Information disclosure

The Microsoft Windows Embedded OpenType EOT font engine in Microsoft Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2012 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". Thi...

CVE-2018-0833

CVE-2018-0833 affects the SMBv2/v3 client in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2. The vulnerability is a null pointer dereference in how the SMB client handles certain crafted requests, leading to a denial-of-service (system may stop responding). Public references describe a c...

CVE-2018-0842

Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an elevation of privilege vulnerability due to how objects in memory are handled, aka...

CVE-2018-0840

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting...

Microsoft Windows Kernel CVE-2018-0832 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Microsoft Windows SMB Server CVE-2018-0833 Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 8.1 for 32-bit Systems Microsoft Windows 8.1 for x64-based Systems Microsoft Windows RT 8.1...

Microsoft Windows Kernel CVE-2018-0757 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

KB4074589: Windows Server 2012 February 2018 Security Update

The remote Windows host is missing security update 4074589 or cumulative update 4074593. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability...

Microsoft Windows Kernel CVE-2018-0830 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Microsoft Windows Kernel CVE-2018-0829 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

KLA11200 Multiple vulnerabilties in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

MoinMoin 1.9 < 1.9.5 ACL Security Vulnerability - Linux

MoinMoin does not properly handle group names that contain virtual group names such as SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2012-6347

Fortinet FortiGate FortiDB is affected by CVE-2012-6347 through multiple cross-site scripting (XSS) vulnerabilities in Java number format exception handling prior to 4.4.2. The flaw allows remote attackers to inject arbitrary web script/HTML via the conversationContext parameter across a set of J...

DEBIAN-CVE-2012-5360

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file...

CVE-2012-5359

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file...

CVE-2012-2166

CVE-2012-2166 affects IBM XIV Storage System (MTM 2810-A14, 2812-A14, 2810-114, 2812-114) prior to the specified level. The issue stems from hardcoded passwords for maintenance accounts, enabling remote attackers to gain user access via unknown vectors. IBM X-Force 75041 corroborates the hardcode...

CVE-2012-5360

CVE-2012-5360 affects Libavcodec in FFmpeg prior to 0.11. The vulnerability allows remote code execution through a crafted QT file due to a memory/parse issue in libavcodec. Impact is remote code execution with high severity over network; requires no privileges but user interaction is not require...

CVE-2012-5359

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file...

CVE-2012-0941

Fortinet FortiGate UTM WAF appliances running FortiOS 4.3.x before 4.3.6 are affected by multiple XSS vulnerabilities. Exploitation vectors include the Endpoint Monitor, Dialup List, or Log&Report Display modules, or the fields_sorted_opt parameter to user/auth/list and endpointcompliance/app_det...

CVE-2012-5359

CVE-2012-5359 affects FFmpeg’s Libavcodec prior to 0.11. The vulnerability arises in the libavcodec ASF (and QT/WMV) parsing path, where memory corruption can occur, allowing remote code execution. Exploitation requires a user to open a specially crafted ASF file (not automatically via email), wi...