Lucene search
K

7684 matches found

CNVD
CNVD
added 2018/04/16 12:0 a.m.2 views

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-09644)

Microsoft Excel is a trial balance software component of Microsoft's Office software. A security vulnerability in the way Microsoft Excel handles in-memory objects allows remote attackers to exploit the vulnerability by submitting a special file and tricking the user into parsing it, which could...

9.3CVSS7.3AI score0.4743EPSS
Exploits0References1
CNVD
CNVD
added 2018/04/16 12:0 a.m.2 views

Microsoft Office Remote Code Execution Vulnerability (CNVD-2018-09645)

Microsoft Excel is a trial balance software component of Microsoft's Office software. A security vulnerability in the way Microsoft Excel handles in-memory objects allows remote attackers to exploit the vulnerability by submitting a special file and tricking the user into parsing it, which could...

9.3CVSS7.3AI score0.36403EPSS
Exploits0References1
OSV
OSV
added 2018/04/12 1:29 a.m.2 views

CVE-2018-1026

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Office. This CVE ID is unique from CVE-2018-1030...

8.8CVSS6.4AI score0.4743EPSS
Exploits0References3
OSV
OSV
added 2018/04/12 1:29 a.m.1 views

CVE-2018-1000

An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

5.3CVSS5.8AI score0.31631EPSS
Exploits0References6
OSV
OSV
added 2018/04/12 1:29 a.m.1 views

CVE-2018-0987

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is uniqu...

4.3CVSS6.1AI score0.06512EPSS
Exploits0References3
OSV
OSV
added 2018/04/12 1:29 a.m.1 views

CVE-2018-0960

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

5.5CVSS5.8AI score0.01035EPSS
Exploits8References3
Prion
Prion
added 2018/04/12 1:29 a.m.27 views

Information disclosure

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

2.1CVSS5.1AI score0.14429EPSS
Exploits9References3Affected Software3
Prion
Prion
added 2018/04/12 1:29 a.m.17 views

Remote code execution

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Office. This CVE ID is unique from CVE-2018-1026...

9.3CVSS8.8AI score0.4743EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2018/04/12 1:29 a.m.25 views

Information disclosure

An information disclosure vulnerability exists when Office renders Rich Text Format RTF email messages containing OLE objects when a message is opened or previewed, aka "Microsoft Office Information Disclosure Vulnerability." This affects Microsoft Word, Microsoft Office. This CVE ID is unique fr...

4.3CVSS5.4AI score0.25571EPSS
Exploits0References3Affected Software3
Prion
Prion
added 2018/04/12 1:29 a.m.26 views

Remote code execution

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel. This CVE ID is unique from CVE-2018-1011, CVE-2018-1027, CVE-2018-1029...

9.3CVSS7.9AI score0.37412EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2018/04/12 1:0 a.m.19 views

CVE-2018-0950

An information disclosure vulnerability exists when Office renders Rich Text Format RTF email messages containing OLE objects when a message is opened or previewed, aka "Microsoft Office Information Disclosure Vulnerability." This affects Microsoft Word, Microsoft Office. This CVE ID is unique fr...

5.6AI score0.10722EPSS
Exploits0References3
CVE
CVE
added 2018/04/12 1:0 a.m.97 views

CVE-2018-0950

CVE-2018-0950: Microsoft Office information disclosure via RTF email rendering. Affected: Office/Word on Windows. Root cause: memory contents disclosure when rendering RTF messages with OLE objects; error in how Office handles memory disclosure. Impact: potential leakage of memory contents to a r...

6.5CVSS5.4AI score0.10722EPSS
Exploits0References3Affected Software2
Cvelist
Cvelist
added 2018/04/12 1:0 a.m.19 views

CVE-2018-0920

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel. This CVE ID is unique from CVE-2018-1011, CVE-2018-1027, CVE-2018-1029...

7.8AI score0.3391EPSS
Exploits0References3
CNVD
CNVD
added 2018/04/12 12:0 a.m.2 views

SAP Business Objects Session Fixation Vulnerability

SAP Business Objects is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The program provides reporting, performance management and data base and other functions. A session fixation vulnerability exists in SAP Business Objects that stems from the...

7.5CVSS6.9AI score0.00209EPSS
Exploits0References1
CNVD
CNVD
added 2018/04/11 12:0 a.m.2 views

Microsoft Office Information Disclosure Vulnerability (CNVD-2018-08640)

Microsoft Office 2010 SP2 and others are products of Microsoft Corporation.Microsoft Office 2010 SP2 is an office software suite product.Word 2007 SP3 is a word processing software. An information disclosure vulnerability exists in Microsoft Word and Office. A remote attacker can exploit this...

6.5CVSS6.2AI score0.10722EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2018/04/11 12:0 a.m.41 views

Microsoft Word 2010 Service Pack 2 Information Disclosure Vulnerability (KB4018359)

This host is missing an important security update according to Microsoft KB4018359 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

6.5CVSS6.1AI score0.10722EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2018/04/11 12:0 a.m.42 views

Microsoft Word 2013 Service Pack 1 Information Disclosure Vulnerability (KB4018347)

This host is missing an important security update according to Microsoft KB4018347 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

6.5CVSS6.1AI score0.10722EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2018/04/11 12:0 a.m.86 views

Microsoft Office Compatibility Pack Service Pack 3 Information Disclosure Vulnerability (KB4018354)

This host is missing an important security update according to Microsoft KB4018354 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

6.5CVSS6.1AI score0.10722EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2018/04/11 12:0 a.m.27 views

Microsoft Windows SAFEARRAY Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

6.8CVSS3AI score0.3447EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2018/04/11 12:0 a.m.37 views

Microsoft Word 2016 Information Disclosure Vulnerability (KB4018339)

This host is missing an important security update according to Microsoft KB4018339 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

6.5CVSS6.1AI score0.10722EPSS
Exploits0References1
Rows per page
Query Builder