UBUNTU-CVE-2018-3284

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serve...

UBUNTU-CVE-2018-3283

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Logging. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2018-15968

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2018-15923

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

Wecon PI Studio HMI and PI Studio Buffer Overflow Vulnerability

Wecon PI Studio HMI and PI Studio are both HMI programming software from Wecon Technologies China. An out-of-bounds read vulnerability exists in Wecon PI Studio HMI version 4.1.9 and earlier and PI Studio version 4.2.34 and earlier, where the program fails to properly validate user-submitted data...

Adobe Framemaker DLL Hijacking Vulnerability

Adobe FrameMaker is a page layout software provided by the American company Audobee Adobe. A DLL hijacking vulnerability exists in Adobe Framemaker 1.0.5.1 and earlier versions. An attacker can exploit this vulnerability to elevate privileges...

CVE-2018-1000809

CVE-2018-1000809 affects privacyIDEA 2.23.1 and earlier, with an Improper Input Validation vulnerability in the token validation API that can cause Denial-of-Service. The issue is exploitable via an HTTP request to /validate/check with crafted user and pass parameters. Versions up to 2.23.1 are i...

Trend Micro Deep Discovery Inspector Cross-Site Scripting Vulnerability (CNVD-2018-20680)

Trend Micro Deep Discovery Inspector DDI is a protection product from Trend Micro that can detect and identify hard-to-find threats in real time and propose solutions. A cross-site scripting vulnerability exists in Trend Micro DDI version 3.85 and earlier versions, which can be exploited by a...

Foxit Reader for Windows Memory Misreference Vulnerability (CNVD-2018-20650)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of the Mouse Exit event in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program fails...

XWiki cross-site scripting vulnerability (CNVD-2018-20220)

XWiki is an open source wiki and application platform written in Java and released under the LGPL. A cross-site scripting vulnerability exists in the 'image:' function in XWiki 10.7 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary payloads or scripts from...

UBUNTU-CVE-2018-4312

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

UBUNTU-CVE-2018-4318

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-14813

Fuji Electric V-Server 4.0.3.0 and prior, A heap-based buffer overflow vulnerability has been identified, which may allow remote code execution...

CVE-2018-14809

Fuji Electric V-Server 4.0.3.0 and prior, A use after free vulnerability has been identified, which may allow remote code execution...

CVE-2018-8856

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The software contains hard-coded cryptographic key, which it uses for encryption of internal data...

CVE-2018-8844

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request...

CVE-2018-8854

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended...

Pdfalto Buffer Overflow Vulnerability

Pdfalto is a command-line tool for parsing PDF files and generate XML structured content in ALTO format. Pdfalto 0.2 and previous versions of the XmlAltoOutputDev.cc file of the 'TextPage::dump' function of the heap buffer overflow vulnerability, an attacker can be exploited to execute arbitrary...

CVE-2018-15960

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a use of a component with a known vulnerability vulnerability. Successful exploitation could lead to arbitrary file overwrite...

Accusoft PrizmDoc Cross-Site Scripting Vulnerability

Accusoft PrizmDoc is a document management system from Accusoft Pegasus Imaging, USA. The system includes features such as document management, document viewing and document comparison. A cross-site scripting vulnerability exists in Accusoft PrizmDoc 13.3 and earlier versions. A remote attacker c...