CVE-2018-16198: Undefined Security Weakness

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier may allow an attacker on the same network segment to access a non-documented developer screen to perform operations on the affected device...

PT-2019-10161

Name of the Vulnerable Software and Affected Versions: mate-screensaver versions prior to 1.20.2 Description: The issue allows physically proximate attackers to view screen content and possibly control applications when the screensaver is locked. This can be achieved by unplugging and re-plugging...

PT-2019-1167 · Microsoft · Skype

Name of the Vulnerable Software and Affected Versions: Skype versions 8.35 Description: The issue is related to errors in handling specific authentication requests, which can allow an attacker to bypass screen lock and access protected information. This is an elevation of privilege issue that...

Fedora 28 : 1:gdm (2018-6740c38cf4)

gdm 3.28.3 release, fixing CVE-2018-14424. - CVE-2018-14424 - double free fix - lifecycle fixes to libgdm/GdmClient - follow up fixes dealing with login screen reaping form last release - allow pam modules to use SIGUSR1 - set PWD for user session - tell cirrus not to use wayland - Translation...

SUSE SLED15 / SLES15 Security Update : ncurses (SUSE-SU-2018:4000-1)

This update for ncurses fixes the following issues : Security issue fixed : CVE-2018-19211: Fixed denial of service issue that was triggered by a NULL pointer dereference at function ncparseentry bsc1115929. Non-security issue fixed: Remove scree.xterm from terminfo data base as with this screen...

PT-2018-19320

Уязвимость компоненты блокировщика экрана оконного менеджера fly-wm операционной системы Astra Linux связана с ошибкой, приводящей к невозможности запуска блокировщика экрана в случае, если вызов XGrabKeyboard уже сделан другим клиентом. Эксплуатация уязвимости может позволить нарушителю вызвать...

CVE-2018-15002

The Vivo V7 device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys allows any app co-located on the device to set system properties as the com.android.phone user. The com.qualcomm.qti.modemtestmode app versionCode=25, versionName=7.1.2 that contains an...

Fly-admin-dm Astra Linux Confidential Data Access

The vulnerability of the Fly-admin-dm graphical input configuration tool in the Astra Linux operating system is related to security vulnerabilities that allow the capture of screens containing graphical windows displaying confidential data. Exploiting this vulnerability could enable a malicious...

PT-2018-15356

Name of the Vulnerable Software and Affected Versions ETK E900.sys affected versions not specified Description The issue allows for a denial of service attack. It is triggered via IOCTL 0x9C402048, which invokes a function that uses memmove and constantly fails on an arbitrary address, resulting ...

WordPress Multiple Vulnerabilities (Dec 2018) - Linux

WordPress is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

WordPress 5.0 Patched to Fix Serious Bugs

WordPress 5.0 users are being urged to update their CMS software to fix a number of serious bugs. The update WordPress 5.0.1 addresses seven flaws and was issued Thursday, less than a week after WordPress 5.0 was released. The most serious of the flaws is a bug that allows the WordPress “user...

NoMachine for Windows DokanFS library buffer overflow vulnerability

NoMachine for Windows is a Windows-based remote desktop application from NoMachine Luxembourg.DokanFS library is one of the file system libraries. A buffer overflow vulnerability exists in the NoMachine for Windows DokanFS library, which can be exploited to cause a denial of service blue screen. ...

December 11, 2018—KB4471324 (OS Build 17134.471)

None None...

Code Execution Vulnerability in Encrypted Video by Screen Recording Expert

Screen Recording Expert is a professional tool for making screen recordings. A code execution vulnerability exists when Screen Recording Expert encrypts videos. An attacker can exploit the vulnerability to execute code...

PT-2018-15241

Name of the Vulnerable Software and Affected Versions NoMachine versions prior to 6.4.6 DokanFS library version 0.6.0 Description The issue allows local users to cause a denial of service, resulting in a Blue Screen of Death BSOD, because the nxfs.sys driver in the DokanFS library can read...

Denial of Service Vulnerability in Jiuan Host Monitoring Software

JiuAn host monitoring software is a high-security and easy-to-use enterprise document leakage prevention software, which can effectively prevent illegal outgoing external copies, and protect corporate and personal digital knowledge assets from loss, proliferation and leakage. There is a...

About the security content of iOS 12.1.1

About the security content of iOS 12.1.1 This document describes the security content of iOS 12.1.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Design/Logic Flaw

Zoom clients on Windows before version 4.1.34814.1119, Mac OS before version 4.1.34801.1116, and Linux 2.4.129780.0915 and below are vulnerable to unauthorized message processing. A remote unauthenticated attacker can spoof UDP messages from a meeting attendee or Zoom server in order to invoke...

JVN#55263945: Multiple vulnerabilities in RICOH Interactive Whiteboard

RICOH Interactive Whiteboard provided by RICOH COMPANY, LTD. contains multiple vulnerabilities listed below. Command injection CWE-94 - CVE-2018-16184 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score: 9.8 CVSS v2| AV:N/AC:L/AU:N/C:C/I:C/A:C| Bas...

openSUSE Security Update : virtualbox (openSUSE-2018-1443)

This update for virtualbox fixes the following issues : virtualbox was updated to version 5.2.22 released November 09 2018 by Oracle. Security issues fixed : - Fixed a guest-to-host excape via the e1000 virtual network driver bsc1115041. Non-security issues fixed : - Audio: Fixed a regression in...