Lucene search
K

241 matches found

BDU FSTEC
BDU FSTEC
added 2018/12/07 12:0 a.m.6 views

The vulnerability of the Windows Search component in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Search component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by using specially created messages sent to the search service, including those using an...

9.9CVSS8.2AI score0.16079EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2018/09/21 12:0 a.m.5 views

The vulnerability of Microsoft Excel spreadsheet editors in the Microsoft Office 2016 software suite allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of Microsoft Excel in the Microsoft Office 2016 software suite is related to errors in processing objects in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user...

4.5CVSS8.1AI score0.19546EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2018/09/18 12:0 a.m.4 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a specially crafted web page...

10CVSS8.2AI score0.69019EPSS
Exploits4References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/09/18 12:0 a.m.4 views

The vulnerability of the Internet Explorer browser, caused by errors in memory object handling, allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

7.6CVSS8.3AI score0.12895EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/09/18 12:0 a.m.6 views

The vulnerability of the PDF Reader component of the Microsoft Edge browser, which allows a hacker to execute arbitrary code.

The vulnerability of the PDF Reader component of the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using specially crafted PDF-format content...

4.2CVSS8.2AI score0.42575EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2018/08/31 12:0 a.m.7 views

The vulnerability of the DirectX Graphics Kernel driver in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS5.5AI score0.01936EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2018/08/31 12:0 a.m.4 views

The vulnerability of the DirectX Graphics Kernel driver in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS5.5AI score0.03444EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2018/08/31 12:0 a.m.4 views

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to data processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7CVSS5.5AI score0.01248EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/08/29 12:0 a.m.4 views

The vulnerability of the DirectX Graphics Kernel driver in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow attackers to gain elevated privileges through a specially created application...

7CVSS5.5AI score0.01936EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2018/05/31 12:0 a.m.4 views

The vulnerability of Microsoft Edge browser and the ChakraCore JavaScript engine lies in memory object handling errors, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Edge browser and the JavaScript scenario handler ChakraCore arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

7.6CVSS8.4AI score0.15139EPSS
Exploits0References4
Hacker One
Hacker One
added 2018/03/22 7:3 a.m.37 views

Coinbase: ETH contract handling errors

A business logic error in the ETH contract handling code allowed for a nested revert call in contract execution to improperly credit a user account though funds had not been transferred. In addition, the code did not appropriately handle delegatecall within a contract. Sample contract for the fir...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2018/01/04 12:0 a.m.187 views

Microsoft Windows Multiple Vulnerabilities (KB4056898)

This host is missing an important security update according to Microsoft KB4056898 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

7.8CVSS7.7AI score0.93838EPSS
Exploits21References1
OSV
OSV
added 2017/12/13 2:29 a.m.5 views

CVE-2017-5530

The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may allow authorized users to impersonate other users, and therefore escalate their access privileges. Affected releases are tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0,...

8.1CVSS5.8AI score0.00859EPSS
Exploits0References1
FreeBSD
FreeBSD
added 2017/01/11 12:0 a.m.56 views

BIND -- multiple vulnerabilities

ISC reports: A malformed query response received by a recursive server in response to a query of RTYPE ANY could trigger an assertion failure while named is attempting to add the RRs in the query response to the cache. Depending on the type of query and the EDNS options in the query they receive,...

2AI score
Exploits0References4
UbuntuCve
UbuntuCve
added 2016/12/13 12:0 a.m.25 views

CVE-2016-9899

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

9.8CVSS7.2AI score0.21401EPSS
Exploits6References4
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.4 views

The vulnerability of the Internet Explorer browser, which allows a malicious actor to execute arbitrary code

The Internet Explorer browser contains a vulnerability related to memory handling errors. Exploiting this vulnerability allows a malicious individual to execute arbitrary code in the context of the current user...

9.3CVSS6AI score0.20451EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2016/03/20 12:0 a.m.25 views

DSA-3522-1 squid3 - security update

Bulletin has no description...

7.5CVSS7.5AI score0.09363EPSS
Exploits0
OpenVAS
OpenVAS
added 2016/01/05 12:0 a.m.34 views

Microsoft Edge Multiple Vulnerabilities (3104519)

This host is missing a critical security update according to Microsoft Bulletin MS15-113. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5AI score0.31029EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2014/04/08 12:0 a.m.41 views

Google Chrome < 34.0.1847.116 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is a version prior to 34.0.1847.116. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists in the included Flash version that could lead to arbitrary code execution. CVE-2014-0506 - A buffer overflow...

10CVSS7.6AI score0.0761EPSS
Exploits14References20
Tenable Nessus
Tenable Nessus
added 2013/05/24 12:0 a.m.24 views

Debian DSA-2682-1 : libxext - several vulnerabilities

Ilja van Sprundel of IOActive discovered several security issues in multiple components of the X.org graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitising may lead to...

6.8CVSS8.5AI score0.01693EPSS
Exploits0References4
Rows per page
Query Builder