Lucene search
+L

26145 matches found

Github Security Blog
Github Security Blog
added 2022/05/14 2:24 a.m.42 views

ChakraCore RCE Vulnerability

The Microsoft 1 JScript 9, 2 VBScript, and 3 Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting...

9.3CVSS8.6AI score0.22955EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 2:24 a.m.40 views

ChakraCore RCE Vulnerability

The Microsoft 1 JScript 9, 2 VBScript, and 3 Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting...

9.3CVSS8.6AI score0.36361EPSS
SaveExploits0References8Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 2:24 a.m.43 views

ChakraCore RCE Vulnerability

The Microsoft 1 JScript 9, 2 VBScript, and 3 Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memo...

9.3CVSS7.7AI score0.23051EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2022/05/14 2:24 a.m.31 views

GHSA-H6G3-73H7-CHXP ChakraCore RCE Vulnerability

The Microsoft 1 JScript 9, 2 VBScript, and 3 Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memo...

8.8CVSS8.7AI score0.23051EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2022/05/14 2:23 a.m.29 views

ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption...

9.3CVSS7.3AI score0.17027EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2022/05/14 2:23 a.m.34 views

GHSA-92J2-GG59-4572 ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption...

7.5CVSS7AI score0.17027EPSS
SaveExploits0References9
OSV
OSV
added 2022/05/14 2:23 a.m.20 views

GHSA-F7P4-FMMH-4P8X ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability...

7.5CVSS7AI score0.16843EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2022/05/14 2:23 a.m.26 views

ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability...

7.6CVSS7.4AI score0.16843EPSS
SaveExploits0References9Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 2:22 a.m.26 views

ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra...

7.6CVSS7.4AI score0.73289EPSS
SaveExploits5References11Affected Software1
OSV
OSV
added 2022/05/14 2:22 a.m.28 views

GHSA-MMFQ-R3RG-8R7W ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra...

7.5CVSS8.3AI score0.73289EPSS
SaveExploits5References11
OSV
OSV
added 2022/05/14 2:03 a.m.49 views

GHSA-93C7-2942-3H47 ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10...

4.2CVSS5.3AI score0.03121EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2022/05/14 2:01 a.m.21 views

Gogs XSS Vulnerability

In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent...

6.1CVSS6.7AI score0.00869EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/05/14 2:01 a.m.27 views

GHSA-PX5R-FQJ6-R2F8 Gogs XSS Vulnerability

In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent...

6.1CVSS6AI score0.00869EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2022/05/14 1:10 a.m.44 views

Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...

5.4CVSS5.8AI score0.01531EPSS
SaveExploits0References6Affected Software2
Github Security Blog
Github Security Blog
added 2022/05/13 1:53 a.m.49 views

ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge...

4.3CVSS5.7AI score0.05588EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:53 a.m.35 views

ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore,...

7.6CVSS5.7AI score0.66877EPSS
SaveExploits4References6Affected Software1
OSV
OSV
added 2022/05/13 1:20 a.m.38 views

GHSA-85J8-G29G-M326 ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

7.5CVSS7AI score0.14443EPSS
SaveExploits0References5
OSV
OSV
added 2022/05/13 1:20 a.m.27 views

GHSA-P349-Q795-QJ4Q ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353,...

7.5CVSS6.9AI score0.24766EPSS
SaveExploits4References7
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.38 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353,...

7.6CVSS7.3AI score0.24766EPSS
SaveExploits4References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.42 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

7.6CVSS7.4AI score0.14443EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder