Lucene search
+L

8003 matches found

OSV
OSV
added 2019/04/09 12:29 a.m.4 views

CVE-2019-0754

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'...

5.5CVSS6.8AI score0.01616EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/09 12:29 a.m.3 views

CVE-2019-0755

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0767, CVE-2019-0775, CVE-2019-0782...

5.5CVSS6.3AI score0.02354EPSS
SaveExploits0References3
NVD
NVD
added 2019/04/09 12:29 a.m.11 views

CVE-2019-0746

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'...

6.5CVSS6.8AI score0.06553EPSS
SaveExploits0References1
NVD
NVD
added 2019/04/09 12:29 a.m.23 views

CVE-2019-0754

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'...

5.5CVSS6.7AI score0.01616EPSS
SaveExploits0References1
NVD
NVD
added 2019/04/09 12:29 a.m.16 views

CVE-2019-0755

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0767, CVE-2019-0775, CVE-2019-0782...

5.5CVSS4.7AI score0.02354EPSS
SaveExploits0References3
OSV
OSV
added 2019/04/09 12:29 a.m.3 views

CVE-2019-0702

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0755, CVE-2019-0767, CVE-2019-0775, CVE-2019-0782...

5.5CVSS6.3AI score0.01616EPSS
SaveExploits0References1
Prion
Prion
added 2019/04/09 12:29 a.m.25 views

Information disclosure

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0755, CVE-2019-0767, CVE-2019-0775, CVE-2019-0782...

2.1CVSS4.5AI score0.02354EPSS
SaveExploits0References1Affected Software5
NVD
NVD
added 2019/04/09 12:29 a.m.15 views

CVE-2019-0696

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'...

7.8CVSS8.1AI score0.01084EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2019/04/09 12:0 a.m.50 views

CVE-2019-0685

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka ‘Win32k Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2019-0803, CVE-2019-0859. Recent assessments: Assessed Attacker Value: 0 Assessed...

7.8CVSS8.4AI score0.4523EPSS
SaveIn wildExploits28References2
Microsoft KB
Microsoft KB
added 2019/04/09 12:0 a.m.101 views

Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: April 9, 2019

Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: April 9, 2019 Summary A remote code execution vulnerability exists in the manner in which the VBScript engine handles objects in memory. To learn more about the vulnerability, go to...

9.3CVSS8.9AI score0.18031EPSS
SaveExploits0
Prion
Prion
added 2019/04/08 11:29 p.m.29 views

Remote code execution

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0665, CVE-2019-0667, CVE-2019-0772...

7.6CVSS7.8AI score0.3126EPSS
SaveExploits2References1Affected Software1
NVD
NVD
added 2019/04/08 11:29 p.m.18 views

CVE-2019-0612

A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerability does not allow arbitrary code execution, aka 'Microsoft Edge Security Feature Bypass Vulnerability'...

5.3CVSS5.8AI score0.10514EPSS
SaveExploits2References1
Prion
Prion
added 2019/04/08 11:29 p.m.20 views

Security feature bypass

A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerability does not allow arbitrary code execution, aka 'Microsoft Edge Security Feature Bypass Vulnerability'...

2.6CVSS5.7AI score0.10514EPSS
SaveExploits2References1
CVE
CVE
added 2019/04/08 10:34 p.m.115 views

CVE-2019-0612

CVE-2019-0612 is a security feature bypass in Microsoft Edge where Click2Play protection improperly handles Flash objects. The bypass does not by itself enable arbitrary code execution, but can undermine the protection mechanism. Affected product: Microsoft Edge on Windows; vulnerable component: ...

5.3CVSS6.8AI score0.10514EPSS
SaveExploits2References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.8 views

The vulnerability of the PHPMailer library, related to incorrect input data validation, allows attackers to inject objects into the system.

The vulnerability of the PHPMailer library is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to inject objects into the system...

8.8CVSS6.5AI score0.02211EPSS
SaveExploits0References3Affected Software2
VulnCheck KEV
VulnCheck KEV
added 2019/04/01 12:0 a.m.5 views

VulnCheck KEV: CVE-2019-0784

A remote code execution vulnerability exists in the way that the ActiveX Data objects ADO handles objects in memory, aka 'Windows ActiveX Remote Code Execution Vulnerability'...

7.6CVSS7.4AI score0.08261EPSS
SaveExploits0References1
NVD
NVD
added 2019/03/28 6:29 a.m.31 views

CVE-2017-18365

The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. This occurs because the enterprise session secret is always the same, and can be found in the product's source code. By sending a...

9.8CVSS9.8AI score0.21238EPSS
SaveExploits1References2
Prion
Prion
added 2019/03/28 6:29 a.m.21 views

Deserialization of untrusted data

The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. This occurs because the enterprise session secret is always the same, and can be found in the product's source code. By sending a...

7.5CVSS9.7AI score0.21238EPSS
SaveExploits1References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2019/03/28 12:0 a.m.31 views

(0Day) Hewlett Packard Enterprise Intelligent Management Center TopoMsgServlet Java Reflection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

8.8CVSS4.2AI score0.03462EPSS
SaveExploits0
OSV
OSV
added 2019/03/25 6:29 p.m.5 views

UBUNTU-CVE-2018-16838

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access...

5.4CVSS6.3AI score0.01102EPSS
SaveExploits0References3
Rows per page
Query Builder