8747 matches found
CVE-2018-8903
CVE-2018-8903 affects Open-AuditIT/Open‑Audit Professional 2.1. The vulnerability is a stored XSS via the Name or Description fields on the Credentials page, stemming from insufficient input sanitization. Public references in the connected documents confirm exploitation guidance (stored XSS PoC) ...
CVE-2018-8903: Improper Neutralization of Input During Web Page Generation
Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen...
March 22, 2018—KB4088889 (OS Build 14393.2155)
None None...
2345 Security Guard Denial of Service Vulnerability (CNVD-2018-07351)
2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345BdPcSafe.sys in 2345 Security Guard 3.6. The vulnerability arises due to an unvalidated input value from IOCtl 0x00222108. A local...
2345 Security Guard Denial of Service Vulnerability (CNVD-2018-07353)
2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345DumpBlock.sys in 2345 Security Guard 3.6. The vulnerability arises due to an unverified input value from IOCtl 0x00222044. A local...
Denial of Service Vulnerability in 2345 Security BdPcSafe.sys Driver File
2345 Security Guard is a computer security management software that integrates computer checkup, Trojan horse detection and killing, garbage cleaning, repairing system vulnerabilities, system acceleration, software management and other functions under the banner of Shanghai 2,3,4,5 Network...
Apple Siri is the aeration privacy vulnerability: lock screen notifications directly read-vulnerability warning-the black bar safety net
! iOS 11, Apple introduced a new way to protect user privacy, the user through the iPhone's lock screen hide notification content, until the use of Touch ID or Face ID to unlock the device. But in fact, even if unable to unlock the phone, or is there a very simple way to read these hidden...
PT-2018-18704
Name of the Vulnerable Software and Affected Versions Open-AudIT Professional version 2.1 Description The issue allows for cross-site scripting XSS attacks via the Name or Description field on the Credentials screen. Recommendations For Open-AudIT Professional version 2.1, update to a version tha...
2345 Security Guard Denial of Service Vulnerability (CNVD-2018-07354)
2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345Wrath.sys in 2345 Security Guard 3.6. The vulnerability arises due to an unvalidated input value from IOCtl 0x0022209c. A local user...
2345 Security Guard Denial of Service Vulnerability (CNVD-2018-07356)
2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345Wrath.sys in 2345 Security Guard 3.6. The vulnerability arises due to an unverified input value from IOCtl 0x00222054. A local user...
2345 Security Guard Denial of Service Vulnerability (CNVD-2018-07355)
2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345Wrath.sys in 2345 Security Guard 3.6. The vulnerability arises due to an unverified input value from IOCtl 0x00222098. A local user...
PT-2018-18643
Name of the Vulnerable Software and Affected Versions WinDriver version 12.6.0 Description The issue allows attackers to cause a denial of service, resulting in a Blue Screen of Death BSOD, by utilizing a crafted .exe file. Recommendations For WinDriver version 12.6.0, at the moment, there is no...
Investors concerned about smartphone addiction; Apple responds with new webpage
Hot on the heels of an open letter from investors urging Apple to do more to protect children from smartphone addiction, the tech giant has recently dedicated a page on their website to families. The "Families" page, which can be accessed at apple.com/families, contains tools parents can use to s...
CVE-2018-8737
Bookme Control Panel 2.0 Application is vulnerable to stored XSS within the Customers "Book Me" function. Within the Name and Note aka custName and custNote sections of the Customers screen, the application does not sanitize user-supplied input and renders injected JavaScript code to the user's...
Cross site scripting
Bookme Control Panel 2.0 Application is vulnerable to stored XSS within the Customers "Book Me" function. Within the Name and Note aka custName and custNote sections of the Customers screen, the application does not sanitize user-supplied input and renders injected JavaScript code to the user's...
CVE-2017-16751
A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Stack-based buffer overflow vulnerabilities caused by processing specially crafted .dpb files may allow an attacker to remotely execute arbitrary code...
CVE-2017-16749
A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files could exploit a use-after-free vulnerability...
Double free
A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files could exploit a use-after-free vulnerability...
CVE-2017-16745
A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. An access of resource using incompatible type 'type confusion' vulnerability may allow an attacker to execute remote code when processing specially crafted .dpb files...
CVE-2017-16749
A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files could exploit a use-after-free vulnerability...