Lucene search
K

6 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.21 views

Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability

Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through RadAsyncUpload which leads to code execution on the server in the context of the w3wp.exe process...

9.8CVSS9.2AI score0.93583EPSS
In wildExploits16
ATTACKERKB
ATTACKERKB
added 2021/04/13 12:0 a.m.46 views

CVE-2021-28482

Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28480, CVE-2021-28481, CVE-2021-28483. Recent assessments: zeroSteiner at June 03, 2021 1:07pm UTC reported: This vulnerability is a deserialization flaw in Exchange’s...

10CVSS1.2AI score0.87144EPSS
Exploits4References2
Veracode
Veracode
added 2020/06/25 9:22 a.m.53 views

Remote Code Execution

telerik is vulnerable to remote code execution. A .NET JavaScriptSerializer Deserialization vulnerability through RadAsyncUpload allows an attacker to execute malicious code on the server in the context of the w3wp.exe process...

9.8CVSS4.8AI score0.93583EPSS
Exploits16References11Affected Software2
Microsoft KB
Microsoft KB
added 2013/09/10 12:0 a.m.13 views

MS13-067: Description of the security update for Excel Web App: September 10, 2013

Resolves vulnerabilities in Microsoft Office server software that could allow remote code execution in the context of the W3wp.exe process service account.IntroductionThis security update resolves vulnerabilities in Microsoft Office server software that could allow remote code execution in the...

7.7AI score
Exploits0
0day.today
0day.today
added 2008/07/06 12:0 a.m.20 views

CMailServer 5.4.6 (CMailCOM.dll) Remote SEH Overwrite Exploit

Exploit for unknown platform in category remote exploits ============================================================= CMailServer 5.4.6 CMailCOM.dll Remote SEH Overwrite Exploit ============================================================= 0 strUID = arrStringi...

7.1AI score
Exploits0
CVE
CVE
added 2006/03/23 11:0 a.m.91 views

CVE-2006-1364

CVE-2006-1364 affects the Microsoft IIS worker process (w3wp.exe) when AspCompat is not used for referencing COM components in ASP.NET. The issue can allow remote attackers to cause a denial of service (resource consumption or crash) by repeatedly requesting multiple documents that reference COM ...

7.8CVSS7.4AI score0.23942EPSS
Exploits1References9Affected Software1
Rows per page
Query Builder