Lucene search
+L

7709 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.9 views

The vulnerability of the WebKit rendering module, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS8AI score0.01291EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:00 a.m.12 views

The vulnerability of Google Chrome’s Blink rendering module relates to improper access control to critical resources, allowing attackers to compromise data integrity.

The vulnerability of Google Chrome’s Blink rendering module is related to improper control of access to critical resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially created HTML page...

7.1CVSS7AI score0.00706EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:00 a.m.11 views

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to compromise data integrity.

The vulnerability of Google Chrome’s Blink rendering module is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

4.3CVSS6.5AI score0.00604EPSS
SaveExploits0References8Affected Software4
Veracode
Veracode
added 2020/04/20 2:23 a.m.24 views

Cross-site Scripting (XSS)

svg2png is vulnerable to cross-site scripting XSS. The attack exists because it renders XML snippet using phantomjs directly into an image without sanitizing it, allowing an attacker to inject arbitrary script inside SVG document...

6.1CVSS4AI score0.007EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/17 12:00 a.m.11 views

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service allows a hacker to execute arbitrary code.

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a...

9.3CVSS7.7AI score0.02054EPSS
SaveExploits0References9Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.10 views

The vulnerability of the WebKit rendering module, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WebKit rendering module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

7.1CVSS6.5AI score0.01225EPSS
SaveExploits0References11Affected Software14
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.8 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

6.8CVSS7.8AI score0.02207EPSS
SaveExploits0References13Affected Software18
Zero Day Initiative
Zero Day Initiative
added 2020/04/16 12:00 a.m.60 views

Oracle VirtualBox VBoxSVGA Type Confusion Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the SVGA...

7.5CVSS4AI score0.00567EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.10 views

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, and watchOS, as well as in the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service, allows a perpetrator to execute arbitrary code.

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, and watchOS, as well as in the multimedia player iTunes for Windows, Safari browser, and iCloud for Windows, is related to data type conversion errors. Exploiting this vulnerability allows a remote attacker to...

9.3CVSS7.7AI score0.18108EPSS
SaveExploits2References11Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.9 views

The vulnerability of the WebKit rendering module, related to insufficient validation of input data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the WebKit rendering module is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

7.1CVSS6.9AI score0.01304EPSS
SaveExploits0References12Affected Software15
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.11 views

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, and watchOS, as well as in the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service, allows a perpetrator to execute arbitrary code.

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, and watchOS, as well as in the multimedia player iTunes for Windows, Safari browser, and iCloud for Windows, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerabilit...

9.3CVSS7.7AI score0.10497EPSS
SaveExploits2References10Affected Software9
Zero Day Initiative
Zero Day Initiative
added 2020/04/16 12:00 a.m.32 views

Oracle VirtualBox VBoxSVGA Type Confusion Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the SVGA...

7.5CVSS4AI score0.00567EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.9 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

6.8CVSS7.8AI score0.01953EPSS
SaveExploits0References13Affected Software18
OSV
OSV
added 2020/04/15 9:07 p.m.48 views

GHSA-RC5R-697F-28X6 XSS injection in the Grid component of Sylius

Grid component of Sylius omits HTML input sanitisation while rendering object implementing toString method through the string field type...

4.8CVSS5AI score0.00552EPSS
SaveExploits0References4
OSV
OSV
added 2020/04/15 3:15 p.m.8 views

CVE-2020-1018

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a mask...

7.5CVSS5.8AI score0.06311EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/15 3:15 p.m.25 views

CVE-2020-1018

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a mask...

7.5CVSS7AI score0.06311EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/04/15 3:13 p.m.52 views

CVE-2020-1018

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a mask...

7.1AI score0.06311EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2020/04/14 7:00 a.m.39 views

Microsoft Dynamics Business Central/NAV Information Disclosure

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page. The attacker who successfully exploited the vulnerability could see the information that are in a...

7.5CVSS1.3AI score0.06311EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:00 a.m.10 views

The vulnerability of the rendering module in WebKit operating systems such as openSUSE Leap, Mac OS X, iOS, tvOS, and the Safari browser lies in the use of memory after it is released. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, Safari browser, multimedia player iTunes, and iCloud service is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...

9.3CVSS7.3AI score0.07714EPSS
SaveExploits1References10Affected Software16
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:00 a.m.8 views

The vulnerability of the rendering module in WebKit operating systems such as openSUSE Leap, Mac OS X, iOS, tvOS, and the Safari browser lies in the use of memory after it is freed. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, Safari browser, multimedia player iTunes, and iCloud service is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...

9.3CVSS7.3AI score0.01826EPSS
SaveExploits0References12Affected Software16
Rows per page
Query Builder