UBUNTU-CVE-2018-18352

Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass same origin policy for audio content via a crafted HTML page...

chromium-browser: Insufficient policy enforcement in Navigation

Lack of proper validation of ancestor frames site when sending lax cookies in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass SameSite cookie policy via a crafted HTML page...

McAfee True Key (TK) Windows Client Weak Directory Privileges Vulnerability

McAfee True Key TK is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition. A security vulnerability exists in the Microsoft Windows client in McAfee TK 5.1.230.7 and earlier versions. A...

CVE-2018-15978

Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

Rapid7 Komand Information Disclosure Vulnerability

Rapid7 Komand is a suite of IT security automation solutions from Rapid7 USA. The product features task automation, malware identification, vulnerability patching and email threat identification. A security vulnerability exists in Rapid7 Komand 0.41.0 and prior versions. An attacker could exploit...

PT-2018-14975 · Tsk +1 · The Sleuth Kit +1

Name of the Vulnerable Software and Affected Versions: The Sleuth Kit TSK versions 4.6.4 and earlier Description: The issue allows attackers to cause a denial of service. It is related to the function hfs cat traverse in tsk/fs/hfs.c, which does not properly determine when a key length is too...

CVE-2018-14746

Command Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to run arbitrary commands on the NAS...

CVE-2018-14749

Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could have unspecified impact on the NAS...

mysql: Audit Log unspecified vulnerability (CPU Jul 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Audit Log. Supported versions that are affected are 5.7.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attack...

mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Parser. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

mysql: Group Replication GCS unspecified vulnerability (CPU Apr 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Group Replication GCS. Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via XCom to compromise MySQL Server. Successful attacks ...

mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.7.23 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

Interspire Email Marketer SQL Injection Vulnerability (CNVD-2018-26788)

BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A SQL injection vulnerability exists in the 'updateblock' function of the Dynamiccontenttags.php file in BigCommerec IEM 6.1.6 and earlier versions. A remote attacker can exploit this...

ZTE ZXHN F670 Improper Access Control Vulnerability

The ZTE ZXHN F670 is an ITU-T G.984 and ITU-T g.988 compliant Optical Network Terminal ONT designed for high-end home users. An improper access control vulnerability exists in 1.1.10P3T18 and earlier versions of the ZTE ZXHN F670, which can be exploited by unauthorized users to perform unauthoriz...

PT-2018-2622 · Apache +1 · Apache Openoffice +2

Name of the Vulnerable Software and Affected Versions: Apache Open Office versions 4.1.5 and earlier Description: The issue is related to an arithmetic overflow that occurs when loading a document with a smaller end line termination than the operating system uses. This defect can cause the softwa...

LiquidVPN For macOS Design Vulnerability

LiquidVPN For MacOS is a VPN software for anonymous access to the Internet based on the MacOS platform. A security vulnerability exists in LiquidVPN For MacOS 1.37 and 1.36 and earlier versions. An attacker can exploit the vulnerability to directly install arbitrary kernel extensions...

playSMS Elevation of Privilege Vulnerability

PlaySMS is a web-based SMS platform. The platform supports connectivity to SMS gateways, personal messaging systems, and corporate group communication tools. A power-up vulnerability exists in PlaySMS 1.4.2 and earlier versions. No detailed vulnerability details are provided at this time...

WordPress Arforms 3.5.1 Arbitrary File Deletion Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . Arforms plugin is used in which a form builder plugin . A security vulnerability exists in WordPress Arforms...

Citrix Xen Mobile Code Execution Vulnerability

Citrix Xen Mobile is a mobility management solution from Citrix Systems. The solution is capable of managing mobile devices, developing mobile policies and compliance rules, and providing insight into the operation of mobile cellular networks. A code execution vulnerability exists in Citrix Xen...

Advantech WebAccess stack buffer overflow vulnerability (CNVD-2018-21797)

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow vulnerability exists in Advantech...