.104 views

KB4577048: Windows Server 2012 September 2020 Security Update

The remote Windows host is missing security update 4577048 or cumulative update 4577038. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...

9.3CVSS8.1AI score0.3131EPSS
Exploits2References49
Tenable Nessus
Tenable Nessus
added 2020/09/08 12:0 a.m.79 views

KB4577053: Windows 7 and Windows Server 2008 R2 September 2020 Security Update

The remote Windows host is missing security update 4577053 or cumulative update 4577051. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...

9.3CVSS8AI score0.3131EPSS
Exploits0References43
Kaspersky
Kaspersky
added 2020/09/08 12:0 a.m.51 views

KLA11952 Multiple vulnerabilities in Microsoft ESU products

Multiple vulnerabilities were found in Microsoft ESU products. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerabili...

9.3CVSS9.6AI score0.3131EPSS
Exploits0References59
Tenable Nessus
Tenable Nessus
added 2020/09/08 12:0 a.m.61 views

KB4577041: Windows 10 Version 1709 September 2020 Security Update

The remote Windows host is missing security update 4577041. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...

9.3CVSS8.2AI score0.3131EPSS
Exploits2References65
Tenable Nessus
Tenable Nessus
added 2020/09/08 12:0 a.m.55 views

KB4577070: Windows Server 2008 September 2020 Security Update

The remote Windows host is missing security update 4577070 or cumulative update 4577064. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...

9.3CVSS8AI score0.3131EPSS
Exploits0References41
Positive Technologies
Positive Technologies
added 2020/09/08 12:0 a.m.2 views

PT-2020-4157 · Microsoft · Windows Media Audio Decoder +1

Name of the Vulnerable Software and Affected Versions: Windows Media Audio Decoder affected versions not specified Description: A remote code execution issue exists due to improper handling of objects by Windows Media Audio Decoder, allowing an attacker to potentially take control of an affected...

8.8CVSS7.8AI score0.01278EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2020/09/08 12:0 a.m.63 views

KB4577049: Windows 10 September 2020 Security Update

The remote Windows host is missing security update 4577049. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...

9.3CVSS8.1AI score0.3131EPSS
Exploits2References52
Tenable Nessus
Tenable Nessus
added 2020/09/04 12:0 a.m.33 views

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2020:2461-1)

This update for java-180-ibm fixes the following issues : Update to Java 8.0 Service Refresh 6 Fix Pack 15 bsc1175259, bsc1174157 CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581 CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583 CVE-2019-17639 - Class Libraries : -...

8.3CVSS6.2AI score0.01018EPSS
Exploits0References21
OSV
OSV
added 2020/09/02 3:42 p.m.14 views

GHSA-44VF-8FFM-V2QH Sensitive Data Exposure in rails-session-decoder

All versions of rails-session-decoder are missing verification of the Message Authentication Code appended to the cookies. This may lead to decryption of cipher text thus exposing encrypted information. Recommendation No fix is currently available. Consider using an alternative module until a fix...

7.3AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/02 3:42 p.m.34 views

Sensitive Data Exposure in rails-session-decoder

All versions of rails-session-decoder are missing verification of the Message Authentication Code appended to the cookies. This may lead to decryption of cipher text thus exposing encrypted information. Recommendation No fix is currently available. Consider using an alternative module until a fix...

3.1AI score
Exploits0References2Affected Software1
Rows per page
Query Builder