CVE-2018-16711

CVE-2018-16711 affects IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys. Version 1.2.0.5 (and possibly earlier) allows a user to send an IOCTL (0x9C402088) containing user-controlled data. The driver’s subroutine will execute a wrmsr instruction using the us...

CVE-2018-16712

The CVE-2018-16712 entry relates to IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys. The connected sources describe that versions 1.2.0.5 (and possibly earlier) expose a vulnerability via a specifically crafted IOCTL 0x9C406104 that allows reading physical ...

CVE-2018-16711: Improper Restriction of Operations within the Bounds of a Memory Buffer

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402088 with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for...

CVE-2018-16712: Exposure of Sensitive Information to an Unauthorized Actor

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory...

CVE-2018-16713: Improper Restriction of Operations within the Bounds of a Memory Buffer

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402084 with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for...

PT-2018-1952

Name of the Vulnerable Software and Affected Versions IObit Advanced SystemCare versions 1.2.0.5 and possibly earlier Description The issue is related to privilege management errors in the utility. It may allow a remote attacker to impact the confidentiality, integrity, and availability of...

PT-2018-1951

Name of the Vulnerable Software and Affected Versions IObit Advanced SystemCare versions 1.2.0.5 and earlier Description The issue is related to insufficient data protection in the utility. It allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory, potentially disclosi...

CVE-2018-17125

CScms 4.1 allows arbitrary directory deletion via a dir=..\ substring to plugins\sys\admin\Plugins.php...

MalwareFox AntiMalware v2.74.206.150 suffers from a denial of service vulnerability

MalwareFox AntiMalware is a suite of malware removal tools. The tool automatically detects and removes malware, cleans browsers, repairs files corrupted by rootkits and protects against virus infections in real time. A denial of service vulnerability exists in the zam32.sys driver in MalwareFox...

Denial of service vulnerability in the mp110005.sys driver of Micropoint Smart Defense Software Personal Free Edition (CNVD-2018-20120)

Micropoint Intelligent Defense Software Personal Free Edition is a set of third-generation anti-virus software of Micropoint Baihui Beijing Information Security Technology Co., Ltd. and adopts AI Intelligent Defense Technology to independently analyze and judge viruses. A denial of service...

Denial of service vulnerability in the mp110005.sys driver of Micropoint Smart Defense Software Personal Free Edition (CNVD-2018-20119)

Micropoint Intelligent Defense Software Personal Free Edition is a set of third-generation anti-virus software of Micropoint Baihui Beijing Information Security Technology Co., Ltd. and adopts AI Intelligent Defense Technology to independently analyze and judge viruses. A denial of service...

Denial of service vulnerability in the mp110005.sys driver of Micropoint Intelligent Defense Software Personal Free Edition (CNVD-2018-20118)

Micropoint Intelligent Defense Software Personal Free Edition is a set of third-generation anti-virus software of Micropoint Baihui Beijing Information Security Technology Co., Ltd. and adopts AI Intelligent Defense Technology to independently analyze and judge viruses. A denial of service...

Denial of service vulnerability in the mp110005.sys driver of Micropoint Smart Defense Software Personal Free Edition (CNVD-2018-20116)

Micropoint Intelligent Defense Software Personal Free Edition is a set of third-generation anti-virus software of Micropoint Baihui Beijing Information Security Technology Co., Ltd. and adopts AI Intelligent Defense Technology to independently analyze and judge viruses. A denial of service...

Denial of Service Vulnerability in Micropoint Intelligent Defense Software Personal Free Edition mp110005.sys Driver

Micropoint Intelligent Defense Software Personal Free Edition is a set of third-generation anti-virus software of Micropoint Baihui Beijing Information Security Technology Co., Ltd. and adopts AI Intelligent Defense Technology to independently analyze and judge viruses. A denial of service...

Denial of Service Vulnerability in Advanced SystemCare Ultimate v11.4.0.235

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A denial of service vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate v11.4.0.235, which...

Denial of Service Vulnerability in Advanced SystemCare Ultimate v11.4.0.235

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware and more. A denial of service vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate v11.4.0.235, which...

PT-2018-9526

Name of the Vulnerable Software and Affected Versions zephyr-rtos version 1.12.0 Description The issue is related to a NULL base pointer reference in the sys ring buf put and sys ring buf get functions, which can cause a CPU Page Fault with error code 0x00000010. This can be exploited through a...

PT-2018-13575

Name of the Vulnerable Software and Affected Versions Cscms version 4 Description The issue allows for CSRF attacks, enabling unauthorized actions such as creating a member, authenticating vip members, creating a super administrator, and creating a web editor through specific API endpoints:...

CVE-2018-16448: Cross-Site Request Forgery (CSRF)

Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save...

sqlite (>=0.19.7, <=0.21.1), sqlite3-sys (>=0.6.7, <=0.9.2) +3 more potentially affected by unknown CVE via temporary (0.5.1)

temporary CARGO version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on temporary and may be impacted: - sqlite =0.19.7, =0.6.7, =0.11.0, =0.2.6, =0.2.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2018-0022...