CVE-2017-14194

The CVE-2017-14194 entry concerns dayrui FineCms version 5.0.11, where the out function in controllers/member/Login.php is reported to have an XSS vulnerability related to the Referer HTTP header in Internet Explorer. Multiple connected records (NVD, Red Hat, CNVD, CVE list mirrors, and regional ...

CVE-2017-14195

The CVE-2017-14195 entry describes an XSS vulnerability in dayrui FineCms 5.0.11, specifically in the call_msg function of controllers/Form.php. The issue is triggered by the Referer HTTP header (noted for Internet Explorer) and is described across multiple sources as cross-site scripting, with p...

CVE-2017-14194

The out function in controllers/member/Login.php in dayrui FineCms 5.0.11 has XSS related to the Referer HTTP header with Internet Explorer...

NetScaler Gateway Endpoint Analysis Supported Operating System and Browsers

Q: What are the operating systems and Web browsers required for NetScaler Gateway Endpoint Analysis plug-in? A : To use the Endpoint Analysis Plug-in, the following software is required on the user device: Operating System| Supported Browsers ---|--- Mac OS X 10.9 and later| Safari 7.1 or...

GSA Bounty: Reflected XSS on the data.gov (WAF bypass+ Chrome XSS Auditor bypass+ works in all browsers)

Description Hello. I discovered Cross-Site scripting issue on the https://www.data.gov/local/ endpoint. The issue can be site-wide, and exploitable in any place, where pagination exist. The Impact and Severity I assigned the High severity, because unlike the last 263226 report that XSS was...

Error: “Cannot start apps. Please run reset receiver to resolve a lockdown conflict for ClientHostedAppsShortcuts (error 2320)”

Users access a StoreURL and launch published IE from their Client machines. Then they use published IE and connect to another StoreURL from another farm to access another application. Majority but not all users get errors while launching the application. Error: “Cannot start apps. Please run Rese...

VulnCheck KEV: CVE-2017-0037

Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution...

VulnCheck KEV: CVE-2017-0059

Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site...

ES File Explorer Directory Traversal Vulnerability

ES File Explorer ES File Explorer is a multifunctional cell phone file, program and process manager, which supports browsing and managing files between cell phone, computer, remote and Bluetooth. A directory traversal vulnerability exists in ES File Explorer version 3.2.4.1. An attacker could...

CVE-2015-1876

Directory traversal vulnerability in ES File Explorer 3.2.4.1...

Directory traversal

Directory traversal vulnerability in ES File Explorer 3.2.4.1...

CVE-2015-1876

Directory traversal vulnerability in ES File Explorer 3.2.4.1...

CVE-2015-1876

The CVE-2015-1876 entry corresponds to a directory traversal vulnerability in ES File Explorer version 3.2.4.1. Multiple connected sources (CNVD-2017-30451; CVNVDB/NVD) confirm that the affected product is ES File Explorer and that the flaw allows traversal of the device filesystem, with potentia...

The vulnerability in the JavaScript engine of Microsoft Edge and Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability in Microsoft Edge and Internet Explorer JavaScript engines arises from an operation that goes beyond the buffer boundaries in memory memory corruption due to script execution. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the...

Vulnerability of the JavaScript kernel in Microsoft Edge and Internet Explorer browsers, allowing attackers to execute arbitrary code

The vulnerability in the Microsoft Edge JavaScript kernel is caused by an operation going beyond the buffer boundaries in memory memory corruption due to a script error. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, as a resul...

The vulnerability of object handlers in Internet Explorer’s memory allows a hacker to execute arbitrary code.

The vulnerability of object handlers in Internet Explorer’s memory is caused by an operation that goes beyond the buffer boundaries in memory violation of access control to memory objects. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the curre...

Vulnerability of object handlers in Microsoft Edge and Internet Explorer browsers’ memory, allowing attackers to execute arbitrary code

The vulnerability of object handlers in the memory of Microsoft Edge and Internet Explorer arises from the execution of operations beyond the buffer boundaries in memory memory corruption. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the curre...

Vulnerability of object handlers in the memory of Internet Explorer and Microsoft Edge browsers, allowing attackers to execute arbitrary code

The vulnerability of object handlers in the memory of Internet Explorer and Microsoft Edge arises from the execution of operations beyond the buffer boundaries in memory memory corruption. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the curre...

The vulnerability in the JavaScript engine of Microsoft Edge and Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability in Microsoft Edge and Internet Explorer JavaScript engines arises from an operation that goes beyond the buffer boundaries in memory memory corruption due to script execution. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the...

Microsoft Internet Explorer Remote Code Execution Vulnerability(CVE-2017-8618)

There is a type confusion issue related to how some arithmetic operations are performed in VBScript. To illustrate, see the following simplified code of VbsVarMod static unsigned char resultlookuptable1818 = ... void VbsVarModVAR v1, VAR v2 VAR arithv1 = v1-PvarGetArithVal; VAR arithv2 =...