Lucene search
K

7696 matches found

Zero Day Initiative
Zero Day Initiative
added 2018/09/28 12:0 a.m.31 views

Foxit Reader Link setAction Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Lin...

6.8CVSS1.8AI score0.00567EPSS
Exploits0References1
NVD
NVD
added 2018/09/24 11:29 p.m.19 views

CVE-2018-10496

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Internet Browser Fixed in version 6.4.0.15. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...

8.8CVSS8.8AI score0.00882EPSS
Exploits0References1
Prion
Prion
added 2018/09/24 11:29 p.m.16 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Internet Browser Fixed in version 6.4.0.15. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...

6.8CVSS8.8AI score0.00882EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/09/24 11:0 p.m.21 views

CVE-2018-10496

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Internet Browser Fixed in version 6.4.0.15. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...

8.8AI score0.00882EPSS
Exploits0References1
NVD
NVD
added 2018/09/13 12:29 a.m.18 views

CVE-2018-8445

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8336, CVE-2018-8419, CVE-2018-8442, CVE-2018-844...

5.5CVSS5.2AI score0.08EPSS
Exploits0References3
OSV
OSV
added 2018/09/13 12:29 a.m.1 views

CVE-2018-8443

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

5.5CVSS7.3AI score0.02135EPSS
Exploits0References3
OSV
OSV
added 2018/09/13 12:29 a.m.2 views

CVE-2018-8442

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

5.5CVSS7.3AI score0.02135EPSS
Exploits0References3
OSV
OSV
added 2018/09/13 12:29 a.m.3 views

CVE-2018-8410

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server...

7.8CVSS7.3AI score0.27933EPSS
Exploits2References4
Prion
Prion
added 2018/09/13 12:29 a.m.25 views

Information disclosure

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge...

4.3CVSS4.3AI score0.11388EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2018/09/13 12:29 a.m.1 views

CVE-2018-8410

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server...

7.8CVSS5.5AI score0.27933EPSS
Exploits2References5
NVD
NVD
added 2018/09/13 12:29 a.m.16 views

CVE-2018-8331

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office...

9.3CVSS8.1AI score0.3391EPSS
Exploits0References3
CNVD
CNVD
added 2018/09/12 12:0 a.m.2 views

Microsoft Windows DirectX Graphics Kernel Local Elevation of Privilege Vulnerability (CNVD-2018-21208)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. DirectX Graphics Kernel is one of the graphics kernel drivers. A security vulnerability in the Microsoft Windows DirectX Graphics DXGKRNL driver's handling of memory objects allows remote attackers to...

7.8CVSS8.6AI score0.01058EPSS
Exploits0References1
CNVD
CNVD
added 2018/09/12 12:0 a.m.1 views

Microsoft Windows Kernel Local Information Disclosure Vulnerability (CNVD-2019-00348)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the Windows system kernels. An information disclosure vulnerability exists in Microsoft Windows kernel, which arises from a program's failure to properly handle...

5.5CVSS5.9AI score0.02135EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2018/09/11 7:0 a.m.23 views

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An authenticated attacker could exploit this vulnerability by...

5.5CVSS1.9AI score0.02135EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2018/09/11 7:0 a.m.27 views

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An authenticated attacker could exploit this vulnerability by...

5.5CVSS1.9AI score0.08EPSS
Exploits0
OpenVAS
OpenVAS
added 2018/09/11 12:0 a.m.50 views

Foreman < 1.14.0 Information Disclosure Vulnerability

Foreman is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:theforeman:foreman";...

4.3CVSS4.9AI score0.00251EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/09/10 3:0 p.m.28 views

CVE-2016-7077

foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. Unauthorized user can see names of such objects if their count is less than 6...

4.3CVSS4.8AI score0.00251EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2018/08/31 12:0 a.m.8 views

PT-2023-10677 · Samba +3 · Samba +3

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: An information leak issue was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved...

9.8CVSS7AI score0.19204EPSS
Exploits2References71
OSV
OSV
added 2018/08/29 1:29 p.m.0 views

UBUNTU-CVE-2018-8005

When there are multiple ranges in a range request, Apache Traffic Server ATS will read the entire object from cache. This can cause performance problems with large objects in cache. This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x users should upgra...

5.3CVSS7.1AI score0.06689EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2018/08/29 1:0 p.m.23 views

CVE-2018-8005

When there are multiple ranges in a range request, Apache Traffic Server ATS will read the entire object from cache. This can cause performance problems with large objects in cache. This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x users should upgra...

5.3CVSS5.5AI score0.06689EPSS
Exploits0
Rows per page
Query Builder