mozilla -- multiple vulnerabilities

Mozilla Foundation reports: CVE-2018-5183: Backport critical security fixes in Skia CVE-2018-5154: Use-after-free with SVG animations and clip paths CVE-2018-5155: Use-after-free with SVG animations and text paths CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files...

CVE-2018-10809

In 2345 Security Guard 3.7, the driver file 2345NetFirewall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-88...

PT-2018-3244

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 78.0.3904.70 Description The issue concerns incorrect security UI in full screen mode, allowing a remote attacker to hide security UI via a crafted HTML page. This is related to deficiencies in handling service...

[SECURITY] Fedora 26 Update: ghostscript-9.20-11.fc26

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

CVE-2018-10431

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...

CVE-2018-10431

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...

CVE-2018-10429

Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php...

CVE-2018-10431: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...

ExpressionEngine: Import File Converter - local File inclusion

@lawrenceamer discovered a local file inclusion vulnerability that logged in users with access to the control panel and permission to access developer utilities may be able to exploit. @lawrenceamer gave a detailed report with step-by-step instructions for replicating and screen captures of a the...

CVE-2018-0251: Improper Neutralization of Input During Web Page Generation

A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer SSL VPN portal of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of that portal on an...

The Welcome screen may be displayed for 30 seconds during the logon process after you set a solid color as the desktop background in Windows 7 or in Windows Server 2008 R2

The Welcome screen may be displayed for 30 seconds during the logon process after you set a solid color as the desktop background in Windows 7 or in Windows Server 2008 R2 If this article does not answer your question, click this button to pose your question to other community members at Microsof...

Fedora 27 : wordpress (2018-d48955723f)

WordPress 4.9.5 Security and Maintenance Release WordPress 4.9.5 is now available. This is a security and maintenance release for all versions since WordPress 3.7. We strongly encourage you to update your sites immediately. WordPress versions 4.9.4 and earlier are affected by three security issue...

Jungo DriverWizard WinDriver Denial of Service Vulnerability (CNVD-2018-08676)

Jungo DriverWizard WinDriver is a PCI/USB device driver development tool from Israel's Jungo Connectivity. A denial of service vulnerability exists in windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0. An attacker can exploit this vulnerability to cause a denial of service blue screen of dea...

CVE-2018-10072

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service BSOD via a 0x953827bf DeviceIoControl call...

PT-2018-9656

Name of the Vulnerable Software and Affected Versions: WinDriver version 12.6.0 Description: The issue allows attackers to cause a denial of service, resulting in a Blue Screen of Death BSOD, by making a specific DeviceIoControl call, 0x953826DB, to the windrvr1260.sys driver. Recommendations: Fo...

PT-2018-9657

Name of the Vulnerable Software and Affected Versions: WinDriver version 12.6.0 Description: The issue allows attackers to cause a denial of service, resulting in a Blue Screen of Death BSOD, by making a specific DeviceIoControl call, 0x953827bf, to the windrvr1260.sys driver. Recommendations: Fo...

17-year-old finds screen lock bypass vulnerability in Signal app for iOS

By Waqas The encrypted messaging app Signal is Edward Snowden's favorite app. This is a post from HackRead.com Read the original post: 17-year-old finds screen lock bypass vulnerability in Signal app for iOS...

QEMU: VGA: reachable assert failure during display update

An assert failure issue was found in the VGA display emulator built into the Quick emulator QEMU. It could occur while updating graphics display, due to miscalculating region for dirty bitmap snapshot in split screen mode. A privileged user/process inside guest could use this flaw to crash the QE...

QEMU: I/O: potential memory exhaustion via websock connection to VNC

A memory leakage issue was found in the I/O channels websockets implementation of the Quick Emulator QEMU. It could occur while sending screen updates to a client, which is slow to read and process them further. A privileged guest user could use this flaw to cause a denial of service on the host...

CVE-2018-9992

Frog CMS 0.9.5 is affected by a cross-site scripting vulnerability that can be triggered by entering malicious content in the name field when creating a new File or Directory via the admin/?/plugin/file_manager/browse/ screen. The issue is documented across multiple sources (NVD, CNVD, CVE record...