CVE-2018-8443

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

CVE-2018-8457

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from CVE-2018-8354,...

CVE-2018-8424

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows...

CVE-2018-8447

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8461...

CVE-2018-8445

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8336, CVE-2018-8419, CVE-2018-8442, CVE-2018-844...

CVE-2018-8435

A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-V Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8441

An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers...

Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2018-26993)

Microsoft Windows 10 and others are products of Microsoft Corporation USA.Microsoft Windows 10 is an operating system for personal computers; Windows Server 2016 is a server operating system. A remote code execution hole exists in Microsoft Windows Hyper-V. The vulnerability stems from a program'...

Huawei cell phone input checksum vulnerability (CNVD-2018-18483)

Huawei Mate 10 ALP-L09 is a smartphone product of Chinese company Huawei Huawei. An input validation vulnerability exists in the Huawei Mate 10 ALP-L09 phone due to a lack of parameter checking. An attacker induces a user who has gained root privileges to install a carefully crafted application,...

Microsoft Edge elevation of privilege vulnerability (CNVD-2018-26981)

Microsoft Windows 10 is a set of next-generation cross-platform operating systems released by Microsoft Corporation in the U.S. It is available for PCs and laptops, tablets, and cell phones, among other devices.Edge is one of the default browsers that comes with the system. An elevation of...

Huawei Mobile Phone Input Validation Vulnerability

Huawei Mate 10 ALP-L09 is a smartphone product of Chinese company Huawei Huawei. An input validation vulnerability exists in the Huawei Mate 10 ALP-L09 phone due to a lack of parameter checking. An attacker induces a user who has gained root privileges to install a carefully crafted application,...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-26984)

Microsoft Windows 10 is a suite of operating systems from Microsoft Corporation.Edge is one of the default browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and is also available as a standalone JavaScript engine.... A remote code executi...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-26972)

Microsoft Windows 10 and Windows Server 2019 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Microsoft ChakraCore and Windows Edge Remote Code Execution Vulnerability

Microsoft Windows 10 is a suite of operating systems from Microsoft Corporation.Edge is one of the default browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and is also available as a standalone JavaScript engine.... A remote code executi...

IBM Campaign HTML Injection Vulnerability

IBM Campaign formerly known as Unica Campaign is a management solution from IBM in the United States used to help marketers design, execute, measure, and optimize marketing advertising. An HTML injection vulnerability exists in IBM Campaign versions 9.1, 9.1.2, and 10, which can be exploited by...

Servicing stack update for Windows 10, version 1803: September 11, 2018

None None...

Cybozu Garoon vulnerable to directory traversal

Overview Cybozu Garoon provided by Cybozu, Inc. contains a directory traversal vulnerability CWE-22 due to a flaw in processing of the session information. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated und...

CVE-2018-9283

An XSS issue was discovered in CremeCRM 1.6.12. It is affected by 10 stored Cross-Site Scripting XSS vulnerabilities in the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address, shippingaddress-zipcode,...

Microsoft People Denial of Service Vulnerability

Microsoft People is a contact management application and address book included in Microsoft Windows 8 and 10. It allows users to organize and link contacts from different email accounts using a unique graphical interface. A denial of service vulnerability exists in Microsoft People. An attacker...

CVE-2018-16550

TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to determine the correct value of the default 4-digit PIN...