Device Guard Windows Code Injection

The vulnerability of the Device Guard component in the Windows operating system is related to security configuration errors. Exploiting this vulnerability could allow a local attacker to inject arbitrary code into the Windows PowerShell session...

DNS Global Blocklist DNS Redirection

The vulnerability of the DNS Global Blocklist mechanism in the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability allows a malicious actor to redirect traffic to a malicious destination remotely...

PHP 5.6.x < 5.6.13 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.13. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free memory errors exist related to the unserialize function, which a remote attacker can exploit to execute arbitra...

PT-2019-1150

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: A remote code execution issue exists due to errors in handling objects in memory by the Chakra scripting engine in Microsoft Edge. This could allow an attacker to execute arbitrary...

Webgalamb Information Disclosure / XSS / CSRF / SQL Injection

Summary ------- Vendor: E.N.S. Zrt www.ens.hu Product: Webgalamb www.webgalamb.hu, www.facebook.com/webgalamb Webgalamb is a commercial email marketing software for managing subscription lists and sending out bulk emails. It is not SaaS but a PHP based web application that is typically hosted nex...

Fedora 28 : xen (2018-a7ac26523d)

x86: mishandling of debug exceptions XSA-260, CVE-2018-8897 x86 vHPET interrupt injection errors XSA-261 1576089 qemu may drive Xen into unbounded loop XSA-262 ---- update to xen-4.10.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora updat...

Fedora 29 : phpMyAdmin (2018-088802878a)

Upstream announcement : The phpMyAdmin team is pleased to announce the release of phpMyAdmin version 4.8.4. Among other bug fixes, this contains several important security fixes. The security fixes involve : - Local file inclusion https://www.phpmyadmin.net/security/PMASA-2018-6/, - XSRF/CSRF...

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors. An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr v0.9.5. Remote attackers could leverage this vulnerability to cause a denial-of-service v...

Internet Explorer VBScript Code Execution

The vulnerability of the VBScript mechanism in Internet Explorer exists due to object handling errors in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a specially created web page...

Microsoft SharePoint Enterprise Server Privilege Escalation

The vulnerability of the Microsoft SharePoint Enterprise Server software is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through a specially crafted request...

Microsoft SharePoint Enterprise Server Privilege Escalation

The vulnerability of the Microsoft SharePoint Enterprise Server software is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through a specially crafted request...

Microsoft PowerPoint Data Processing Code Execution

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Excel Spreadsheet Data Processing Arbitrary Code

The vulnerability of Excel spreadsheet editors is related to data processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Cisco Discovery DoS

The vulnerability of the Cisco Discovery protocol in Cisco IOS and Cisco IOS XE operating systems is related to errors in memory management mechanisms. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially crafted packets...

Microsoft Edge Internet Explorer Code Execution

The vulnerability of Microsoft Edge and Internet Explorer 11 is related to errors in the memory object handling mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with user privileges using specially crafted web page content...

Qualcomm Android Buffer Overflow

The vulnerability of the Qualcomm Android operating system is related to array indexing errors. Exploiting this vulnerability can allow attackers to cause buffer overflows in memory by using malicious XML data in the firehose directory...

Security update for go1.10 (important)

This update for go1.10 fixes the following issues: Security vulnerabilities fixed: - CVE-2018-16873 bsc1118897: cmd/go: remote command execution during "go get -u". - CVE-2018-16874 bsc1118898: cmd/go: directory traversal in "go get" via curly braces in import paths - CVE-2018-16875 bsc1118899:...

PT-2018-15357 · Bigtree · Bigtree

Name of the Vulnerable Software and Affected Versions: BigTree version 4.3 Description: The issue allows for full path disclosure through authenticated input in the admin/news section, which triggers a syntax error. It is noted that this issue requires full developer level access to the content...

GHSA-GFV6-CJ92-G3HX PyKMIP Denial of service vulnerability

OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors similar issue to CVE-2015-5262 vulnerability in PyKMIP server that can result in DOS: the server can be made unavailable by one or more clients opening all of the available sockets. This attack appear...

PyKMIP Denial of service vulnerability

OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors similar issue to CVE-2015-5262 vulnerability in PyKMIP server that can result in DOS: the server can be made unavailable by one or more clients opening all of the available sockets. This attack appear...