Lucene search
+L

7645 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/17 12:00 a.m.10 views

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service allows a hacker to execute arbitrary code.

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a...

9.3CVSS7.7AI score0.02054EPSS
SaveExploits0References9Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.10 views

The vulnerability of the WebKit rendering module, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WebKit rendering module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

7.1CVSS6.5AI score0.01225EPSS
SaveExploits0References11Affected Software14
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.8 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

6.8CVSS7.8AI score0.02207EPSS
SaveExploits0References13Affected Software18
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.9 views

The vulnerability of the WebKit rendering module, related to insufficient validation of input data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the WebKit rendering module is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

7.1CVSS6.9AI score0.01304EPSS
SaveExploits0References12Affected Software15
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.10 views

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, and watchOS, as well as in the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service, allows a perpetrator to execute arbitrary code.

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, and watchOS, as well as in the multimedia player iTunes for Windows, Safari browser, and iCloud for Windows, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerabilit...

9.3CVSS7.7AI score0.10497EPSS
SaveExploits2References10Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.9 views

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, and watchOS, as well as in the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service, allows a perpetrator to execute arbitrary code.

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, and watchOS, as well as in the multimedia player iTunes for Windows, Safari browser, and iCloud for Windows, is related to data type conversion errors. Exploiting this vulnerability allows a remote attacker to...

9.3CVSS7.7AI score0.18108EPSS
SaveExploits2References11Affected Software9
Zero Day Initiative
Zero Day Initiative
added 2020/04/16 12:00 a.m.59 views

Oracle VirtualBox VBoxSVGA Type Confusion Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the SVGA...

7.5CVSS4AI score0.00567EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/16 12:00 a.m.32 views

Oracle VirtualBox VBoxSVGA Type Confusion Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the SVGA...

7.5CVSS4AI score0.00567EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.9 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

6.8CVSS7.8AI score0.01953EPSS
SaveExploits0References13Affected Software18
OSV
OSV
added 2020/04/15 9:07 p.m.47 views

GHSA-RC5R-697F-28X6 XSS injection in the Grid component of Sylius

Grid component of Sylius omits HTML input sanitisation while rendering object implementing toString method through the string field type...

4.8CVSS5AI score0.00552EPSS
SaveExploits0References4
OSV
OSV
added 2020/04/15 3:15 p.m.8 views

CVE-2020-1018

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a mask...

7.5CVSS5.8AI score0.06311EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/15 3:15 p.m.24 views

CVE-2020-1018

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a mask...

7.5CVSS7AI score0.06311EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/04/15 3:13 p.m.50 views

CVE-2020-1018

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a mask...

7.1AI score0.06311EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2020/04/14 7:00 a.m.38 views

Microsoft Dynamics Business Central/NAV Information Disclosure

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page. The attacker who successfully exploited the vulnerability could see the information that are in a...

7.5CVSS1.3AI score0.06311EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:00 a.m.9 views

The vulnerability of the rendering module in WebKit operating systems such as openSUSE Leap, Mac OS X, iOS, tvOS, and the Safari browser lies in the use of memory after it is released. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, Safari browser, multimedia player iTunes, and iCloud service is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...

9.3CVSS7.3AI score0.07714EPSS
SaveExploits1References10Affected Software16
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:00 a.m.12 views

The rendering mechanism in the Google Chrome browser for Android is vulnerable due to a lack of input validation mechanisms. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the rendering mechanism in the Google Chrome browser for Android is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data...

9.3CVSS7AI score0.01311EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:00 a.m.12 views

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious...

9.3CVSS7.3AI score0.02442EPSS
SaveExploits0References12Affected Software17
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:00 a.m.8 views

The vulnerability of the rendering module in WebKit operating systems such as openSUSE Leap, Mac OS X, iOS, tvOS, and the Safari browser lies in the use of memory after it is freed. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, Safari browser, multimedia player iTunes, and iCloud service is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...

9.3CVSS7.3AI score0.01826EPSS
SaveExploits0References12Affected Software16
Veracode
Veracode
added 2020/04/10 1:09 a.m.22 views

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the way Firefox rendered certain images using WebGL. A web page containing malicious content could cause Firefox to crash or, under certain conditions, possibly execute arbitrary code with the...

9.3CVSS3.5AI score0.03498EPSS
SaveExploits0References13Affected Software3
Veracode
Veracode
added 2020/04/10 1:09 a.m.30 views

Denial Of Service (DoS)

firefix/thunderbird is vulnerable to denial of service. A flaw was found in the way Firefox used its embedded Cairo library to render certain fonts. A web page containing malicious content could cause Firefox to crash or, under certain conditions, possibly execute arbitrary code with the privileg...

9.3CVSS4.5AI score0.04104EPSS
SaveExploits0References11Affected Software3
Rows per page
Query Builder