Lucene search
+L

1251 matches found

myhack58
myhack58
•added 2015/12/10 12:00 a.m.•39 views

Microsoft released 1 2 on a major security bug fix patch-bug warning-the black bar safety net

On Tuesday Microsoft announced that as part of its monthly security Bulletin part of all Windows users should update theiroperating system, the prevention from at least two major vulnerabilities. MS15-1 2 8 patched a series of memory crash vulnerability, the latter so that the hacker can install...

1.9AI score
SaveExploits0
NVD
NVD
•added 2015/12/09 11:59 a.m.•40 views

CVE-2015-6136

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

9.3CVSS7.3AI score0.24725EPSS
SaveExploits1References10
NVD
NVD
•added 2015/12/09 11:59 a.m.•46 views

CVE-2015-6135

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability."...

5CVSS5.7AI score0.23498EPSS
SaveExploits1References5
Prion
Prion
•added 2015/12/09 11:59 a.m.•22 views

Memory corruption

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

9.3CVSS7.9AI score0.24725EPSS
SaveExploits1References10Affected Software2
Prion
Prion
•added 2015/12/09 11:59 a.m.•25 views

Information disclosure

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability."...

5CVSS6.2AI score0.23498EPSS
SaveExploits1References5Affected Software2
CVE
CVE
•added 2015/12/09 11:00 a.m.•83 views

CVE-2015-6135

CVE-2015-6135 concerns Microsoft VBScript 5.7/5.8 and JScript 5.7/5.8 engines used in Internet Explorer 8–11. The vulnerability allows a remote attacker to read sensitive data from process memory via a crafted web page, i.e., an information‑disclosure flaw. Affected component is the VBScript/JScr...

5CVSS5.6AI score0.23498EPSS
SaveExploits1References5Affected Software2
CVE
CVE
•added 2015/12/09 11:00 a.m.•97 views

CVE-2015-6136

The CVE-2015-6136 entry describes a memory corruption vulnerability in Microsoft VBScript 5.7/5.8 and JScript 5.7/5.8 engines used by Internet Explorer 8–11 and other products, enabling remote code execution via a crafted webpage. Affected components: VBScript and JScript engines embedded in IE. ...

9.3CVSS7.3AI score0.24725EPSS
SaveExploits1References10Affected Software2
Cvelist
Cvelist
•added 2015/12/09 11:00 a.m.•58 views

CVE-2015-6136

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

7.2AI score0.24725EPSS
SaveExploits1References10
OpenVAS
OpenVAS
•added 2015/12/09 12:00 a.m.•40 views

Microsoft Windows VBScript Multiple Remote Code Execution Vulnerabilities (3116178)

This host is missing an important security update according to Microsoft Bulletin MS15-126. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS4.9AI score0.24725EPSS
SaveExploits2References4
OpenVAS
OpenVAS
•added 2015/12/09 12:00 a.m.•149 views

Microsoft Internet Explorer Multiple Vulnerabilities (3116180)

This host is missing a critical security update according to Microsoft Bulletin MS15-124. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS5AI score0.34416EPSS
SaveExploits8References3
Microsoft KB
Microsoft KB
•added 2015/12/08 12:00 a.m.•15 views

MS15-126: Description of the security update for VBScript 5.8: December 8, 2015

Fixes vulnerabilities in the VBScript scripting engine in Windows that could allow remote code execution if an attacker hosts a specially crafted website.SummaryThis security update fixes vulnerabilities in the VBScript scripting engine in Windows. The more severe of the vulnerabilities could all...

7.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2015/12/08 12:00 a.m.•42 views

Microsoft Windows VBScript Join Function Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose the contents of memory on applications using the VBScript scripting language on vulnerable installations of Microsoft Windows. Microsoft Internet Explorer is an affected application. User interaction is required to exploit this vulnerability ...

9.3CVSS5.6AI score0.24725EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
•added 2015/12/08 12:00 a.m.•48 views

Microsoft Internet Explorer Scripting Engine Information Disclosure (MS15-124: CVE-2015-6135)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way VBScript engine manipulates BSTR objects. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

5CVSS5.7AI score0.23498EPSS
SaveExploits1
Microsoft KB
Microsoft KB
•added 2015/12/08 12:00 a.m.•74 views

MS15-126: Cumulative security update for JScript and VBScript to address remote code execution: December 8, 2015

Fixes vulnerabilities in the VBScript scripting engine in Windows that could allow remote code execution if an attacker hosts a specially crafted website.SummaryThis security update fixes vulnerabilities in the VBScript scripting engine in Windows. The more severe of the vulnerabilities could all...

9.3CVSS6.6AI score0.24725EPSS
SaveExploits2
Symantec
Symantec
•added 2015/12/08 12:00 a.m.•44 views

Microsoft VBScript and JScript CVE-2015-6135 Information Disclosure Vulnerability

Description Microsoft VBScript and JScript are prone to a remote information disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. The following products are vulnerable: Internet Explorer 8, 9, 10, and 11 Microsoft...

5CVSS5.7AI score0.23498EPSS
SaveExploits1Affected Software3
Zero Day Initiative
Zero Day Initiative
•added 2015/12/08 12:00 a.m.•46 views

Microsoft Windows VBScript InStrB Function Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose the contents of memory on applications using the VBScript scripting language on vulnerable installations of Microsoft Windows. Microsoft Internet Explorer is an affected application. User interaction is required to exploit this vulnerability ...

9.3CVSS5.6AI score0.24725EPSS
SaveExploits1References2
Microsoft KB
Microsoft KB
•added 2015/12/08 12:00 a.m.•34 views

MS15-126: Description of the security update for VBScript 5.7: December 8, 2015

None None...

6.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2015/12/08 12:00 a.m.•46 views

Microsoft Windows VBScript CreateObject Function Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose the contents of memory on applications using the VBScript scripting language on vulnerable installations of Microsoft Windows. Microsoft Internet Explorer is an affected application. User interaction is required to exploit this vulnerability ...

5CVSS5.7AI score0.23498EPSS
SaveExploits1References1
Kaspersky
Kaspersky
•added 2015/12/08 12:00 a.m.•122 views

KLA10719 Multiple vulnerabilities in Microsoft VBScript

Memory handling vulnerabilities were found in Microsoft VBScript. By exploiting these vulnerabilities malicious users can execute arbitrary code or obtain sensitive information. These vulnerabilities can be exploited remotely via a specially designed web site. Original advisories CVE-2015-6135...

9.3CVSS8AI score0.24725EPSS
SaveExploits2References10
Zero Day Initiative
Zero Day Initiative
•added 2015/12/08 12:00 a.m.•49 views

Microsoft Windows VBScript InStr/InStrRev Functions Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose the contents of memory on applications using the VBScript scripting language on vulnerable installations of Microsoft Windows. Microsoft Internet Explorer is an affected application. User interaction is required to exploit this vulnerability ...

9.3CVSS5.6AI score0.24725EPSS
SaveExploits1References2
Rows per page
Query Builder