Lucene search
+L

825 matches found

CNVD
CNVD
added 2020/01/15 12:0 a.m.8 views

Unspecified Vulnerability in Oracle Coherence

Oracle Fusion Middleware, the digital business platform for enterprise and cloud computing, is a comprehensive family of middleware products that enable organizations to create and run agile, intelligent business applications and maximize IT efficiency by leveraging modern hardware and software...

9.8CVSS9.3AI score0.97116EPSS
SaveExploits26References1
OSV
OSV
added 2020/01/14 11:15 p.m.5 views

CVE-2020-0628

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...

7.8CVSS7.1AI score0.00807EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2020/01/14 8:0 a.m.38 views

Windows Search Indexer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a...

7.8CVSS3.7AI score0.00807EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:0 a.m.9 views

The vulnerability of the relational database management system used by Microsoft Access programs in Microsoft Office and Office 365 allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the relational database management system used in Microsoft Access programs from Microsoft Office and Office 365 is related to errors in object processing in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information throu...

5.5CVSS5.9AI score0.02158EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/11/18 12:0 a.m.9 views

The vulnerability of the Config software interface towards the Apache Solr search server allows a hacker to execute arbitrary code.

The vulnerability of the Config software interface of the Apache Solr search server lies in the rehydration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the Solr side through HTTP POST requests after deserialization...

9.8CVSS8.6AI score0.77508EPSS
SaveExploits1References4Affected Software2
Microsoft CVE
Microsoft CVE
added 2019/11/12 8:0 a.m.31 views

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

6.5CVSS1.8AI score0.75859EPSS
SaveExploits0
OSV
OSV
added 2019/10/10 2:15 p.m.5 views

CVE-2019-1359

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1358...

7.8CVSS7.2AI score0.18062EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/10 2:15 p.m.6 views

CVE-2019-1358

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1359...

7.8CVSS7.2AI score0.76451EPSS
SaveExploits0References1
OSV
OSV
added 2019/09/11 10:15 p.m.5 views

CVE-2019-1250

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-124...

7.8CVSS7.1AI score0.18529EPSS
SaveExploits0References1
OSV
OSV
added 2019/09/11 10:15 p.m.5 views

CVE-2019-1246

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1247, CVE-2019-124...

7.8CVSS7.1AI score0.12643EPSS
SaveExploits0References1
OSV
OSV
added 2019/09/11 10:15 p.m.5 views

CVE-2019-1240

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-1247, CVE-2019-124...

7.8CVSS7.1AI score0.11924EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2019/09/10 12:0 a.m.6 views

VulnCheck KEV: CVE-2019-1214

Microsoft Windows Common Log File System CLFS driver improperly handles objects in memory which can allow for privilege escalation...

7.8CVSS6.5AI score0.01419EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2019/09/04 12:15 p.m.92 views

Important: Red Hat Security Advisory: redis security update

An update for redis is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.2CVSS7.3AI score0.26048EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2019/09/04 9:15 a.m.90 views

Important: Red Hat Security Advisory: redis security update

An update for redis is now available for Red Hat OpenStack Platform 14.0 Rocky. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

7.2CVSS7.3AI score0.26048EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2019/09/04 9:15 a.m.6 views

redis: Heap buffer overflow in HyperLogLog triggered by malicious client

A heap buffer overflow vulnerability was found in the Redis HyperLogLog data structure. By carefully corrupting a HyperLogLog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding into writing up to 3 bytes beyond the end of a heap-allocated buffer...

7.2CVSS5.9AI score0.26048EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2019/08/22 12:0 a.m.9 views

The vulnerability of the Windows Jet Database Engine database management system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine database management system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS6.4AI score0.04477EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/08/21 12:0 a.m.38 views

Microsoft Jet Database Engine Remote Code Execution Vulnerability (CNVD-2019-38619)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A remote code execution...

9.3CVSS8.5AI score0.04269EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/21 12:0 a.m.5 views

Microsoft Jet Database Engine Remote Code Execution Vulnerability (CNVD-2019-38620)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A remote code execution...

9.3CVSS8.4AI score0.04321EPSS
SaveExploits0References1
OSV
OSV
added 2019/08/14 9:15 p.m.3 views

CVE-2019-1205

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could th...

7.8CVSS7.6AI score0.03968EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/08/13 12:0 a.m.5 views

PT-2019-3004 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Graphics Component affected versions not specified Description: An information disclosure issue exists due to the improper handling of objects in memory by the Microsoft Windows Graphics Component. This could allow an attack...

5.5CVSS7.8AI score0.02832EPSS
SaveExploits1References7
Rows per page
Query Builder