Lucene search
+L

310 matches found

BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.8 views

The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.

The vulnerability of Windows GDI graphical device interfaces on Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information through a specially crafted document or web page...

6.5CVSS5.5AI score0.04314EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/06 12:0 a.m.11 views

The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.

The vulnerability of Windows GDI graphics device interfaces on Windows operating systems is related to errors in handling memory contents. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

6.5CVSS6.7AI score0.0699EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.8 views

The vulnerability of the Open Enclave SDK, a software development tool, is related to an error in object processing in memory, which allows a hacker to disclose sensitive information that is protected by this security measure.

The vulnerability of the Open Enclave SDK software development tools is related to an object handling error in memory. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

5.9CVSS6.5AI score0.0156EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.7 views

The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.

The vulnerability of Windows GDI graphics device interfaces on Windows operating systems is related to errors in handling memory contents. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

6.5CVSS7AI score0.09527EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.7 views

The vulnerability of the Microsoft JET Database Engine database driver on Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft JET Database Engine database driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

9.3CVSS7.8AI score0.16119EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.5 views

The vulnerability of the Terminal Services component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Terminal Services component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

4.9CVSS6.6AI score0.022EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/04/11 12:0 a.m.6 views

Microsoft Office Access Connectivity Engine Input Validation Error Vulnerability (CNVD-2019-27309)

Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. A remote code execution vulnerability...

7.8CVSS8.3AI score0.10551EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/04/10 12:0 a.m.5 views

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2019-10043)

Windows is a set of operating systems developed by Microsoft Corporation in the U.S. Windows uses a graphical mode GUI. An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability stems from a failure of the Win32k component to properly handle objects in memory. An...

7.8CVSS7.4AI score0.04151EPSS
SaveExploits2References1
CVE
CVE
added 2019/03/26 4:35 p.m.62 views

CVE-2013-2807

CVE-2013-2807 affects Rockwell Automation RSLinx Enterprise (LogReceiver.exe) across CPR9 to CPR9-SR6. The vulnerability stems from improper input handling for the Record Data Size field, enabling an oversized Datagram on UDP port 4444 that causes the service to undersize Total Record Size, trigg...

7.8CVSS7.5AI score0.03855EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:0 a.m.8 views

The vulnerability of the Internet Explorer browser’s script handler allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.7AI score0.08096EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/06 12:0 a.m.7 views

The vulnerability of Visual Studio Code’s source editor, related to a bug in file handling after opening a project, allows attackers to modify file access rights and execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to a error in variable handling after a project is opened. Exploiting this vulnerability could allow an attacker to modify file access rights and execute arbitrary code...

9.3CVSS7.5AI score0.27705EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/06 12:0 a.m.8 views

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs is related to errors in object handling in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

9.3CVSS7.8AI score0.14817EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/01/22 12:0 a.m.15 views

The vulnerability of the Microsoft Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Microsoft Windows operating system exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

5.5CVSS6.5AI score0.01849EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/01/22 12:0 a.m.17 views

The vulnerability of the Microsoft JET Database Engine database driver on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.7AI score0.12314EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/01/22 12:0 a.m.9 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

4.2CVSS7.7AI score0.7999EPSS
SaveExploits4References2Affected Software1
OSV
OSV
added 2018/12/11 4:29 p.m.3 views

DEBIAN-CVE-2018-18343

Incorrect handing of paths leading to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.1AI score0.01384EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:0 a.m.9 views

The vulnerability of the Win32k component of the Windows operating system allows a hacker to increase their privileges and execute arbitrary code in kernel mode.

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...

7CVSS8.2AI score0.01348EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/10/19 12:0 a.m.15 views

The vulnerability of the JavaScript script handler ChakraCore in browsers Internet Explorer and Microsoft Edge allows a hacker to disclose protected information.

The vulnerability of the JavaScript script handler ChakraCore in browsers Internet Explorer and Microsoft Edge is related to errors in processing objects in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially crafted web page...

5CVSS7.7AI score0.05588EPSS
SaveExploits0References3Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.29 views

Foxit Reader TextBox Validate Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

5.1CVSS1.7AI score0.03814EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/09/18 12:0 a.m.13 views

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer allows a perpetrator to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted web pages, applications, or Microsoft Offi...

7.6CVSS8.2AI score0.12892EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder