Lucene search
+L

12952 matches found

Citrix
Citrix
•added 2018/12/10 12:00 a.m.•15 views

[WEM 4.7]The agent is unable to change the priority for a process with an error code 87

The errors are associated with processes like eventvwr, notity etc...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2018/12/10 12:00 a.m.•8 views

PT-2018-13218

Name of the Vulnerable Software and Affected Versions Accusoft PrizmDoc HTML5 Document Viewer versions prior to 13.5 Description The issue allows an attacker to read arbitrary files or cause a denial of service due to an XML external entity XXE vulnerability. Recommendations For versions prior to...

9.1CVSS0.0163EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/10 12:00 a.m.•10 views

CVE-2018-15805: Improper Restriction of XML External Entity Reference

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity XXE vulnerability, allowing an attacker to read arbitrary files or cause a denial of service resource consumption...

9.1CVSS5.9AI score0.0163EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/12/06 12:00 a.m.•24 views

Artifex MuPDF Denial of Service Vulnerability (CNVD-2019-06785)

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A buffer overflow vulnerability exists in the svg/svg-run.c file in Artifex MuPDF version 1.14.0. A remote attacker can exploit this vulnerability to cause a denial of service with a specially crafted svg file...

5.5CVSS7.2AI score0.01571EPSS
SaveExploits1References1
Microsoft KB
Microsoft KB
•added 2018/11/27 12:00 a.m.•27 views

November 27, 2018—KB4467108 (Preview of Monthly Rollup)

None None...

5.3AI score
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2018/11/26 12:00 a.m.•150 views

MuPDF: Multiple vulnerabilities

Background A lightweight PDF, XPS, and E-book viewer. Description Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by enticing a user to process a specially crafted file, could possibly execute...

7.8CVSS4.1AI score0.02733EPSS
SaveExploits11
Fedora
Fedora
•added 2018/11/17 5:17 a.m.•48 views

[SECURITY] Fedora 29 Update: mupdf-1.14.0-6.fc29

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

5.5CVSS0.6AI score0.01607EPSS
SaveExploits3
Fedora
Fedora
•added 2018/11/14 3:24 a.m.•37 views

[SECURITY] Fedora 28 Update: feh-2.28-1.fc28

feh is a versatile and fast image viewer using imlib2, the premier image file handling library. feh has many features, from simple single file viewing, to multiple file modes using a slide-show or multiple windows. feh supports the creation of montages as index prints with many user-configurable...

9.8CVSS2.9AI score0.02266EPSS
SaveExploits0
Fedora
Fedora
•added 2018/11/14 3:13 a.m.•42 views

[SECURITY] Fedora 29 Update: feh-2.28-1.fc29

feh is a versatile and fast image viewer using imlib2, the premier image file handling library. feh has many features, from simple single file viewing, to multiple file modes using a slide-show or multiple windows. feh supports the creation of montages as index prints with many user-configurable...

9.8CVSS2.9AI score0.02266EPSS
SaveExploits0
Fedora
Fedora
•added 2018/11/14 2:56 a.m.•41 views

[SECURITY] Fedora 27 Update: feh-2.28-1.fc27

feh is a versatile and fast image viewer using imlib2, the premier image file handling library. feh has many features, from simple single file viewing, to multiple file modes using a slide-show or multiple windows. feh supports the creation of montages as index prints with many user-configurable...

9.8CVSS2.9AI score0.02266EPSS
SaveExploits0
Veracode
Veracode
•added 2018/11/14 2:55 a.m.•19 views

Cross-Site Scripting (XSS)

Apache Geronimo is vulnerable to cross-site scripting. A remote attacker is able to inject arbitrary Javascript into log files via the time parameter or any invalid parameters to cal2.jsp. The injected Javascript executes on the victim's browser when the log files are viewed through the...

4.3CVSS6.8AI score0.32247EPSS
SaveExploits3References14Affected Software12
Prion
Prion
•added 2018/11/14 1:29 a.m.•41 views

Remote code execution

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This...

9.3CVSS6.9AI score0.19059EPSS
SaveExploits0References3Affected Software5
CVE
CVE
•added 2018/11/14 1:00 a.m.•144 views

CVE-2018-8577

CVE-2018-8577 affects Microsoft Excel (and related Office components). The vulnerability arises when Excel fails to properly handle objects in memory, enabling a remote code execution where an attacker could run arbitrary code in the context of the current user. CVSSv3 vector indicates a local at...

9.3CVSS7.9AI score0.19059EPSS
SaveExploits0References3Affected Software6
Cvelist
Cvelist
•added 2018/11/14 1:00 a.m.•57 views

CVE-2018-8577

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This...

8AI score0.19059EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2018/11/14 12:00 a.m.•52 views

Microsoft Excel Viewer 2007 Service Pack 3 Remote Code Execution Vulnerability (KB4461519)

This host is missing an important security update according to Microsoft KB4461519 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.3CVSS6.5AI score0.19059EPSS
SaveExploits0References2
NVD
NVD
•added 2018/11/13 8:29 p.m.•28 views

CVE-2018-2491

When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to the log file. If this URL contains malicious JavaScript code it can eventually run inside the built-in log viewer of the application in case user opens the viewer and taps on the...

7.8CVSS7.6AI score0.00787EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2018/11/13 8:29 p.m.•15 views

CVE-2018-2491

When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to the log file. If this URL contains malicious JavaScript code it can eventually run inside the built-in log viewer of the application in case user opens the viewer and taps on the...

7.8CVSS5.9AI score0.00787EPSS
SaveExploits0References2
Prion
Prion
•added 2018/11/13 8:29 p.m.•27 views

Design/Logic Flaw

When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to the log file. If this URL contains malicious JavaScript code it can eventually run inside the built-in log viewer of the application in case user opens the viewer and taps on the...

6.8CVSS7.4AI score0.00787EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2018/11/13 8:00 p.m.•85 views

CVE-2018-2491

SAP Fiori Client (Android) is affected by a vulnerability where, when a deep link URL is opened and the log level is set to Debug, the client logs the URL to a log file. If the logged URL contains malicious JavaScript, it can be executed inside the app’s embedded log viewer when a user opens the ...

7.8CVSS7.5AI score0.00787EPSS
SaveExploits0References2Affected Software1
Microsoft KB
Microsoft KB
•added 2018/11/13 8:00 a.m.•152 views

November 13, 2018—KB4467701 (Monthly Rollup)

None None...

10CVSS6.8AI score0.74041EPSS
SaveExploits22
Rows per page
Query Builder