12443 matches found
CCindex10 Number Error Vulnerability
CCindex10 T10 is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in T10's smart contract. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
Microsoft Windows 10 Active-X Creation/Deletion Vulnerability
Microsoft Windows 10 is a next-generation cross-platform operating system released by the American company Microsoft. A create/delete vulnerability exists in Microsoft Windows 10 Active-X. An attacker can exploit the vulnerability to create text files on the victim's machine and delete any file...
Eminent EM4544 Cross-Site Scripting Vulnerability
The Eminent EM4544 is a wireless router product from the Dutch company Eminent. A security vulnerability exists in the Eminent EM4544 version 9.10, which originates from the program failing to request the user's current password when setting a new password. An attacker can exploit the vulnerabili...
UBUNTU-CVE-2018-12892
An issue was discovered in Xen 4.7 through 4.10.x. libxl fails to pass the readonly flag to qemu when setting up a SCSI disk, due to what was probably an erroneous merge conflict resolution. Malicious guest administrators or in some situations users may be able to write to supposedly read-only di...
ALPINE-CVE-2018-12892
An issue was discovered in Xen 4.7 through 4.10.x. libxl fails to pass the readonly flag to qemu when setting up a SCSI disk, due to what was probably an erroneous merge conflict resolution. Malicious guest administrators or in some situations users may be able to write to supposedly read-only di...
Xen Local Security Bypass Vulnerability (CNVD-2018-15165)
Xen is an open source virtual machine monitor, developed by the University of Cambridge. It is intended to run up to 102 full-featured operating systems on a single computer. A local security bypass vulnerability exists in Xen versions 4.7 through 4.10.x, which stems from a program's failure to...
Galaxy server cross-site scripting vulnerability
Galaxy is a web-based open source system for accessing, reproducing, and analyzing biomedicine. galaxy server is one of the servers. A cross-site scripting vulnerability exists in multiple templates of the Galaxy server in Galaxy version 14.10, which stems from the program failing to properly...
PYSEC-2018-149
The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, which would allow for cross-site scripting XSS attacks. In this form of attack,...
PYSEC-2018-149
The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, which would allow for cross-site scripting XSS attacks. In this form of attack,...
CVE-2018-0529
Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to cause a denial of service via unspecified vectors...
CVE-2018-0528
Cybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view the schedules that are not permitted to access via unspecified vectors...
Servicing stack update for Windows 10, version 1803: June 26, 2018
None None...
Compatibility update for upgrading to Windows 10 Version 1803: June 26, 2018
None None...
June 21, 2018—KB4284833 (OS Build 14393.2339)
None None...
Natus Xltek NeuroWorks Buffer Overflow Vulnerability (CNVD-2018-12130)
Natus Xltek NeuroWorks is a suite of versatile software platforms for EEG testing, long-term monitoring, ICU monitoring and sleep studies from Natus Medical, USA. A buffer overflow vulnerability exists in the SavePatientMontager feature in Natus Xltek NeuroWorks version 10. A remote attacker coul...
Compatibility update for upgrading to Windows 10 Version 1709: June 21, 2018
None None...
Microsoft Windows Kernel Local Elevation of Privilege Vulnerability (CNVD-2018-13328)
Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems. A local elevation of privilege vulnerability exists i...
MACCMS 10 Cross-Site Request Forgery Vulnerability
MacCMS program is a fast shadow video building system that runs on PHP+MYSQL environment. MACCMS 10 has a cross-site request forgery vulnerability, which can be exploited by attackers to arbitrarily add to users...
PT-2018-17588 · Unknown · Cms Server +1
Name of the Vulnerable Software and Affected Versions: UCMBD Server versions 10.20 through 11.0 CMS Server version 2018.05 BACKGROUND Description: A remote Cross-site Request forgery CSRF potential has been identified, which could allow for remote unsafe deserialization and cross-site request...