Lucene search
+L

3676 matches found

BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.19 views

The vulnerability of the library for cleaning HTML-based text using python-bleach allows a attacker to compromise data integrity.

The vulnerability of the Python-bleach library for cleaning HTML blacklists is related to an error in adding the same word to a blacklist. Exploiting this vulnerability could allow an attacker to compromise data integrity...

4.7CVSS7.1AI score0.01301EPSS
SaveExploits1References4Affected Software2
RedHat Linux
RedHat Linux
added 2020/04/30 9:55 a.m.4 views

chromium-browser: Use after free in storage

Use after free in storage in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS7.4AI score0.01177EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2020/04/29 12:0 a.m.79 views

Microsoft SharePoint Server 2013 build < 15.0.5111.1001 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to ...

9.8CVSS10AI score0.99825EPSS
SaveExploits30References8
Tenable Nessus
Tenable Nessus
added 2020/04/29 12:0 a.m.18 views

Microsoft SharePoint Server 2019 build < 16.0.10350.20000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Microsoft SharePoint. - A spoofing vulnerability exists in Microsoft SharePoint when it...

8.8CVSS7.3AI score0.11659EPSS
SaveExploits5References14
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.13 views

The vulnerability of Google Chrome browsers, related to reading beyond the buffer in memory, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome’s browser involves reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to information and compromise its integrity and availability through a specially created HTML page...

9.3CVSS7.5AI score0.01171EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.16 views

The vulnerability of the Blink web browser component in Google Chrome, which allows a hacker to compromise data integrity

The vulnerability of the Blink web browser component in Google Chrome is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to affect data integrity through a specially created HTML page...

7.1CVSS7AI score0.00705EPSS
SaveExploits0References10Affected Software5
OSV
OSV
added 2020/04/22 3:32 p.m.7 views

USN-4337-1 openjdk-8, openjdk-lts vulnerabilities

It was discovered that OpenJDK incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service while processing a specially crafted regular expression. CVE-2020-2754, CVE-2020-2755 It was discovered that OpenJDK incorrectly handled class...

8.3CVSS6.8AI score0.0623EPSS
SaveExploits0References14
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:0 a.m.13 views

The vulnerability in the user interface of Google Chrome’s Chromium browser allows a hacker to compromise data integrity.

The vulnerability of Google Chrome’s Chromium user interface is related to improper control over access to critical resources. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

4.3CVSS6.6AI score0.00623EPSS
SaveExploits0References9Affected Software4
RedHat Linux
RedHat Linux
added 2020/04/16 8:49 a.m.5 views

chromium-browser: Type Confusion in V8

Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.4AI score0.01896EPSS
SaveExploits1References5
OSV
OSV
added 2020/04/15 3:15 p.m.2 views

CVE-2020-0971

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0932,...

8.8CVSS7.8AI score0.1318EPSS
SaveExploits0References2
OSV
OSV
added 2020/04/15 3:15 p.m.5 views

CVE-2020-0974

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0932,...

8.8CVSS7.8AI score0.10695EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.3 views

CVE-2020-0932

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0971,...

8.8CVSS7.8AI score0.31213EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.3 views

CVE-2020-0929

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0931, CVE-2020-0932, CVE-2020-0971,...

8.8CVSS7.8AI score0.10695EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/15 3:15 p.m.22 views

CVE-2020-0931

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0932, CVE-2020-0971,...

8.8CVSS8.9AI score0.10695EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.5 views

CVE-2020-0931

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0932, CVE-2020-0971,...

8.8CVSS7.8AI score0.10695EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.3 views

CVE-2020-0920

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0929, CVE-2020-0931, CVE-2020-0932, CVE-2020-0971,...

8.8CVSS7.8AI score0.10413EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/15 3:15 p.m.24 views

Remote code execution

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0929, CVE-2020-0931, CVE-2020-0932, CVE-2020-0971,...

6.5CVSS8.8AI score0.31213EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
added 2020/04/15 3:13 p.m.35 views

CVE-2020-0971

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0932,...

8.9AI score0.1318EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/04/15 12:0 a.m.6 views

SAP Commerce Input Validation Error Vulnerability

SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. The product supports sales management, marketing management, order management and operations management. An input validation error vulnerability exists in SAP Commerce that stems from the Rest API program not securely...

9.3CVSS6.8AI score0.0131EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/04/14 7:0 a.m.32 views

Microsoft SharePoint Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...

8.8CVSS2.9AI score0.10413EPSS
SaveExploits0
Rows per page
Query Builder