8 matches found
CVE-2019-18537
CVE-2019-18537 entry is rejected/not used; this CVE ID is withdrawn.
CVE-2017-18537
The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...
CVE-2017-18537
The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...
CVE-2017-18537
CVE-2017-18537 affects the WordPress plugin Visitors Online by BestWebSoft prior to version 1.0.0. The connected documents confirm multiple Cross-Site Scripting (XSS) issues in the plugin’s input handling, enabling an authenticated attacker to execute arbitrary JavaScript in victims’ browsers and...
CVE-2018-18537
The GLCKIo low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes a path to write an arbitrary DWORD to an arbitrary address...
CVE-2018-18537
CVE-2018-18537 affects the GLCKIo low-level driver in ASUS Aura Sync prior to v1.07.22, where an exposed IOCTL path permits writing an arbitrary DWORD to an arbitrary address due to insufficient access control. This enables local privilege escalation by manipulating kernel memory. Documented impa...
ASUS Aura Sync versions 1.07.22 Driver Privilege Escalation Exploit
Multiple vulnerabilities were found in the GLCKIo and Asusgio drivers installed by ASUS Aura Sync, which could allow a local attacker to elevate privileges. ASUS Aura Sync versions 1.07.22 and below are affected. ASUS Drivers Elevation of Privilege Vulnerabilities 1. Advisory Information Title:...