The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

COYO Cross-Site Scripting Vulnerability

COYO is a social intranet software. COYO suffers from a cross-site scripting vulnerability. The vulnerability is due to a lack of URL validation by the program and can be exploited by an attacker to execute javascript code in the user context using malicious use of missed access...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a...

Updated flash-player-plugin packages fix security vulnerability

Information disclosure in the context of the current user. CVE-2019-7090...

Microsoft Edge Buffer Overflow Vulnerability

Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge that stems from a program not properly accessing objects in memory. An attacker can exploit the vulnerability to...

Adobe Acrobat 2017 Security Updates (APSB19-07) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Microsoft Edge Buffer Overflow Vulnerability (CNVD-2019-27381)

Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge that stems from a program not properly accessing objects in memory. An attacker can exploit the vulnerability to...

Microsoft Edge Buffer Overflow Vulnerability (CNVD-2019-27391)

Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge that stems from a program not properly accessing objects in memory. An attacker can exploit the vulnerability to...

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27386)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27389)

Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge and ChakraCore. An attacker can exploit this vulnerability to execute arbitrary code in the context of the curre...

Adobe Flash Player Within Google Chrome Security Update (APSB19-06) - Linux

Adobe Flash Player is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Flash Player Within Google Chrome Security Update (APSB19-06) - Mac OS X

Adobe Flash Player is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2019-04919)

Cisco Firepower Management Center is a Cisco device management application. A cross-site scripting vulnerability exists in the web-based management interface in Cisco FMC, which arises from a program that fails to adequately validate user-submitted input, and can be exploited by a remote attacker...

Cisco Webex Teams Cisco Spark URI Handler Remote Command Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Webex Cisco Spark. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. There is an issue with the way the product handles URIs within...

The vulnerability of the Windows Theme API component of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Windows Theme API component of the operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created file...

Remote Code Execution (RCE)

Microsoft.ChakraCore is vulnerable to remote code execution RCE attacks. The vulnerability exists due to a memory corruption issue that allows attackers to execute arbitrary code in the context of the current user...

Remote Code Execution (RCE)

Microsoft.ChakraCore is vulnerable to remote code execution. This is due to a type confusion via NewScObjectNoCtor or InitProto which would allow an attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2019-0567, CVE-2019-0568...

Microsoft SharePoint Enterprise Server 2016 Cross-Site Scripting Vulnerability

Microsoft SharePoint Enterprise Server 2016 is a suite of enterprise business collaboration platforms from Microsoft Corporation USA. The platform is used to consolidate business information and enables you to share work, collaborate with others, organize projects and workgroups, and search for...

Microsoft SharePoint Enterprise Server Cross-Site Scripting Vulnerability (CNVD-2019-16186)

Microsoft SharePoint Enterprise Server 2013 SP1 is a set of enterprise business collaboration platforms from Microsoft for consolidating business information and enabling you to share work, collaborate with others, organize projects and workgroups, and search for people and information. A...

Microsoft Office Word Viewer Remote Code Execution Vulnerability (KB4461635)

This host is missing an important security update according to Microsoft KB4461635 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...