PT-2018-2254

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.55 and 8.56 Description The issue is related to insufficient access control in the SQR component of PeopleSoft Enterprise PeopleTools. This can be exploited by a remote attacker to gain full control...

PT-2018-2229

Name of the Vulnerable Software and Affected Versions Java SE version 8u182 Description The issue is related to insufficient access control in the JavaFX component of Java SE, which can be exploited by a remote attacker to gain full control over the application. The vulnerability is difficult to...

CVE-2018-12441

The CorsairService Service in Corsair Utility Engine is installed with insecure default permissions, which allows unprivileged local users to execute arbitrary commands via modification of the CorsairService BINARYPATHNAME, leading to complete control of the affected system. The issue exists due ...

vSRX Series: A local authentication vulnerability may lead to full control of a vSRX instance while the system is booting.

An authentication bypass vulnerability in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of the system without authentication when the system is initially booted up. Affected releases are Juniper Networks Junos OS: 15.1X49 versions...

CVE-2018-0432

A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the error reporting applicatio...

CVE-2018-10605

Martem TELEM GW6/GWM versions prior to 2.0.87-4018403-k4 may allow unprivileged users to modify/upload a new system configuration or take the full control over the RTU using default credentials to connect to the RTU...

PT-2018-9996

Name of the Vulnerable Software and Affected Versions: Martem TELEM GW6/GWM versions prior to 2.0.87-4018403-k4 Description: The issue allows unprivileged users to modify or upload a new system configuration, or gain full control over the RTU, by utilizing default credentials to connect to the RT...

CVE-2018-17776

PCProtect Anti-Virus v4.8.35 has "Everyone: F" permission for %PROGRAMFILESX86%\PCProtect, which allows local users to gain privileges by replacing an executable file with a Trojan horse...

Western Digital My Cloud Authentication Bypass Vulnerability

Western Digital MyCloud is a personal cloud storage device. An authentication bypass vulnerability exists in Western Digital My Cloud, which can be exploited by an unauthenticated attacker to authenticate as an administrator user without providing a password, allowing full control of the My Cloud...

Authentication flaw

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the...

CVE-2018-17153

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the...

PT-2018-18336

Name of the Vulnerable Software and Affected Versions: Huawei HiRouter-CD20-10 versions prior to 1.9.6 Huawei WS5200-10 versions prior to 1.9.6 Description: The issue is caused by insufficient plug-in verification, allowing an attacker to tamper with a legitimate plug-in and create a malicious on...

CVE-2018-7937: Undefined Security Weakness

In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-in signature bypass vulnerability due to insufficient plug-in verification. An attacker may tamper with a legitimate plug-in to build a malicious plug-in and trick users into...

PT-2018-5428

Name of the Vulnerable Software and Affected Versions: PLANEX CS-W50HD devices with firmware prior to 030720 Description: A hardcoded credential supervisor:dangerous is injected into the web authentication database /.htpasswd during the booting process, allowing attackers to gain unauthorized...

The vulnerability of the font library in Windows operating systems allows a hacker to execute arbitrary code and gain full control over the system.

The vulnerability of the Windows operating system’s font library is related to errors in processing embedded fonts. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain full control over the system using a specially crafted document or web page...

The vulnerability of the API components of Sun ZFS Storage Appliance Kit allows a hacker to gain full control over the application.

The vulnerability of the API framework components of the Sun ZFS Storage Appliance Kit AK is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain full control over the application...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Product Diagnostic Tools component of the Order Management system allows a perpetrator to gain full control over the application.

The vulnerability of the Product Diagnostic Tools component in the Order Management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...