Solaris 10 (sparc) : 149165-01

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Kernel/IO. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...

Solaris 10 (x86) : 149164-01

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Kernel/IO. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...

CVE-2018-4840

A vulnerability has been identified in DIGSI 4 All versions V4.92, EN100 Ethernet module DNP3 variant All versions V1.05.00, EN100 Ethernet module IEC 104 variant All versions, EN100 Ethernet module IEC 61850 variant All versions V4.30, EN100 Ethernet module Modbus TCP variant All versions, EN100...

Authorization

A vulnerability has been identified in DIGSI 4 All versions V4.92, EN100 Ethernet module DNP3 variant All versions V1.05.00, EN100 Ethernet module IEC 104 variant All versions, EN100 Ethernet module IEC 61850 variant All versions V4.30, EN100 Ethernet module Modbus TCP variant All versions, EN100...

CVE-2018-4838

A vulnerability has been identified in EN100 Ethernet module IEC 61850 variant All versions V4.30, EN100 Ethernet module DNP3 variant All versions V1.04, EN100 Ethernet module PROFINET IO variant All versions, EN100 Ethernet module Modbus TCP variant All versions, EN100 Ethernet module IEC 104...

CVE-2018-4840

A vulnerability has been identified in DIGSI 4 All versions V4.92, EN100 Ethernet module DNP3 variant All versions V1.05.00, EN100 Ethernet module IEC 104 variant All versions, EN100 Ethernet module IEC 61850 variant All versions V4.30, EN100 Ethernet module Modbus TCP variant All versions, EN100...

CVE-2018-4838

CVE-2018-4838 affects Siemens EN100 Ethernet module variants (IEC 61850 < V4.30, DNP3 < V1.04, PROFINET IO, Modbus TCP, IEC 104

CVE-2018-4840

CVE-2018-4840 affects Siemens DIGSI 4 and EN100 Ethernet modules (DNP3, IEC 104, IEC 61850, Modbus TCP, PROFINET IO). The issue allows an unauthenticated remote attacker to upload a modified device configuration that overwrites the access-authorization passwords. Affected products include DIGSI 4...

ICSA-18-067-02_Siemens SIPROTEC 4, SIPROTEC Compact, and Reyrolle Devices using the EN100 Ethernet Communication Module Extension (Update B)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIPROTEC 4, SIPROTEC Compact, and Reyrolle devices using the EN100 Ethernet communication module extension Vulnerability: Missing Authentication for Critical Function 2. UPDATE...

GNOME librsvg Input Validation Vulnerability

GNOME librsvg is an open source SVG graphics development library for the GNOME project. GNOME librsvg commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea An input validation vulnerability exists in the rsvg-io.c file in previous versions. A remote attacker can exploit this vulnerability to obtain a...

[SECURITY] Fedora 27 Update: tomcat-native-1.2.16-1.fc27

Tomcat can use the Apache Portable Runtime to provide superior scalability, performance, and better integration with native server technologies. The Apache Portable Runtime is a highly portable library that is at the heart of Apache HTTP Server 2.x. APR has many uses, including access to advanced...

Jiangmin Antivirus Denial of Service Vulnerability (CNVD-2018-03285)

Jiangmin Antivirus is a set of online antivirus software from the Chinese Jiangmin Jiangmin New Technology Company. A security vulnerability exists in the KSysCall.sys driver file in Jiangmin Antivirus version 16.0.0.100, which is caused by the program failing to validate an input value of IOCtl...

Jiangmin Antivirus Denial of Service Vulnerability (CNVD-2018-03296)

Jiangmin Antivirus is a set of online antivirus software from the Chinese Jiangmin Jiangmin New Technology Company. A security vulnerability exists in the KSysCall.sys driver file in Jiangmin Antivirus version 16.0.0.100, which is caused by the program failing to validate an input value of IOCtl...

CVE-2018-6786

In Jiangmin Antivirus 16.0.0.100, the driver file KVFG.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220840...

CVE-2018-6781

In Jiangmin Antivirus 16.0.0.100, the driver file KSysCall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008264...

CVE-2018-6779

In Jiangmin Antivirus 16.0.0.100, the driver file KSysCall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008240...

PT-2018-17665 · Malwarefox · Malwarefox Antimalware

Name of the Vulnerable Software and Affected Versions: MalwareFox AntiMalware version 2.74.0.150 Description: The issue is related to improper access control in the zam32.sys and zam64.sys drivers, which allows a non-privileged process to elevate privileges. This can be achieved by sending specif...

CVE-2018-6523

In nProtect AVS V4.0 before 4.0.0.39, the driver file TKFsAv.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x22045c...

SUPERAntiSpyware Professional Trial SASKUTIL.SYS Driver Elevation of Privilege Vulnerability

SUPERAntiSpyware Professional Trial is a suite of antivirus tools mainly used for scanning for spyware from Support.com, USA.SASKUTIL.SYS driver is one of the drivers that communicates with the hardware. A security vulnerability exists in the SASKUTIL.SYS driver in SUPERAntiSpyware Professional...

CVE-2018-6473

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402080...