Lucene search
+L

5647 matches found

osv_cve
osv_cve
•added 2017/11/27 2:29 p.m.•26 views

CVE-2017-1001004

typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...

8.8CVSS7.6AI score0.01884EPSS
SaveExploits0References2
NVD
NVD
•added 2017/11/27 2:29 p.m.•28 views

CVE-2017-1001002

math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...

9.8CVSS9.6AI score0.02357EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/11/27 2:00 p.m.•41 views

CVE-2017-1001002

math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...

9.7AI score0.02357EPSS
SaveExploits0References2
CVE
CVE
•added 2017/11/27 2:00 p.m.•72 views

CVE-2017-1001004

The CVE-2017-1001004 entry affects the typed-function library in JavaScript prior to version 0.10.6. The underlying issue is that function names can contain JavaScript code, enabling arbitrary code execution in the JS engine. Affects typed-function up to 0.10.5; impact is arbitrary code execution...

8.8CVSS8.8AI score0.01884EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2017/11/27 2:00 p.m.•38 views

CVE-2017-1001004

typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...

8.9AI score0.01884EPSS
SaveExploits0References2
Mend
Mend
•added 2017/11/27 2:00 p.m.•5 views

CVE-2017-1001004

typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...

8.8CVSS0.01884EPSS
SaveExploits0References5
CVE
CVE
•added 2017/11/27 2:00 p.m.•77 views

CVE-2017-1001002

math.js before 3.17.0 allows arbitrary code execution in the JavaScript engine by creating a typed function with JavaScript code in the name. The vulnerability affects math.js (and has been referenced in OpenVAS/OSV/NVD entries) and can lead to code execution on affected systems. Affected compone...

9.8CVSS9.6AI score0.02357EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2017/11/27 2:00 p.m.•5 views

CVE-2017-1001002

math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...

9.8CVSS0.02357EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/27 12:00 a.m.•10 views

CVE-2017-1001004: Improper Control of Generation of Code

typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...

8.8CVSS8.3AI score0.01884EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/27 12:00 a.m.•5 views

CVE-2017-1001002: Improper Control of Generation of Code

math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...

9.8CVSS8.7AI score0.02357EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/11/27 12:00 a.m.•8 views

PT-2017-10978

Name of the Vulnerable Software and Affected Versions typed-function versions prior to 0.10.6 Description The issue allows for arbitrary code execution in the JavaScript engine. This can occur when creating a typed function with JavaScript code in the name, potentially leading to arbitrary...

8.8CVSS0.01884EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2017/11/14 12:00 a.m.•5 views

PT-2017-14411

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2017.012.20098 and earlier Adobe Acrobat and Reader versions 2017.011.30066 and earlier Adobe Acrobat and Reader versions 2015.006.30355 and earlier Adobe Acrobat and Reader versions 11.0.22 and earlier...

9.8CVSS0.0918EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2017/11/14 12:00 a.m.•5 views

PT-2017-14406

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2017.012.20098 and earlier Adobe Acrobat and Reader versions 2017.011.30066 and earlier Adobe Acrobat and Reader versions 2015.006.30355 and earlier Adobe Acrobat and Reader versions 11.0.22 and earlier...

9.3CVSS0.1692EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2017/11/14 12:00 a.m.•7 views

PT-2017-14403

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2017.012.20098 and earlier Adobe Acrobat and Reader versions 2017.011.30066 and earlier Adobe Acrobat and Reader versions 2015.006.30355 and earlier Adobe Acrobat and Reader versions 11.0.22 and earlier...

9.3CVSS0.09362EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2017/11/14 12:00 a.m.•3 views

PT-2017-3284

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitra...

7.6CVSS0.64194EPSS
SaveExploits4References9
Check Point Advisories
Check Point Advisories
•added 2017/11/14 12:00 a.m.•16 views

Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-11858)

A Memory Corruption Vulnerability exists in Microsoft browsers. The vulnerability is due to the way JavaScript engine is handling objects in memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

7.6CVSS7AI score0.08358EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2017/11/14 12:00 a.m.•5 views

PT-2017-14402

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2017.012.20098 and earlier Adobe Acrobat and Reader versions 2017.011.30066 and earlier Adobe Acrobat and Reader versions 2015.006.30355 and earlier Adobe Acrobat and Reader versions 11.0.22 and earlier...

9.3CVSS0.09362EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2017/11/14 12:00 a.m.•4 views

PT-2017-14433

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2017.012.20098 and earlier Adobe Acrobat and Reader versions 2017.011.30066 and earlier Adobe Acrobat and Reader versions 2015.006.30355 and earlier Adobe Acrobat and Reader versions 11.0.22 and earlier...

9.3CVSS0.0672EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2017/11/14 12:00 a.m.•4 views

PT-2017-14383

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2017.012.20098 and earlier Adobe Acrobat and Reader versions 2017.011.30066 and earlier Adobe Acrobat and Reader versions 2015.006.30355 and earlier Adobe Acrobat and Reader versions 11.0.22 and earlier...

9.3CVSS0.0672EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2017/11/14 12:00 a.m.•5 views

PT-2017-14384

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2017.012.20098 and earlier Adobe Acrobat and Reader versions 2017.011.30066 and earlier Adobe Acrobat and Reader versions 2015.006.30355 and earlier Adobe Acrobat and Reader versions 11.0.22 and earlier...

9.3CVSS0.0672EPSS
SaveExploits0References6
Rows per page
Query Builder