CVE-2018-8060

HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to the device driver. If input and/or output buffer pointers are NULL or if these buffers' data are invalid, a NULL/invalid pointer access occurs, resulting in a Windows kernel panic aka Blue Screen. Th...

CVE-2018-8060

HWiNFO AMD64 Kernel driver (version 8.98 and earlier) is affected. An unprivileged user can send an IOCTL to the device driver, and if input/output buffers are NULL or data is invalid, a NULL/invalid pointer access occurs, causing a Windows kernel panic (BSOD). Affected IOCTLs are higher than 0x8...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-10964)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345BdPcSafe.sys, version X64 in 2345 Security Guard 3.7. The vulnerability arises due to an unvalidated input value from IOCtl...

PT-2018-10131

Name of the Vulnerable Software and Affected Versions 2345 Security Guard version 3.7 Description The issue is related to the driver file 2345BdPcSafe.sys in the X64 version, which does not validate input values from IOCtl 0x002220e0. This can allow local users to cause a denial of service,...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: CVE-2018-5183: Backport critical security fixes in Skia CVE-2018-5154: Use-after-free with SVG animations and clip paths CVE-2018-5155: Use-after-free with SVG animations and text paths CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files...

CVE-2018-10809

In 2345 Security Guard 3.7, the driver file 2345NetFirewall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-88...

PT-2018-3244

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 78.0.3904.70 Description The issue concerns incorrect security UI in full screen mode, allowing a remote attacker to hide security UI via a crafted HTML page. This is related to deficiencies in handling service...

[SECURITY] Fedora 26 Update: ghostscript-9.20-11.fc26

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

CVE-2018-10431

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...

CVE-2018-10431

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...

CVE-2018-10429

Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php...

CVE-2018-10431: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...

ExpressionEngine: Import File Converter - local File inclusion

@lawrenceamer discovered a local file inclusion vulnerability that logged in users with access to the control panel and permission to access developer utilities may be able to exploit. @lawrenceamer gave a detailed report with step-by-step instructions for replicating and screen captures of a the...

CVE-2018-0251: Improper Neutralization of Input During Web Page Generation

A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer SSL VPN portal of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of that portal on an...

The Welcome screen may be displayed for 30 seconds during the logon process after you set a solid color as the desktop background in Windows 7 or in Windows Server 2008 R2

The Welcome screen may be displayed for 30 seconds during the logon process after you set a solid color as the desktop background in Windows 7 or in Windows Server 2008 R2 If this article does not answer your question, click this button to pose your question to other community members at Microsof...

Fedora 27 : wordpress (2018-d48955723f)

WordPress 4.9.5 Security and Maintenance Release WordPress 4.9.5 is now available. This is a security and maintenance release for all versions since WordPress 3.7. We strongly encourage you to update your sites immediately. WordPress versions 4.9.4 and earlier are affected by three security issue...

Jungo DriverWizard WinDriver Denial of Service Vulnerability (CNVD-2018-08676)

Jungo DriverWizard WinDriver is a PCI/USB device driver development tool from Israel's Jungo Connectivity. A denial of service vulnerability exists in windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0. An attacker can exploit this vulnerability to cause a denial of service blue screen of dea...

CVE-2018-10072

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service BSOD via a 0x953827bf DeviceIoControl call...

PT-2018-9657

Name of the Vulnerable Software and Affected Versions: WinDriver version 12.6.0 Description: The issue allows attackers to cause a denial of service, resulting in a Blue Screen of Death BSOD, by making a specific DeviceIoControl call, 0x953827bf, to the windrvr1260.sys driver. Recommendations: Fo...

PT-2018-9656

Name of the Vulnerable Software and Affected Versions: WinDriver version 12.6.0 Description: The issue allows attackers to cause a denial of service, resulting in a Blue Screen of Death BSOD, by making a specific DeviceIoControl call, 0x953826DB, to the windrvr1260.sys driver. Recommendations: Fo...