Lucene search
+L

38664 matches found

Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.42 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353,...

7.6CVSS7.3AI score0.68242EPSS
SaveExploits4References8Affected Software1
OSV
OSV
added 2022/05/13 1:20 a.m.43 views

GHSA-H8JQ-5737-HPCF ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353,...

7.5CVSS6.9AI score0.68242EPSS
SaveExploits4References8
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.34 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8242,...

7.6CVSS7.3AI score0.69342EPSS
SaveExploits4References9Affected Software1
OSV
OSV
added 2022/05/13 1:20 a.m.37 views

GHSA-4F79-FXH8-VGQ2 ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8242,...

7.5CVSS6.9AI score0.69342EPSS
SaveExploits4References9
OSV
OSV
added 2022/05/13 1:20 a.m.30 views

GHSA-J67M-WPV6-PV44 ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8242,...

7.5CVSS6.9AI score0.69342EPSS
SaveExploits4References9
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.35 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from...

7.6CVSS7.3AI score0.15962EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2022/05/13 1:20 a.m.30 views

GHSA-P97Q-J98Q-F98W ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from...

7.5CVSS6.9AI score0.15962EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2022/05/13 1:18 a.m.34 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-0945,...

7.6CVSS7.3AI score0.1559EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:18 a.m.31 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ...

7.6CVSS7.3AI score0.1559EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/13 1:18 a.m.28 views

GHSA-H5HW-QRRW-VFXG ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ...

7.5CVSS7.8AI score0.1559EPSS
SaveExploits0References6
OSV
OSV
added 2022/05/13 1:07 a.m.83 views

GHSA-3P68-M5QW-9G9W HTML Purifier cross-site scripting (XSS) vulnerability

Multiple cross-site scripting XSS vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted 1 background-image, 2 background, or 3 font-family Cascading Style Sheets CSS property, a different...

4.3CVSS5.2AI score0.00902EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/05/13 12:00 a.m.8 views

Fedora: Security Advisory for seamonkey (FEDORA-2022-abbb9d5575)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
CNVD
CNVD
added 2022/05/13 12:00 a.m.58 views

Cyber Cafe Management System SQL Injection Vulnerability

Cyber Cafe Management System CCMS is an Internet cafe management system. version 1.0 of Cyber Cafe Management System Project is vulnerable to SQL injection, which stems from multiple SQL injection vulnerabilities in the username and password parameters in the administration panel. An attacker cou...

7.5CVSS4.1AI score0.22909EPSS
SaveExploits1Affected Software1
The Hacker News
The Hacker News
added 2022/05/12 5:36 a.m.35 views

Hackers Deploy IceApple Exploitation Framework on Hacked MS Exchange Servers

Researchers have detailed a previously undocumented .NET-based post-exploitation framework called IceApple that has been deployed on Microsoft Exchange server instances to facilitate reconnaissance and data exfiltration. "Suspected to be the work of a state-nexus adversary, IceApple remains under...

0.1AI score
SaveExploits0
Fedora
Fedora
added 2022/05/12 1:47 a.m.17 views

[SECURITY] Fedora 34 Update: seamonkey-2.53.12-1.fc34

SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...

0.4AI score
SaveExploits0
Fedora
Fedora
added 2022/05/12 1:13 a.m.20 views

[SECURITY] Fedora 36 Update: seamonkey-2.53.12-1.fc36

SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...

0.4AI score
SaveExploits0
zdt
zdt
added 2022/05/12 12:00 a.m.808 views

Cisco RV340 SSL VPN Unauthenticated Remote Code Execution Exploit

This Metasploit module exploits a stack buffer overflow in the Cisco RV series router's SSL VPN functionality. The default SSL VPN configuration is exploitable, with no authentication required and works over the Internet! The stack is executable and no ASLR is in place, which makes exploitation...

10CVSS10AI score0.72458EPSS
SaveExploits7
CNVD
CNVD
added 2022/05/12 12:00 a.m.50 views

Microsoft Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CNVD-2022-70059)

Microsoft Windows Remote Access Connection Manager is a Windows service from Microsoft that manages virtual private network VPN connections from your computer to the Internet. An elevation of privilege vulnerability exists in Microsoft Windows Remote Access Connection Manager. The vulnerability...

7.8CVSS4.4AI score0.00606EPSS
SaveExploits0References1
NVD
NVD
added 2022/05/11 3:15 p.m.23 views

CVE-2022-27656

The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager ICM does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

6.1CVSS0.00546EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/11 3:15 p.m.13 views

CVE-2022-27656

The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager ICM does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

6.1CVSS6.4AI score0.00546EPSS
SaveExploits0References2
Rows per page
Query Builder