Lucene search
+L

7584 matches found

Cisco
Cisco
added 2018/04/18 4:0 p.m.79 views

Cisco Adaptive Security Appliance Clientless SSL VPN Cross-Site Scripting Vulnerability

A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer SSL VPN portal of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of that portal on an...

6.1CVSS6AI score0.0189EPSS
SaveExploits0References1
Prion
Prion
added 2018/04/12 9:29 p.m.18 views

Design/Logic Flaw

The web-based management WBM interface in Unify former Siemens OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 generates session cookies with insufficient entropy, which makes it easier for remote attackers to hijack sessions via a brute-force attack...

6.8CVSS7.2AI score0.01626EPSS
SaveExploits0References2Affected Software2
NVD
NVD
added 2018/04/12 9:29 p.m.19 views

CVE-2014-8422

The web-based management WBM interface in Unify former Siemens OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 generates session cookies with insufficient entropy, which makes it easier for remote attackers to hijack sessions via a brute-force attack...

8.1CVSS8AI score0.01626EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/04/12 9:0 p.m.25 views

CVE-2014-8422

The web-based management WBM interface in Unify former Siemens OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 generates session cookies with insufficient entropy, which makes it easier for remote attackers to hijack sessions via a brute-force attack...

8AI score0.01626EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.30 views

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

9.3CVSS2.6AI score0.19167EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.33 views

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

9.3CVSS2.6AI score0.20136EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.33 views

Microsoft Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data...

9.3CVSS7.4AI score0.24109EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.36 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

7.6CVSS7.4AI score0.15076EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.36 views

Microsoft Edge PDF Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack...

4.3CVSS1.3AI score0.0578EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.21 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

7.6CVSS7.4AI score0.15076EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.32 views

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.4AI score0.15556EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.26 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

7.6CVSS7.4AI score0.15556EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.27 views

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

9.3CVSS2.6AI score0.20878EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.20 views

Microsoft Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data...

9.3CVSS7.4AI score0.24109EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.31 views

Microsoft Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data...

9.3CVSS7.4AI score0.40978EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.38 views

Windows VBScript Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

9.3CVSS7.4AI score0.19437EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.51 views

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

9.3CVSS2.6AI score0.24982EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.28 views

Microsoft Office Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delet...

9.3CVSS1.2AI score0.1963EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.25 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

6.4CVSS7.1AI score0.07745EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.28 views

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.4AI score0.15556EPSS
SaveExploits0
Rows per page
Query Builder