Lucene search
+L

15415 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2022/05/27 8:55 p.m.27 views

Security Bulletin: Vulnerability in Rational Rhapsody Help System (CVE-2013-0599) affecting Rational Rhapsody and Rational Rhapsody Design Manager

Summary A vulnerability in the IBM Eclipse Help System could allow a remote attacker to obtain sensitive information. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your...

5CVSS0.1AI score0.02112EPSS
SaveExploits0Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:00 a.m.12 views

The vulnerability of the Windows Graphics component in Microsoft Windows operating systems arises from insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of the Windows Graphics component in Microsoft Windows systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

9.3CVSS7.7AI score0.02577EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:00 a.m.10 views

The vulnerability of the BitLocker data protection function of the Microsoft Windows operating system, which allows a hacker to bypass the authentication process

The vulnerability of the BitLocker data protection function in the Microsoft Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to bypass the authentication process...

4.7CVSS6.4AI score0.00805EPSS
SaveExploits0References3
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/25 12:00 a.m.55 views

Microsoft Windows Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts...

9.3CVSS7.3AI score0.59776EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/25 12:00 a.m.51 views

Microsoft Windows Open Type Font Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system...

9.3CVSS4.4AI score0.64835EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/25 12:00 a.m.83 views

Microsoft Windows Remote Code Execution Vulnerability

A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts...

9.3CVSS7.3AI score0.54628EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/25 12:00 a.m.42 views

Microsoft Win32k Privilege Escalation Vulnerability

Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service DoS...

8.8CVSS6.4AI score0.14958EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/25 12:00 a.m.53 views

Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability

A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system...

9.3CVSS3.8AI score0.68684EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/24 12:00 a.m.33 views

Microsoft Windows SMBv1 Information Disclosure Vulnerability

The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet...

7.5CVSS4.2AI score0.99693EPSS
SaveIn wildExploits22
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/24 12:00 a.m.67 views

Microsoft Windows Search Remote Code Execution Vulnerability

Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory...

10CVSS3.9AI score0.64856EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/23 12:00 a.m.70 views

Microsoft Windows Privilege Escalation Vulnerability

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity...

7.8CVSS3.6AI score0.02404EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/23 12:00 a.m.72 views

Microsoft Windows SMB Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server...

6.5CVSS0.6AI score0.0964EPSS
SaveIn wildExploits0
BDU FSTEC
BDU FSTEC
added 2022/05/20 12:00 a.m.12 views

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by transmitting specially crafted data...

9CVSS8.1AI score0.02736EPSS
SaveExploits0References4
Check Point Advisories
Check Point Advisories
added 2022/05/17 12:00 a.m.55 views

Microsoft Windows Network File System Remote Code Execution (CVE-2022-26937)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS5.4AI score0.76531EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:00 a.m.11 views

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.02296EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:00 a.m.20 views

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by transmitting specially crafted data...

9CVSS8.1AI score0.02336EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/05/13 1:18 a.m.30 views

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0930,...

7.6CVSS6.5AI score0.15371EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/13 1:18 a.m.32 views

GHSA-6C2V-XC8F-FVF7 ChakraCore RCE Vulnerability

ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0930,...

7.5CVSS7.4AI score0.15371EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:18 a.m.29 views

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0930,...

7.6CVSS6.5AI score0.15371EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/13 1:18 a.m.30 views

GHSA-PHCC-FRH9-Q545 ChakraCore RCE Vulnerability

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872,...

7.5CVSS7.4AI score0.61431EPSS
SaveExploits6References8
Rows per page
Query Builder