kernel: v4l2: disabled memory access protection mechanism allowing privilege escalation

A bug in the 32-bit compatibility layer of the ioctl handling code of the v4l2 video driver in the Linux kernel has been found. A memory protection mechanism ensuring that user-provided buffers always point to a userspace memory were disabled, allowing destination address to be in a kernel space...

Debian DSA-4167-1 : sharutils - security update

A buffer-overflow vulnerability was discovered in Sharutils, a set of utilities handle Shell Archives. An attacker with control on the input of the unshar command, could crash the application or execute arbitrary code in the its context. C Tenable Network Security, Inc. The descriptive text and...

Debian DSA-4161-1 : python-django - security update

James Davis discovered two issues in Django, a high-level Python web development framework, that can lead to a denial-of-service attack. An attacker with control on the input of the django.utils.html.urlize function or django.utils.text.Truncator's chars and words methods could craft a string tha...

CVE-2018-9046

In Windows Master aka Windows Optimization Master 7.99.13.604, the driver file WoptiHWDetect.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100282d...

Windows Master Denial of Service Vulnerability (CNVD-2018-07023)

Windows Master aka Windows Optimization Master is a set of Windows optimization tools. The tool features system detection, system optimization, system cleanup and system maintenance. A security vulnerability exists in the WoptiHWDetect.SYS driver file in Windows Master version 7.99.13.604, which...

Windows Master Denial of Service Vulnerability (CNVD-2018-07015)

Windows Master aka Windows Optimization Master is a set of Windows optimization tools. The tool features system detection, system optimization, system cleanup and system maintenance. A security vulnerability exists in the WoptiHWDetect.SYS driver file in Windows Master version 7.99.13.604, which...

Windows Master Denial of Service Vulnerability (CNVD-2018-07027)

Windows Master aka Windows Optimization Master is a set of Windows optimization tools. The tool features system detection, system optimization, system cleanup and system maintenance. A security vulnerability exists in the WoptiHWDetect.SYS driver file in Windows Master version 7.99.13.604, which...

Advanced SystemCare Ultimate Denial of Service Vulnerability (CNVD-2018-06949)

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A security vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate version 11.0.1.58, which originates...

Advanced SystemCare Ultimate Denial of Service Vulnerability (CNVD-2018-06951)

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware and more. A security vulnerability exists in the Monitorwin7x64.sys driver file in Advanced SystemCare Ultimate version 11.0.1.58, which...

Windows Master Denial of Service Vulnerability (CNVD-2018-07019)

Windows Master aka Windows Optimization Master is a set of Windows optimization tools. The tool features system detection, system optimization, system cleanup and system maintenance. A security vulnerability exists in the WoptiHWDetect.SYS driver file in Windows Master version 7.99.13.604, which...

Windows Master Denial of Service Vulnerability (CNVD-2018-07032)

Windows Master aka Windows Optimization Master is a set of Windows optimization tools. The tool features system detection, system optimization, system cleanup and system maintenance. A security vulnerability exists in the WoptiHWDetect.SYS driver file in Windows Master version 7.99.13.604, which...

CVE-2018-9003

In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorx86.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000...

CVE-2018-8991

In Windows Master aka Windows Optimization Master 7.99.13.604, the driver file WoptiHWDetect.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002009...

CVE-2018-9005

In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorwin7x64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0...

CVE-2018-8995

In Windows Master aka Windows Optimization Master 7.99.13.604, the driver file WoptiHWDetect.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002002...

CVE-2018-8990

In Windows Master aka Windows Optimization Master 7.99.13.604, the driver file WoptiHWDetect.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002010...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-07356)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345Wrath.sys in 2345 Security Guard 3.6. The vulnerability arises due to an unverified input value from IOCtl 0x00222054. A local user...

CVE-2018-8876

In 2345 Security Guard 3.6, the driver file 2345Wrath.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222098...

CVE-2018-8873

In 2345 Security Guard 3.6, the driver file 2345NetFirewall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040...

CVE-2016-10712

CVE-2016-10712 affects PHP, where the return values of stream_get_meta_data become controllable when input is attacker-controlled (e.g., file uploads). Specifically vulnerable are PHP versions: before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3. The vulnerability can allow an attacker to se...