CVE-2019-8076

Adobe application manager installer version 10.0 have an Insecure Library Loading DLL hijacking vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user...

CVE-2019-8069

Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Same Origin Method Execution vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user...

Vanilla: XSS through chat messages

vulnerability name: cross site scripting through chat messages vulnerability description: cross site scripting is a vulnerability that allows an attacker to send malicious codeusually in javascript form to another user Because a browser cannot know if the script should be trusted or not, it will...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-34777)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2019-40558)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker with the help of a specially crafted file to perform an operation in the security context...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2019-40537)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker with a specially crafted file to perform an operation in the security context of the...

Microsoft Outlook Memory Corruption Vulnerability (CNVD-2019-40557)

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A memory corruption vulnerability exists in Microsoft Outlook, which can be exploited by an attacker to run arbitrary code in the context of the current user...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-28641)

Edge is Microsoft's browser for Windows 10, Chakra JScript engine is a JavaScript engine developed by Microsoft for its Internet Explorer 9, Internet Explorer 10, Internet Explorer 11 and Microsoft Edge and other web browsers. A memory corruption vulnerability exists in Microsoft Edge. The...

Microsoft Windows Graphics Component CVE-2019-1150 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows 10...

CVE-2016-10843

cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API SEC-76...

UBUNTU-CVE-2019-10182

It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from elements in JNLP files. An attacker could trick a victim into running a specially crafted application and use this flaw to upload arbitrary files to arbitrary locations in the context of the user...

icedtea-web: path traversal while processing <jar/> elements of JNLP files results in arbitrary file overwrite

It was found that icedtea-web did not properly sanitize paths from elements in JNLP files. An attacker could trick a victim into running a specially crafted application and use this flaw to upload arbitrary files to arbitrary locations in the context of the user...

CVE-2019-7846

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper error handling vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

CVE-2019-7843

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Insufficient input validation vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

CVE-2019-7941

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Information Exposure Through an Error Message vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-27084)

Edge is Microsoft's browser for Windows 10, characterized by fast and secure.ChakraCore is a Microsoft open source, efficient JS scripting engine for Windows IE/Edge kernel. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from a problem with the way the Chakra...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-27087)

Edge is Microsoft's browser for Windows 10, characterized by fast and secure.ChakraCore is a Microsoft open source, efficient JS scripting engine for Windows IE/Edge kernel. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from a problem with the way the Chakra...

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, potentially taking over the system with full user rights...

Remote Code Execution (RCE)

ChakraCore is vulnerable to remote code execution RCE. This is due to how the scripting engine handles objects in memory, allowing a remote attacker to execute arbitrary code in the context of the current user...

Microsoft Outlook for Android Spoofing Vulnerability

Microsoft Outlook for Android is an email application for the Android-based platform from Microsoft USA. A security vulnerability exists in Microsoft Outlook for Android. An attacker can exploit this vulnerability by sending a specially crafted email message to perform a cross-site scripting atta...