43048 matches found
PT-2020-4154 · Microsoft · Edge +1
Name of the Vulnerable Software and Affected Versions: Microsoft Edge and Internet Explorer affected versions not specified Description: A remote code execution issue exists in the way Microsoft browsers access objects in memory, potentially allowing an attacker to execute arbitrary code in the...
Security Updates for Internet Explorer (September 2020)
The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory. An attacker who successfully exploited the...
Multiple vulnerabilities fixed in Microsoft browsers
There are multiple vulnerabilities in the Scripting Engine, Microsoft Edge and Microsoft Internet Explorer. The vulnerabilities allow a malicious party to execute arbitrary code execute arbitrary code or to obtain elevated privileges. The vulnerability with the highest rating has the attribute...
KLA11954 Multiple vulnerabilities in Microsoft Browsers
Multiple vulnerabilities were found in Microsoft browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Scripting Engine can be exploited remotely to execute...
Arbitrary Password Reset Vulnerability in ZLAN7144N2 at Shanghai Zoran Information Technology Co.
Shanghai Joran Information Technology Co., Ltd. is a high-tech enterprise providing industrial IoT solutions, founded in 2008, with products including: Serial Server, IoT Chip, Serial to Ethernet and so on. Shanghai Zoran Information Technology Co., Ltd ZLAN7144N2 suffers from an arbitrary passwo...
DoS and DDoS Attacks against Multiple Sectors
The Cybersecurity and Infrastructure Security Agency CISA is aware of open-source reporting of targeted denial-of-service DoS and distributed denial-of-service DDoS attacks against finance and business organizations worldwide. A DoS attack is accomplished by flooding the targeted host or network...
Prism Cross-Site Scripting Vulnerability
Prism is an application from the US-based individual developers of Prism. It is a lightweight, extensible syntax highlighting tool. A cross-site scripting vulnerability exists in Prism. An attacker can exploit the vulnerability to execute arbitrary code in Safari and Internet Explorer...
Vulnerabilities fixed in Cisco IOS XR and ASR
Cisco has fixed multiple vulnerabilities in IOS XR and 9000-series Aggregation Services Routers ASR. The vulnerabilities potentially enable a local, authenticated malicious agent to execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data...
CISA Releases Final Binding Operational Directive on Developing a Vulnerability Disclosure Policy
The Cybersecurity and Infrastructure Security Agency CISA has released Binding Operational Directive BOD 20-01, Develop and Publish a Vulnerability Disclosure Policy VDP. BOD 20-01 requires each federal agency to publish a VDP. Publication of agency VDPs will make it easier for users to report...
Operation PowerFall: CVE-2020-0986 and variants
In August 2020, we published a blog post about Operation PowerFall. This targeted attack consisted of two zero-day exploits: a remote code execution exploit for Internet Explorer 11 and an elevation of privilege exploit targeting the latest builds of Windows 10. While we already described the...
Hacker Infrastructure and Underground Hosting 101
Ever wonder how cybercriminals host content on the internet without a takedown or an arrest, and what makes them difficult to track down? We have the answers and insights...
openSIS SQL Injection Vulnerability (CNVD-2020-50531)
openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the fn parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...
The vulnerability of the Internet Explorer browser’s script handler allows a hacker to execute arbitrary code.
The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Internet Explorer browser’s script handler allows a hacker to execute arbitrary code.
The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the MSHTML mechanism in the Internet Explorer browser, allowing a hacker to execute arbitrary code
The vulnerability of the MSHTML mechanism in the Internet Explorer browser is related to errors in data processing. Exploiting this vulnerability allows a remote attacker to perform arbitrary actions...
Cisco IOS and Cisco IOS XR Resource Management Error Vulnerability
Cisco IOS and Cisco IOS XR are both operating systems developed by Cisco for its network devices. A security vulnerability in DVMRP in Cisco IOS XR Software, which stems from insufficient queue management of Internet Group Management Protocol IGMP packets, could allow an attacker to send carefull...
CVE-2020-7524
Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller V5.0.0.7 and prior which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending a specific IPv4 protocol package to Schneider Electric Modicon M218 Logic Controller can cause IPv4...
Vulnerability fixed in Cisco IOS XR
Cisco has fixed a vulnerability in the Distance Vector Multicast Routing Protocol DVMRP functionality in IOS XR. The vulnerability allows an unauthenticated remote malicious person able to cause a Denial-of-Service on the vulnerable device. To do so, the malicious party needs to send rogue IGMP...
