Lucene search
+L

1601 matches found

CNVD
CNVD
added 2020/08/17 12:0 a.m.4 views

Microsoft SharePoint Input Validation Error Vulnerability (CNVD-2020-49027)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

5.5CVSS6.5AI score0.01749EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/08/17 12:0 a.m.8 views

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2020-48604)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel that stems from the program's failure to properly handle objects in memory. The vulnerability can be exploited to run arbitrary code in the...

9.3CVSS8.1AI score0.04212EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/08/13 12:0 a.m.4 views

Microsoft Edge Code Execution Vulnerability (CNVD-2020-46810)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A remote code execution vulnerability exists in the way the Scripting Engine handles memory in Microsoft Edge HTML-based. An attacker can exploit this vulnerability by leveraging a...

9.3CVSS7.7AI score0.0451EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/08/13 12:0 a.m.15 views

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-64005)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

5.5CVSS6.5AI score0.01841EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/08/13 12:0 a.m.5 views

Microsoft Outlook Code Execution Vulnerability

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A remote code execution vulnerability exists in Microsoft Outlook, which arises from the program's failure to properly handle objects in memory. An attacker can exploit the vulnerability by means of a special...

9.3CVSS8.1AI score0.08876EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/08/12 12:0 a.m.4 views

Microsoft Edge Remote Code Execution Vulnerability (CNVD-2020-61587)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from a remote code execution vulnerability that stems from the program's failure to properly handle objects in memory. An attacker can exploit the vulnerability by...

7.8CVSS8.2AI score0.02984EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/08/11 12:0 a.m.4 views

PT-2020-3818 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A spoofing issue exists due to insufficient input validation in Microsoft SharePoint Server. This could allow a remote attacker to perform spoofing attacks by sending a...

5.5CVSS5.3AI score0.01841EPSS
SaveExploits0References6
VulnCheck KEV
VulnCheck KEV
added 2020/08/11 12:0 a.m.4 views

VulnCheck KEV: CVE-2020-1380

Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user...

8.8CVSS7.9AI score0.24188EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/08/09 12:0 a.m.2 views

PT-2020-3979 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: A cross-site scripting issue exists due to insufficient protection of the web page structure. This could allow a remote attacker to perform cross-site scripting...

5.4CVSS5.8AI score0.01634EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/07/30 12:0 a.m.5 views

Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2020-45185)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

5.4CVSS6.5AI score0.01654EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/30 12:0 a.m.15 views

Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2020-45183)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

5.4CVSS5.9AI score0.01604EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:0 a.m.16 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to writing data beyond the buffer in memory, allowing attackers to execute arbitrary code in the context of the current user.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to data writing beyond the buffer boundaries in memory. Exploiting this vulnerability...

10CVSS8.4AI score0.04253EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:0 a.m.14 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, Adobe Acrobat Reader 2015 are related to security exploits that allow attackers to escalate their privileges within the context of the current user.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to bypassing security features. Exploiting these vulnerabilities can allow attackers...

9.3CVSS6.8AI score0.02795EPSS
SaveExploits0References4
NVD
NVD
added 2020/07/28 6:15 p.m.29 views

CVE-2020-10929

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue...

8.8CVSS9AI score0.01925EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.5 views

The vulnerability of the Adobe Experience Design (Adobe XD) interface development program exists due to an incorrect path name limitation for the restricted access catalog. This allows a malicious actor to execute arbitrary code.

The vulnerability of the Adobe Experience Design Adobe XD interface development software exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.2AI score0.08262EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.8 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve an exploit that allows an attacker to execute arbitrary code. This exploit relies on a flaw in memory management, enabling the attacker to perform unauthorized operations.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerabili...

9.3CVSS8.5AI score0.13541EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.7 views

The vulnerability of the multimedia platform Adobe Shockwave Player, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the multimedia platform Adobe Shockwave Player is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.6AI score0.05185EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.8 views

The vulnerability of the multimedia platform Adobe Shockwave Player, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the multimedia platform Adobe Shockwave Player is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.6AI score0.04084EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.8 views

The vulnerability of the multimedia platform Adobe Shockwave Player, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the multimedia platform Adobe Shockwave Player is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.5AI score0.05066EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.9 views

The vulnerability of Adobe InDesign’s computer design automation tool lies in its lack of proper input data validation, allowing attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.2AI score0.27809EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder