Lucene search
+L

38677 matches found

OSV
OSV
added 2021/11/03 1:15 a.m.8 views

UBUNTU-CVE-2021-38492

When delegating navigations to the operating system, Firefox would accept the mk scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability...

6.5CVSS6.9AI score0.01155EPSS
SaveExploits1References6
AlpineLinux
AlpineLinux
added 2021/11/03 12:03 a.m.73 views

CVE-2021-38492

When delegating navigations to the operating system, Firefox would accept the mk scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability...

6.5CVSS6.9AI score0.01155EPSS
SaveExploits1
Cvelist
Cvelist
added 2021/11/03 12:03 a.m.39 views

CVE-2021-38492

When delegating navigations to the operating system, Firefox would accept the mk scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability...

6.9AI score0.01155EPSS
SaveExploits1References7
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.80 views

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution...

7.6CVSS7.8AI score0.29822EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.60 views

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption...

8.8CVSS7.5AI score0.80765EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.85 views

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user...

7.6CVSS7.9AI score0.52729EPSS
SaveIn wildExploits0
VulnCheck KEV
VulnCheck KEV
added 2021/11/03 12:00 a.m.8 views

VulnCheck KEV: CVE-2020-0878

Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user...

7.5CVSS6.9AI score0.02696EPSS
SaveExploits0References1
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.66 views

Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user...

7.5CVSS7.7AI score0.02696EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.28 views

SaltStack Salt Path Traversal Vulnerability

SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability...

6.5CVSS7.7AI score0.86178EPSS
SaveIn wildExploits15
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.89 views

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user...

7.6CVSS8.1AI score0.7729EPSS
SaveIn wildExploits4
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.48 views

Microsoft Internet Explorer Remote Code Execution Vulnerability

Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution...

8.8CVSS7.8AI score0.05448EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.70 views

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution...

7.6CVSS7.8AI score0.30676EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.32 views

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user...

7.6CVSS7.8AI score0.86863EPSS
SaveIn wildExploits17
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.36 views

SaltStack Salt Authentication Bypass Vulnerability

SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method calls. The vulnerability allows a remote user to access some methods without authentication, which can be used to retrieve user tokens from the salt master and/...

9.8CVSS9.1AI score0.96614EPSS
SaveIn wildExploits22
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.53 views

Microsoft Windows Server Buffer Overflow Vulnerability

Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services IIS 6.0 which allows remote attackers to execute code via a long header beginning with "If: http://" in a PROPFIND request...

10CVSS9.3AI score0.99823EPSS
SaveIn wildExploits41
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.90 views

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user...

8.8CVSS8.1AI score0.24188EPSS
SaveIn wildExploits0
The Hacker News
The Hacker News
added 2021/11/02 10:03 a.m.133 views

Alert! Hackers Exploiting GitLab Unauthenticated RCE Flaw in the Wild

A now-patched critical remote code execution RCE vulnerability in GitLab's web interface has been detected as actively exploited in the wild, cybersecurity researchers warn, rendering a large number of internet-facing GitLab instances susceptible to attacks. Tracked as CVE-2021-22205, the issue...

10CVSS1.1AI score0.99731EPSS
SaveExploits29
Openbugbounty
Openbugbounty
added 2021/11/02 8:59 a.m.10 views

pc-internet-telefon-dienstleistung.de Improper Access Control vulnerability OBB-2225318

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

0.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/11/02 12:00 a.m.6 views

PT-2021-7410 · Qualcomm · Qualcomm Snapdragon Consumer Iot +4

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Qualcomm Snapdragon Connectivity affected versions not specified Qualcomm Snapdragon Consumer IOT affected versions not specified Qualcomm Snapdragon Industrial IOT affected versions no...

6.7CVSS7.2AI score0.00119EPSS
SaveExploits0References9
Kitploit
Kitploit
added 2021/10/28 11:30 a.m.49 views

DonPAPI - Dumping DPAPI Credz Remotely

Dumping revelant information on compromised targets without AV detection DPAPI dumping Lots of credentials are protected by DPAPI. We aim at locating those "secured" credentials, and retreive them using : User password Domaine DPAPI BackupKey Local machine DPAPI Key protecting TaskScheduled blob...

7.1AI score
SaveExploits0References7
Rows per page
Query Builder