Lucene search
+L

896 matches found

CNVD
CNVD
added 2019/03/13 12:00 a.m.17 views

Microsoft Chakra Scripting Engine Remote Memory Corruption Vulnerability Vulnerability

Microsoft ChakraCore and others are products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, or as a standalone JavaScript engine.Microsoft Edge is a web browser that comes with Windows 10 and later.Microsoft Internet...

6.5CVSS7.4AI score0.05488EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/03/06 12:00 a.m.11 views

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs is related to errors in object handling in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

9.3CVSS7.8AI score0.16277EPSS
SaveExploits0References3
OSV
OSV
added 2019/03/05 11:29 p.m.8 views

CVE-2019-0662

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0618...

8.8CVSS6.4AI score0.1452EPSS
SaveExploits0References2
OSV
OSV
added 2019/03/05 11:29 p.m.5 views

CVE-2019-0597

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625...

7.8CVSS7.7AI score0.1452EPSS
SaveExploits0References2
OSV
OSV
added 2019/03/05 11:29 p.m.5 views

CVE-2019-0595

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625...

7.8CVSS7.7AI score0.17386EPSS
SaveExploits0References3
OSV
OSV
added 2019/03/05 11:29 p.m.5 views

CVE-2019-0599

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0625...

7.8CVSS7.7AI score0.17302EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.11 views

The vulnerability of Human Interface Devices’ components in the Windows operating system, which allows a intruder to disclose protected information

The vulnerability of Human Interface Devices in the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

4.7CVSS6.5AI score0.02718EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.9 views

The vulnerability of the Windows Jet Database Engine component of the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code using a specially crafted file...

6.8CVSS7.3AI score0.17386EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.9 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

4.7CVSS6.6AI score0.06183EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.15 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

10CVSS6.6AI score0.63088EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.10 views

The vulnerability of Human Interface Devices’ components in the Windows operating system, which allows a intruder to disclose protected information

The vulnerability of Human Interface Devices in the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

4.7CVSS6.6AI score0.02718EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.8 views

Vulnerability of the kernel component of the Windows operating system, allowing a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel component is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS6.8AI score0.02952EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.8 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document file...

4.7CVSS6.6AI score0.06183EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.13 views

The vulnerability in the JavaScript ChakraCore engine of the Microsoft Edge browser allows a attacker to trigger memory corruption and execute arbitrary code.

The vulnerability of Microsoft Edge’s JavaScript ChakraCore engine is related to memory object handling flaws. Exploiting this vulnerability can allow a remote attacker to trigger memory corruption and execute arbitrary code through a specially crafted web page...

9.6CVSS7.8AI score0.11298EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2019/02/12 12:00 a.m.28 views

Adobe Acrobat Reader DC PDEContent Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.03644EPSS
SaveExploits0References1
OSV
OSV
added 2019/01/24 4:29 a.m.5 views

CVE-2018-17705

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.03934EPSS
SaveExploits0References2
OSV
OSV
added 2019/01/24 4:29 a.m.7 views

CVE-2018-17684

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.03934EPSS
SaveExploits0References2
NVD
NVD
added 2019/01/24 4:29 a.m.25 views

CVE-2018-17680

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.8AI score0.03934EPSS
SaveExploits0References2
OSV
OSV
added 2019/01/24 4:29 a.m.9 views

CVE-2018-17669

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.03778EPSS
SaveExploits0References2
NVD
NVD
added 2019/01/24 4:29 a.m.21 views

CVE-2018-17665

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.8AI score0.03778EPSS
SaveExploits0References2
Rows per page
Query Builder