Lucene search
+L

2271 matches found

CNVD
CNVD
added 2015/10/29 12:0 a.m.8 views

Apple Safari/iTunes WebKit Memory Corruption Vulnerability (CNVD-2015-07109)

IOS is an operating system developed by Apple for mobile devices; Safari is the latest operating system for Apple computers; the browser in Mac OS X; and iTunes is a digital media playback application. A security vulnerability exists in WebKit in Apple iOS versions prior to 9.1, Safari versions...

6.8CVSS7.6AI score0.02683EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2015/10/21 12:0 a.m.7 views

The vulnerability of the Mac OS X operating system allows a perpetrator to gain access to protected information in the kernel’s memory.

The vulnerability of the SMBClient component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an intruder, operating locally, to gain access to protected information in the kernel memory...

2.1CVSS5.5AI score0.00356EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2015/10/15 12:0 a.m.3 views

Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2015-06689)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory misreference vulnerability exists in Adobe Reader/Acrobat. This allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could crash the application or execute arbitrary code...

6.8CVSS7.3AI score0.05995EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/10/13 12:0 a.m.41 views

MS15-108: Security Update for JScript and VBScript to Address Remote Code Execution (3089659)

The VBScript and JScript engines on the remote host are affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in the VBScript and JScript engines due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by convincin...

9.3CVSS8.6AI score0.32285EPSS
SaveExploits4References5
BDU FSTEC
BDU FSTEC
added 2015/10/06 12:0 a.m.6 views

The vulnerability of the Flash Player and Adobe Integrated Runtime software allows a perpetrator to execute arbitrary code.

The vulnerability of the Flash Player and Adobe Integrated Runtime software-related programs is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS6.2AI score0.0484EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
added 2015/09/27 12:0 a.m.2 views

Adobe Flash Player Memory Error Reference Memory Corruption Vulnerability (CNVD-2015-06316)

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. A memory misreference vulnerability exists in Adobe Flash Player that could allow an...

10CVSS7.3AI score0.45511EPSS
SaveExploits2References1
CNVD
CNVD
added 2015/09/06 12:0 a.m.6 views

Google Chrome OpenJPEG Memory Misreference Vulnerability

Google Chrome is a WEB-based browser. A memory misreference vulnerability in the opjj2kcopydefaulttcpandcreatetcd function in j2k.c in OpenJPEG used in Google Chrome PDFium allows remote attackers to construct a malicious WEB page, which can be tricked into parsing by the user, and can crash the...

7.5CVSS9.4AI score0.02677EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2015/08/28 12:0 a.m.7 views

The vulnerability of the Firefox browser, which allows a hacker to execute arbitrary code

The vulnerability of the MediaStream component in the Firefox browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.06328EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/08/25 12:0 a.m.6 views

The vulnerabilities of Adobe Integrated Runtime and Flash Player software allow a perpetrator to execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS5.9AI score0.44792EPSS
SaveExploits1References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2015/08/25 12:0 a.m.6 views

The vulnerabilities of Adobe Integrated Runtime and Flash Player software allow a perpetrator to execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS5.9AI score0.44792EPSS
SaveExploits3References2Affected Software2
Exploit DB
Exploit DB
added 2015/08/19 12:0 a.m.28 views

Adobe Flash - '.SWF' Out-of-Bounds Memory Read (2)

Source: https://code.google.com/p/google-security-research/issues/detail?id=362&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id The following access violation was observed in the Adobe Flash Player plugin: 1dec.1af0: Access violation - code c0000005 first chance First chanc...

10CVSS5.1AI score0.50728EPSS
SaveExploits1
CNVD
CNVD
added 2015/08/14 12:0 a.m.2 views

Mozilla Firefox memory corruption vulnerability (CNVD-2015-05349)

Mozilla Firefox is a web browser developed by the Mozilla Foundation in conjunction with the open source community. A memory corruption vulnerability exists in Mozilla Firefox, which could be exploited by an attacker to cause a denial of service by executing arbitrary code in the user's context...

4.6CVSS8.8AI score0.00344EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2015/07/31 12:0 a.m.10 views

The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the JScript 9 component in the Internet Explorer browser is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure through a specially crafted web page...

9.3CVSS8.8AI score0.44688EPSS
SaveExploits2References3Affected Software1
CNVD
CNVD
added 2015/07/30 12:0 a.m.6 views

Cisco AnyConnect Secure Mobility Client Denial of Service Vulnerability

Cisco AnyConnect Secure Mobility Client is a set of next-generation VPN clients from Cisco. The client enables remote users to securely connect to the Cisco ASA 5500 device via SSL VPN. A denial of service vulnerability exists in Cisco AnyConnect Secure Mobility Client 4.0on OS X that allows loca...

4.9CVSS6.5AI score0.00292EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2015/07/22 12:0 a.m.11 views

The vulnerability of the Adobe Reader DC PDF viewer program allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Reader DC PDF viewer program is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS5.9AI score0.05688EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2015/07/22 12:0 a.m.12 views

The vulnerability of Adobe Acrobat’s PDF editing software allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Acrobat PDF editing program relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS5.9AI score0.05688EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/07/22 12:0 a.m.11 views

The vulnerability of the Adobe Acrobat DC PDF editing program allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Acrobat DC PDF editing program relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS5.9AI score0.06908EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2015/07/21 10:14 a.m.7 views

wireshark: DEC DNA Routing Protocol dissector crash (wnpa-sec-2015-03)

Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service application crash via a crafted packet, related to the use of...

5CVSS7.2AI score0.02645EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2015/07/20 12:0 a.m.7 views

The vulnerability of the Adobe AIR software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe AIR software platform arises from an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.8AI score0.08158EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2015/07/10 12:0 a.m.11 views

Adobe Flash Player ActionScript 3 Memory Misreference Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in the 'ByteArray' class in the ActionScript 3 AS3 implementation of...

10CVSS7.8AI score0.99344EPSS
SaveExploits7References1
Rows per page
Query Builder