Shadow: security bypass

Background Shadow is a set of tools to deal with user accounts. Description A local attacker could possibly bypass security restrictions if an administrator used “group blacklisting” to restrict access to file system paths. Impact A local attacker could possibly bypass security restrictions...

SUSE-SU-2018:1007-1 Security update for the Linux Kernel (Live Patch 13 for SLE 12 SP2)

This update for the Linux Kernel 4.4.74-9238 fixes several issues. The following security issues were fixed: - CVE-2017-13166: Prevent elevation of privilege vulnerability in the v4l2 video driver bsc1085447. - CVE-2018-1068: A flaw in the implementation of 32-bit syscall interface for bridging...

ncurses: Multiple vulnerabilities

Background Free software emulation of curses in System V. Description Multiple vulnerabilities have been discovered in ncurses. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by enticing the user to process untrusted terminfo or other data, could execute...

Jungo DriverWizard WinDriver Denial of Service Vulnerability (CNVD-2018-08676)

Jungo DriverWizard WinDriver is a PCI/USB device driver development tool from Israel's Jungo Connectivity. A denial of service vulnerability exists in windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0. An attacker can exploit this vulnerability to cause a denial of service blue screen of dea...

Jungo DriverWizard WinDriver Denial of Service Vulnerability (CNVD-2018-08677)

Jungo DriverWizard WinDriver is a PCI/USB device driver development tool from Israel's Jungo Connectivity. A denial of service vulnerability exists in windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0. An attacker can exploit this vulnerability to cause a denial of service blue screen of dea...

CVE-2018-10072

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service BSOD via a 0x953827bf DeviceIoControl call...

Design/Logic Flaw

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service BSOD via a 0x953827bf DeviceIoControl call...

CVE-2018-10071

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service BSOD via a 0x953826DB DeviceIoControl call...

Jungo DriverWizard WinDriver Denial of Service Vulnerability (CNVD-2018-08462)

Jungo DriverWizard WinDriver is a PCI/USB device driver development tool from Israel's Jungo Connectivity. A security vulnerability exists in the windrvr1260.sys file in Jungo DriverWizard WinDriver version 12.6.0. The vulnerability can be exploited by an attacker to cause a denial of service wit...

Code injection

DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to uploads/dede/stepselectmain.php because code within the database is accessible to uploads/dede/syscacheup.php...

CVE-2018-9151

A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL 0x80030030...

Null pointer dereference

A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL 0x80030030...

CVE-2018-9151

CVE-2018-9151 affects the Kingsoft Internet Security 9+ kernel driver KWatch3.sys, with a NULL pointer dereference in the function ObReferenceObjectByHandle. It allows local, non-privileged users to crash the system via IOCTL 0x80030030. The provided connected documents confirm the affected compo...

CVE-2018-9136

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service BSOD via a crafted .exe file, a different vulnerability than CVE-2018-8821...

CVE-2018-9136

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service BSOD via a crafted .exe file, a different vulnerability than CVE-2018-8821...

CVE-2018-9136

The CVE-2018-9136 entry relates to Jungo DriverWizard WinDriver 12.6.0, specifically the windrvr1260.sys driver. The vulnerability allows a local attacker to trigger a denial-of-service (BSOD) by a specially crafted .exe file. No root-cause or remediation details are provided in the connected doc...

CVE-2018-9044

In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorwin10x64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc...

CVE-2018-9044

In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorwin10x64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc...

CVE-2018-9044

In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorwin10x64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc...

CVE-2018-9052

In Windows Master aka Windows Optimization Master 7.99.13.604, the driver file WoptiHWDetect.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100283c...