23358 matches found
CVE-2020-15138
CVE-2020-15138: Prism.js contains an XSS via the Previewers/Easing previews in Prism >=1.1.0 with Previewers plugin (>=1.10.0) or Previewer: Easing (1.1.0–1.9.0). The issue is fixed in Prism 1.21.0. A workaround is to disable easing preview on impacted code blocks if upgrading is not feasib...
CVE-2020-15138
Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...
Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2020-51786)
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. An information disclosure vulnerability exists in Microsoft IE 11. The vulnerability can be exploited by an attacker to obtain a user's personal information by making ...
The vulnerability of the Skype for Business application in Internet Explorer allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Skype for Business app in Internet Explorer is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by clicking on a specially created link within the app...
The vulnerability of the VBScript script handler in Internet Explorer allows a hacker to execute arbitrary code.
The vulnerability of VBScript script handlers in Internet Explorer exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
F5 Networks BIG-IP : BIG-IP Edge Client for Windows vulnerability (K20346072)
A use-after-free memory vulnerability exists in the BIG-IP Edge Client Windows ActiveX component. CVE-2020-5897 Impact This vulnerability allows an attacker to trigger memory corruption to the browser or execute code from the browser when the attacker crafts a malicious webpage and loads it into...
Microsoft Internet Explorer Memory Corruption (MS11-003; CVE-2011-0035)
A memory corruption vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted when parsing specially crafted Web content. To trigger this issue, an attacker may create a...
CVE-2020-1432
An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'...
CVE-2020-1432
An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'...
Information disclosure
An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'...
EUVD-2020-12308
An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'...
CVE-2020-1432
An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'...
CVE-2020-1432
CVE-2020-1432 is an information-disclosure vulnerability affecting Skype for Business when accessed through Internet Explorer. The CNVD entry describes IE11 as the affected component and notes exploitation could enable an attacker to obtain user information via a specially crafted URL (e.g., a ph...
Exploit for Improper Input Validation in Microsoft
FakeCVE-2020-1350 This is the source code for a very crude fa...
Microsoft Tackles 123 Fixes for July Patch Tuesday
A critical DNS bug and a publicly known elevation-of-privilege flaw top Microsoft’s July Patch Tuesday list of 123 fixes. The DNS flaw is a remote code-execution bug and is touted as one of the most critical Windows vulnerabilities released this year, earning the highest-severity CVSS score of 10...
July 14, 2020—KB4565513 (OS Build 10240.18638)
None None...
July 14, 2020—KB4565540 (Security-only update)
None None...
Internet Explorer help
None None...
Skype for Business via Internet Explorer Information Disclosure Vulnerability
An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer. An attacker who exploited the vulnerability could cause the user to place a call without additional consent, leading to information disclosure of the user profile. For the vulnerability to be...