|
211461
|
8.8 |
HIGH
Network
|
microsoft
|
windows_10 windows_7 windows_server_2008 windows_vista
|
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 10 Gold and 1511 allow remote attackers to execute arbitrary code via unspecified vectors, aka "Win32k Remo…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-0009
|
2024-11-21 11:40 |
2016-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211462
|
4.3 |
MEDIUM
Network
|
microsoft
|
windows_server_2008 windows_server_2012 windows_rt windows_8.1 windows_7 windows_rt_8.1 windows_vista windows_8
|
The graphics device interface in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 a…
|
CWE-200
Information Exposure
|
CVE-2016-0008
|
2024-11-21 11:40 |
2016-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211463
|
7.8 |
HIGH
Local
|
microsoft
|
windows_server_2008 windows_server_2012 windows_rt windows_10 windows_8.1 windows_7 windows_rt_8.1 windows_vista windows_8
|
The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Win…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-0007
|
2024-11-21 11:40 |
2016-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211464
|
7.3 |
HIGH
Local
|
microsoft
|
windows_server_2008 windows_server_2012 windows_rt windows_10 windows_8.1 windows_7 windows_rt_8.1 windows_vista windows_8
|
The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Win…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-0006
|
2024-11-21 11:40 |
2016-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211465
|
4.3 |
MEDIUM
Network
|
microsoft
|
internet_explorer
|
Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability."
|
CWE-20
Improper Input Validation
|
CVE-2016-0005
|
2024-11-21 11:40 |
2016-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211466
|
9.6 |
CRITICAL
Network
|
microsoft
|
edge
|
Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Microsoft Edge Memory Corruption Vulnerability."
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-0003
|
2024-11-21 11:40 |
2016-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211467
|
7.5 |
HIGH
Network
|
microsoft
|
jscript vbscript
|
The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafte…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-0002
|
2024-11-21 11:40 |
2016-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211468
|
8.8 |
HIGH
Network
|
jasper_project
|
jasper
|
Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory …
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2015-8751
|
2024-11-21 11:39 |
2020-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211469
|
7.5 |
HIGH
Network
|
node-uuid_project
|
node-uuid
|
node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing.
|
CWE-331
Insufficient Entropy
|
CVE-2015-8851
|
2024-11-21 11:39 |
2020-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211470
|
9.8 |
CRITICAL
Network
|
php-gettext_project opensuse redhat fedoraproject
|
php-gettext leap enterprise_linux fedora
|
The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code.
|
CWE-20
Improper Input Validation
|
CVE-2015-8980
|
2024-11-21 11:39 |
2019-11-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|