CVE & Exploit Intelligence Database

CVE-2016-7201 8.8 HIGH KEV RANSOMWARE 3 PoCs Analysis EPSS 0.90

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.

CWE-843 Nov 10, 2016

CVE-2016-7200 8.8 HIGH KEV RANSOMWARE 3 PoCs Analysis EPSS 0.89

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.

CWE-787 Nov 10, 2016

CVE-2016-7194 7.5 HIGH 1 PoC Analysis EPSS 0.78

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and CVE-2016-7190.

CWE-119 Oct 14, 2016

CVE-2016-7190 7.5 HIGH 2 PoCs Analysis EPSS 0.76

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and CVE-2016-7194.

CWE-119 Oct 14, 2016

CVE-2016-7189 7.5 HIGH 1 PoC Analysis EPSS 0.79

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Execution Vulnerability."

CWE-119 Oct 14, 2016

CVE-2016-3386 7.5 HIGH 1 PoC Analysis EPSS 0.78

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3389, CVE-2016-7190, and CVE-2016-7194.

CWE-119 Oct 14, 2016

CVE-2009-4665 1 PoC Analysis EPSS 0.03

Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

CWE-22 Mar 05, 2010

CVE-2008-6540 1 PoC Analysis EPSS 0.05

DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default (1) ValidationKey and (2) DecryptionKey values cannot be modified in the web.config file, which allows remote attackers to bypass intended access restrictions by using the default keys.

CWE-264 Mar 30, 2009