Page 304 of 2398 results (0.016 seconds)

CVSS: 5.5EPSS: 0%CPEs: 18EXPL: 0

CVE-2018-8514

https://notcve.org/view.php?id=CVE-2018-8514

An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Procedure Call runtime Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Existe una vulnerabilidad de divulgación de información cuando el tiempo de ejecución de Remote Procedure Call inicializa incorrectamente los objetos en la memoria. Esto también se conoce como "Remote Procedure Call runtime Information Disclosure Vulnerability". Esto afecta a Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10 y Windows 10 Servers. • http://www.securityfocus.com/bid/106079 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8514 • CWE-665: Improper Initialization •

CVSS: 6.5EPSS: 5%CPEs: 18EXPL: 0

CVE-2018-8595 – Microsoft Windows gdiplus GdipGetWinMetaFileBitsEx Out-Of-Bounds Read Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2018-8595

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8596. Existe una vulnerabilidad de divulgación de información cuando el componente Windows GDI no muestra correctamente los contenidos de su memoria. Esto también se conoce como "Windows GDI Information Disclosure Vulnerability". • http://www.securityfocus.com/bid/106083 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8595 •

CVSS: 10.0EPSS: 1%CPEs: 88EXPL: 0

CVE-2018-8540

https://notcve.org/view.php?id=CVE-2018-8540

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 4.7.2, Microsoft .NET Framework 4.6.2. Existe una vulnerabilidad de ejecución remota de código cuando Microsoft .NET Framework no valida las entradas correctamente. Esto también se conoce como ".NET Framework Remote Code Injection Vulnerability". Esto afecta a Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 4.7.2 y Microsoft .NET Framework 4.6.2. • http://www.securityfocus.com/bid/106073 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8540 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 7.6EPSS: 95%CPEs: 17EXPL: 1

CVE-2018-8625 – VBScript - VbsErase Reference Leak Use-After-Free

https://notcve.org/view.php?id=CVE-2018-8625

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. Existe una vulnerabilidad de ejecución remota de código debido a la forma en la que el motor VBScript gestiona los objetos en la memoria. Esto también se conoce como "Windows VBScript Engine Remote Code Execution Vulnerability". Esto afecta a Internet Explorer 9, Internet Explorer 11 e Internet Explorer 10. • https://www.exploit-db.com/exploits/46022 http://www.securityfocus.com/bid/106122 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8625 • CWE-416: Use After Free •

CVSS: 7.6EPSS: 96%CPEs: 17EXPL: 1

CVE-2018-8631 – Microsoft Windows - 'jscript!JsArrayFunctionHeapSort' Out-of-Bounds Write

https://notcve.org/view.php?id=CVE-2018-8631

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. Existe una vulnerabilidad de ejecución remota de código cuando Internet Explorer accede incorrectamente a los objetos en la memoria. Esto también se conoce como "Internet Explorer Memory Corruption Vulnerability". Esto afecta a Internet Explorer 9, Internet Explorer 11 e Internet Explorer 10. • https://www.exploit-db.com/exploits/46001 http://www.securityfocus.com/bid/106118 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8631 • CWE-787: Out-of-bounds Write •