CVE-2018-8506

An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft Windows Codecs Library Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019...

Microsoft Edge Security Bypass Vulnerability (CNVD-2019-00961)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Edge is one of the a default browser that comes with the system. A security...

SAP BusinessObjects Business Intelligence Platform Information Disclosure Vulnerability

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product has report generation, analysis, data visualization and other functions. An information disclosure vulnerability exists in SAP BusinessObjects...

IBM Robotic Process Automation with Automation Anywhere Enterprise Cross-Site Scripting Vulnerability

IBM Robotic Process Automation with Automation Anywhere Enterprise is a suite of process automation solutions developed by IBM USA and Automation Anywhere. A cross-site scripting vulnerability exists in IBM Robotic Process Automation with Automation Anywhere Enterprise version 10, which stems fro...

Microsoft Windows Theme API Remote Code Execution Vulnerability

Microsoft Windows 10 and others are a set of new generation cross-platform operating systems released by Microsoft.Windows Theme API is one of the Windows system theme components. A remote code execution vulnerability exists in Microsoft Windows Theme API, which is caused by the program failing t...

Microsoft Edge Security Bypass Vulnerability (CNVD-2019-00960)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Edge is one of the a default browser that comes with the system. A security...

IBM Robotic Process Automation with Automation Anywhere Enterprise Cross-Site Scripting Vulnerability (CNVD-2018-20658)

IBM Robotic Process Automation with Automation Anywhere Enterprise is a suite of process automation solutions developed by IBM USA and Automation Anywhere. A cross-site scripting vulnerability exists in IBM Robotic Process Automation with Automation Anywhere Enterprise version 10. A remote attack...

CVE-2018-2471

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted...

IBM Security Guardium Information Disclosure Vulnerability (CNVD-2018-24842)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardium version 10.5...

IBM Security Guardium Information Disclosure Vulnerability (CNVD-2019-00994)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in EcoSystem in IBM Security Guardium...

Compatibility update for upgrading to Windows 10, version 1803: October 9, 2018

None None...

October 9, 2018—KB4464853 Update for Windows 10 Mobile (OS Build 15254.538)

October 9, 2018—KB4464853 Update for Windows 10 Mobile OS Build 15254.538 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: This build includes all the improvements from KB4462937. If you...

CVE-2018-17053

Cross-site scripting XSS vulnerability in Identity Server in Progress Sitefinity CMS versions 10.0 through 11.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to login request parameters, a different vulnerability than CVE-2018-17054...

Philips iSite/IntelliSpace PACS Vulnerabilities (Update A)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: Philips Equipment: iSite and IntelliSpace PACS Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Code/Source Code...

SalesAgility SuiteCRM Cross-Site Scripting Vulnerability

SalesAgility SuiteCRM is an open source Customer Relationship Management CRM system. The system supports differentiated marketing for different customer needs, managing and distributing sales leads, and enabling information sharing and tracking of sales representatives. A cross-site scripting...

CVE-2018-7101

A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30...

CVE-2018-7105

A security vulnerability in HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 iLO 4 prior to v2.61, HPE Integrated Lights-Out 3 iLO 3 prior to v1.90 could be remotely exploited to execute arbitrary code leading to disclosure of information...

ex-NSA Hacker Discloses macOS Mojave 10.14 Zero-Day Vulnerability

The same day Apple released its latest macOS Mojave operating system, a security researcher demonstrated a potential way to bypass new privacy implementations in macOS using just a few lines of code and access sensitive user data. On Monday, Apple started rolling out its new macOS Mojave 10.14...

CVE-2018-17411

An XML External Entity XXE vulnerability exists in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20...

Apple macOS Mojave Application Firewall Sandbox Limit Bypass Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers.Application Firewall is one of the application firewall components. A security vulnerability exists in the Application Firewall component in Apple macOS Mojave versions prior to 10.14. An attacker could...