Lucene search
K

91 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:0 a.m.22 views

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code...

10CVSS4.6AI score0.96714EPSS
In wildExploits13
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.3 views

Apache Dubbo 安全漏洞

Apache Dubbo is the Apache Foundation of a Java-based high-performance open source RPC framework . An arbitrary command execution vulnerability exists in several versions of Dubbo. An attacker can exploit this vulnerability by injecting malicious code into the routing scripts , the default...

9.8CVSS6.3AI score0.61463EPSS
Exploits0References1
OSV
OSV
added 2020/07/14 11:15 p.m.3 views

CVE-2020-1403

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'...

7.5CVSS6.4AI score0.10451EPSS
Exploits0References1
OSV
OSV
added 2020/06/09 8:15 p.m.1 views

CVE-2020-1216

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1215, CVE-2020-1230, CVE-2020-1260...

7.5CVSS7.9AI score0.07175EPSS
Exploits1References1
OSV
OSV
added 2020/06/09 8:15 p.m.1 views

CVE-2020-1215

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260...

7.5CVSS7.9AI score0.08022EPSS
Exploits1References1
OSV
OSV
added 2020/06/09 8:15 p.m.1 views

CVE-2020-1213

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1214, CVE-2020-1215, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260...

7.5CVSS7.9AI score0.07175EPSS
Exploits1References1
The Hacker News
The Hacker News
added 2020/06/09 6:14 p.m.1 views

Microsoft Releases June 2020 Security Patches For 129 Vulnerabilities

Microsoft today released its June 2020 batch of software security updates that patches a total of 129 newly discovered vulnerabilities affecting various versions of Windows operating systems and related products. This is the third Patch Tuesday update since the beginning of the global Covid-19...

10CVSS8.2AI score0.14544EPSS
Exploits8
OSV
OSV
added 2020/03/12 4:15 p.m.1 views

CVE-2020-0847

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'...

7.5CVSS6.4AI score0.07746EPSS
Exploits0References1
CNVD
CNVD
added 2019/10/10 12:0 a.m.2 views

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2019-35571)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A remote code execution vulnerability exists in the way the VBScript Engine handles memory objects in Microsof...

7.6CVSS7.9AI score0.07053EPSS
Exploits0References1
CNVD
CNVD
added 2019/10/10 12:0 a.m.2 views

Microsoft Internet Explorer Buffer Overflow Vulnerability (CNVD-2019-35806)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A buffer overflow vulnerability exists in the way the VBScript Engine handles memory objects in Microsoft IE 9...

7.1CVSS7.5AI score0.05478EPSS
Exploits0References1
OSV
OSV
added 2019/09/11 10:15 p.m.1 views

CVE-2019-1236

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1208...

7.5CVSS7.1AI score0.07246EPSS
Exploits0References1
OSV
OSV
added 2019/04/08 11:29 p.m.2 views

CVE-2019-0665

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0666, CVE-2019-0667, CVE-2019-0772...

7.5CVSS7.8AI score0.08261EPSS
Exploits0References1
NVD
NVD
added 2018/12/31 2:29 p.m.17 views

CVE-2018-17191

Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...

9.8CVSS9.8AI score0.07755EPSS
Exploits0References2
Prion
Prion
added 2018/12/31 2:29 p.m.14 views

Remote code execution

Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...

7.5CVSS9.7AI score0.07755EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2018/12/31 2:0 p.m.54 views

CVE-2018-17191

The vulnerability concerns Apache NetBeans (incubating) 9.0 with NetBeans Proxy Auto-Configuration (PAC) interpretation, which is vulnerable to remote command execution (RCE). The root cause, as described in the sources, is the use of the Nashorn JavaScript engine during PAC processing, which lea...

9.8CVSS9.7AI score0.07755EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2018/12/30 12:0 a.m.2 views

PT-2018-3343 · Apache · Apache Netbeans

Name of the Vulnerable Software and Affected Versions: Apache NetBeans versions 9.0 Description: The issue is related to the Proxy Auto-Configuration PAC file in the Apache NetBeans development environment, which fails to neutralize script code in attributes on a web page. This can allow a remote...

10CVSS9.6AI score0.07755EPSS
Exploits0References12
NVD
NVD
added 2017/12/12 9:29 p.m.12 views

CVE-2017-11916

ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890,...

7.6CVSS7.8AI score0.06172EPSS
Exploits0References2
NVD
NVD
added 2017/10/13 1:29 p.m.25 views

CVE-2017-11797

ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796,...

7.6CVSS7.5AI score0.05799EPSS
Exploits0References2
Kitploit
Kitploit
added 2017/07/29 2:43 p.m.15 views

Dracnmap v2.2 - Exploit Network and Gathering Information with Nmap

Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the...

7.2AI score
Exploits0References1
OSV
OSV
added 2017/05/15 5:29 p.m.2 views

CVE-2017-0252

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0223...

9.8CVSS6.3AI score0.13382EPSS
Exploits0References1
Rows per page
Query Builder