CVE-2018-8852

Philips e-Alert Unit non-medical device, Version R2.1 and prior. When authenticating a user or otherwise establishing a new user session, the software gives an attacker the opportunity to steal authenticated sessions without invalidating any existing session identifier...

UBUNTU-CVE-2018-6039

Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension...

Rockwell Automation RSLinx Classic Denial of Service Vulnerability (CNVD-2019-09766)

Rockwell Automation RSLinx Classic is a factory communications solution from Rockwell Automation. The solution supports access to Rockwell Software, Allen-Bradley applications, etc. via Allen-Bradley programmable controllers. A denial of service vulnerability exists in Rockwell Automation RSLinx...

Rockwell Automation RSLinx Classic Denial of Service Vulnerability

Rockwell Automation RSLinx Classic is a factory communications solution from Rockwell Automation. The solution supports access to Rockwell Software, Allen-Bradley applications, etc. via Allen-Bradley programmable controllers. A denial of service vulnerability exists in Rockwell Automation RSLinx...

Apple iOS and Safari Information Disclosure Vulnerability

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems.Safari is one of the specialized components used in the Safari browser. A...

PT-2018-13604

Name of the Vulnerable Software and Affected Versions Matrix Synapse versions prior to 0.33.3.1 Matrix Synapse version 0.33.2.1 Description The issue allows remote attackers to spoof events and possibly have other impacts by leveraging improper transaction and event signature validation...

Intel Extreme Tuning Utility installer buffer overflow vulnerability

Intel Extreme Tuning Utility is a Windows-based performance tuning tool from Intel Corporation.Installer is its installer. A buffer overflow vulnerability exists in the installer in Intel Extreme Tuning Utility versions prior to 6.4.1.21, which can be exploited by a local attacker to cause a deni...

PT-2018-1597 · Intel · Intel Active Management Technology +2

Name of the Vulnerable Software and Affected Versions: Intel Active Management Technology versions prior to 12.0.5 Description: A Bleichenbacher-style side channel vulnerability exists in the TLS implementation of Intel Active Management Technology. This issue may allow an unauthenticated user to...

Google Chrome Security Bypass Vulnerability (CNVD-2018-22395)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chrome versions prior to 69.0.3497.81. A remote attacker can exploit the vulnerability to bypass site isolation restrictions with the help of Blob URLS...

Google Chrome Memory Misreference Vulnerability (CNVD-2019-03620)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in ResourceCoordinator in versions of Google Chrome prior to 69.0.3497.81. A remote attacker can exploit this vulnerability to corrupt the heap with the help of specially...

CraftedWeb Cross-Site Scripting Vulnerability (CNVD-2018-18899)

CraftedWeb is a CMS Content Management System for game servers. A cross-site scripting vulnerability exists in CraftedWeb versions 2013-09-24 and earlier, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'p' parameter...

PT-2018-12628 · Red Hat · Openshift Container Platform

Name of the Vulnerable Software and Affected Versions: OpenShift Container Platform versions prior to 3.7 Description: The issue is related to an out-of-bounds write that can occur when patching an OpenShift object using the oc patch functionality. This can be exploited to cause a denial of servi...

Artifex Ghostscript Denial of Service Vulnerability (CNVD-2020-54478)

Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. A security...

Google Chrome Skia Information Disclosure Vulnerability (CNVD-2018-20148)

Google Chrome is a web browser developed by Google, Inc. Skia is an open source 2D graphics library that provides common APIs that work on a variety of hardware and software platforms. A security vulnerability exists in Skia in versions prior to Google Chrome 63.0.3239.84, which stems from Skia...

Geutebrueck re_porter cross-site scripting vulnerability

Geutebrueck is a video management system from GEUREBRÜCK, Germany. sreporter is one of the hybrid recorders for digital storage and video signal transmission for MPEG4 CCTV-Standard. A cross-site scripting vulnerability exists in Geutebrueck reporter 16 versions prior to 7.8.974.20. A remote...

Pimcore Cross-Site Request Forgery Vulnerability

Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce framework and product information management applications. A cross-site request forgery vulnerability exis...

OpenEMR SQL Injection Vulnerability (CNVD-2018-17194)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A SQL injection vulnerability exists in the...

CVE-2018-11455

A vulnerability has been identified in Automation License Manager 5 All versions 5.3.4.4, Automation License Manager 6 All versions 6.0.1. A directory traversal vulnerability could allow a remote attacker to move arbitrary files, which can result in code execution, compromising confidentiality,...

CA API Developer Portal Cross-Site Scripting Vulnerability (CNVD-2018-17503)

CA API Developer Portal is a set of CA's API Application Programming Interface query function for software developers. A cross-site scripting vulnerability exists in CA API Developer Portal version 4.x, versions prior to 4.2.5.3, and versions prior to 4.2.7.1, which originates when the program...

UBUNTU-CVE-2018-4263

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...