Lucene search
+L

23359 matches found

Vulnrichment
Vulnrichment
added 2017/04/12 2:00 p.m.9 views

CVE-2017-0210

An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."...

8.5AI score0.19522EPSS
SaveExploits0References3
rapid7community
rapid7community
added 2017/04/12 3:13 a.m.320 views

Patch Tuesday - April 2017

This month's updates deliver vital client-side fixes, resolving publicly disclosed remote code execution RCE vulnerabilities for Internet Explorer and Microsoft Office that attackers are already exploiting in the wild. In particular, they've patched the CVE-2017-0199 zero-day flaw in Office and...

9.3CVSS8.7AI score0.99933EPSS
SaveExploits30
ATTACKERKB
ATTACKERKB
added 2017/04/12 12:00 a.m.33 views

CVE-2017-0210

An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka “Internet Explorer Elevation of Privilege Vulnerability.” Recent...

8.8CVSS6.2AI score0.19522EPSS
SaveIn wildExploits0References4
OpenVAS
OpenVAS
added 2017/04/12 12:00 a.m.44 views

Microsoft Windows Multiple Vulnerabilities (KB4015219)

This host is missing an important security update according to Microsoft security update KB4015219. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS6.7AI score0.45648EPSS
SaveExploits17References4
Tenable Nessus
Tenable Nessus
added 2017/04/12 12:00 a.m.1037 views

Windows 7 and Windows 2008 R2 April 2017 Security Updates (Petya)

The remote Windows host is missing security update 4015546 or cumulative update 4015549. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the open-source libjpeg image processing library due to improper handling of objects in memory. An...

9.3CVSS8.5AI score0.99933EPSS
SaveExploits36References19
OpenVAS
OpenVAS
added 2017/04/12 12:00 a.m.44 views

Microsoft Windows Multiple Vulnerabilities (KB4015583)

This host is missing an important security update according to Microsoft security update KB4015067. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS6.7AI score0.45648EPSS
SaveExploits14References4
OpenVAS
OpenVAS
added 2017/04/12 12:00 a.m.99 views

Microsoft Windows Monthly Rollup (KB4015550)

This host is missing a monthly rollup according to Microsoft KB4015550. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.4AI score0.45648EPSS
SaveExploits14References29
OpenVAS
OpenVAS
added 2017/04/12 12:00 a.m.132 views

Microsoft Windows Monthly Rollup (KB4015549)

This host is missing a monthly rollup according to Microsoft security update KB4015549. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS6.8AI score0.99933EPSS
SaveExploits36References20
OpenVAS
OpenVAS
added 2017/04/12 12:00 a.m.83 views

Microsoft Windows Monthly Rollup (KB4015551)

This host is missing a monthly rollup according to Microsoft KB4015551. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.8AI score0.99933EPSS
SaveExploits36References25
Kaspersky
Kaspersky
added 2017/04/12 12:00 a.m.126 views

KLA11915 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An implementation vulnerability in Securit...

9.3CVSS8.8AI score0.43272EPSS
SaveExploits7References32
ThreatPost
ThreatPost
added 2017/04/11 6:19 p.m.151 views

Microsoft Patches Three Vulnerabilities Under Attack

Microsoft today patched a zero-day Word vulnerability that has been publicly attacked along with deploying fixes for Internet Explorer, Microsoft Edge and Windows 10. In all, nine Microsoft products received updates totaling 45 unique CVEs. Three of the vulnerabilities among Tuesday’s updates,...

9.3CVSS0.1AI score0.99933EPSS
SaveExploits30References13
Microsoft KB
Microsoft KB
added 2017/04/11 7:00 a.m.89 views

Internet Explorer help

None None...

8.8CVSS6.9AI score0.45648EPSS
SaveExploits3
Microsoft KB
Microsoft KB
added 2017/04/11 7:00 a.m.30 views

Security update for the Scripting Engine Memory Corruption Vulnerability in Windows Server 2008: May 9, 2017

Security update for the Scripting Engine Memory Corruption Vulnerability in Windows Server 2008: May 9, 2017 Summary A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory when the engine is rendered in Internet Explorer. In a web-based attack...

7.6CVSS7.7AI score0.12793EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2017/04/11 7:00 a.m.126 views

April 11, 2017—KB4015547 (Security-only update)

None None...

9.3CVSS6.7AI score0.13975EPSS
SaveExploits11
Microsoft KB
Microsoft KB
added 2017/04/11 7:00 a.m.75 views

April 11, 2017—KB4015546 (Security-only update)

None None...

9.3CVSS6.8AI score0.99933EPSS
SaveExploits33
Microsoft CVE
Microsoft CVE
added 2017/04/11 7:00 a.m.29 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

7.6CVSS8.1AI score0.12793EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/04/11 7:00 a.m.38 views

Internet Explorer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain. In a web-based attack scenario, an attacker could host a website that is us...

8.8CVSS2.3AI score0.19522EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2017/04/11 7:00 a.m.68 views

April 11, 2017—KB4015548 (Security-only update)

None None...

9.3CVSS6.8AI score0.99933EPSS
SaveExploits36
Microsoft CVE
Microsoft CVE
added 2017/04/11 7:00 a.m.29 views

Internet Explorer Memory Corruption Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabilit...

7.6CVSS1.5AI score0.45648EPSS
SaveExploits3
Microsoft KB
Microsoft KB
added 2017/04/11 7:00 a.m.82 views

April 11, 2017—KB4015221 (OS Build 10240.17354)

None None...

9.3CVSS6.8AI score0.45648EPSS
SaveExploits17
Rows per page
Query Builder