CVE-2018-3214

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Sound. Supported versions that are affected are Java SE: 6u201, 7u191 and 8u182; Java SE Embedded: 8u181; JRockit: R28.3.19. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2018-3209: Undefined Security Weakness

Vulnerability in the Java SE component of Oracle Java SE subcomponent: JavaFX. The supported version that is affected is Java SE: 8u182. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require...

PT-2018-2229

Name of the Vulnerable Software and Affected Versions Java SE version 8u182 Description The issue is related to insufficient access control in the JavaFX component of Java SE, which can be exploited by a remote attacker to gain full control over the application. The vulnerability is difficult to...

CVE-2018-3169

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Hotspot. Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2018-3136

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

PT-2018-2249

Name of the Vulnerable Software and Affected Versions Oracle GoldenGate versions 12.1.2.1.0, 12.2.0.2.0, 12.3.0.1.0 Description The issue is related to a null pointer dereference in the Manager component of Oracle GoldenGate. It allows an unauthenticated attacker with network access via TCP to...

HPSBHF03595 rev. 6 - LoJax UEFI Rootkit

Potential Security Impact Elevation of Privilege, Information Disclosure, Loss of Confidentiality, Loss of Integrity. Source: HP, HP Product Security Response Team PSRT Reported by: ESET Research VULNERABILITY SUMMARY HP has identified a potential security vulnerability with a UEFI rootkit LoJax...

Security update for MozillaThunderbird (important)

This update for Mozilla Thunderbird to version 60.2.1 fixes multiple issues. Multiple security issues were fixed in the Mozilla platform as advised in MFSA 2018-25. In general, these flaws cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but are...

CVE-2018-17380

SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the startdate, mstartdate, or menddate parameter...

PT-2018-14004

Name of the Vulnerable Software and Affected Versions Article Factory Manager version 4.3.9 Description A SQL Injection issue exists in the Article Factory Manager component for Joomla, which can be exploited via the start date, m start date, or m end date parameter. Recommendations For Article...

Samsung SmartThings Hub STH-ETH-250 video-core HTTP server buffer overflow vulnerability (CNVD-2018-20129)

Samsung SmartThings Hub STH-ETH-250 is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. A buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of the video-core HTTP server in the Samsung SmartThings Hub STH-ETH-250...

UPM 7.15.2000: With Profile Management Enabled, Blank Icons Might Appear In The Start Menu In The Published Desktops

With User Profile Management 7.15.2000 enabled,blank icons might appear in the Start menu in the published desktops. The issue occurs during second or subsequent logons. Issue is seen with Windows 10 and Windows Server 2016...

Google Android Memory Misreference Vulnerability (CNVD-2019-24189)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A memory misreference vulnerability exists in the 'wmavdevstartresphandler' function in Android. An attacker can exploit the vulnerability to occur a possible free-use message typ...

Out-of-bounds

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing start bss request from upper layer, out of bounds read occurs if ssid length is greater than maximum...

PT-2018-10894

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs in the Linux kernel when processing a start BSS request from the upper layer. An out of bounds read happens if the SSID length is greater than the maximum allowed. This...

CVE-2018-11278

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Venus HW searches for start code when decoding input bit stream buffers. If start code is not found in entire buffer, there is over-fetch beyond allocation length. This leads to page fault...

ASUS GT-AC5300 Cross-Site Request Forgery Vulnerability

The ASUS GT-AC5300 is a wireless router from ASUS. A cross-site request forgery vulnerability exists in the ASUS GT-AC5300 using firmware version 3.0.0.4.38432738 and earlier. A remote attacker can exploit the vulnerability by sending a request to the startapply.htm page to change the administrat...

CVE-2018-17023

Cross-site request forgery CSRF vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.38432738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...

How to troubleshoot “Cannot Start App” or “Cannot start Desktop” when launching an App or Desktop

Note: This is a master overview article. The solutions for each of the root causes is present in child articles shown in the following tables. The following error is displayed when launching an app “Cannot start App” or desktop: “Cannot start Desktop” Where to Start Troubleshooting Do you get the...

PT-2018-13844

Name of the Vulnerable Software and Affected Versions ASUS GT-AC5300 routers with firmware through 3.0.0.4.384 32738 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a...