CVE-2018-5434

The TIBCO Designer component of TIBCO Software Inc.'s TIBCO Runtime Agent, and TIBCO Runtime Agent for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity expansion XXE attacks to disclose host machine information. Affected releases are TIBCO Software Inc.'...

PT-2018-17923 · Node.Js · Node.Js

Name of the Vulnerable Software and Affected Versions: Node.js versions 9.x through 10.x Description: The issue allows an attacker to cause a denial of service DoS by crashing a node process that provides an http server supporting TLS server. This can be accomplished by sending duplicate or...

Microsoft Windows Remote Code Execution Vulnerability (CNVD-2018-11572)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems. A remote code execution vulnerability exists in...

Microsoft Windows Hyper-V Code Integrity Elevation of Privilege Vulnerability

Microsoft Windows 10, Windows Server 2016, and Windows Server Version 1709 are all products of Microsoft Corporation, U.S.A. Microsoft Windows 10 is a cross-platform operating system for PCs and laptops, tablets and devices such as cell phones.Windows Server 2016 and Windows Server Version 1709 a...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2018-11935)

Microsoft Edge is Microsoft's built-in browser in its latest operating system, Windows 10. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from Edge failing to properly access objects in memory. A remote attacker can exploit the vulnerability to execute arbitra...

Microsoft Windows WebDAV Denial of Service Vulnerability

Microsoft Windows 10 is a series of operating systems released by Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server Version 1709 and Windows Server Version 1803 are server operating systems. Windows Server Version 1709 and Windows Serve...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-11921)

Microsoft Edge is Microsoft's built-in browser in its latest operating system, Windows 10. Microsoft Edge suffers from an information disclosure vulnerability. The vulnerability stems from Edge's failure to properly handle objects in memory. An attacker could exploit the vulnerability to obtain...

Microsoft Windows Device Guard Local Security Bypass Vulnerability (CNVD-2018-12564)

Microsoft Windows 10 and Windows Server Version 1709 are both products of Microsoft Corporation.Microsoft Windows 10 is a cross-platform operating system for PCs and laptops, tablets, and cell phones.Windows Server Version 1709 is a server operating system. Server Version 1709 is a server operati...

Microsoft Windows Device Guard Local Security Bypass Vulnerability (CNVD-2018-12572)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers and the latter is a set of server operating systems.Device Guard is one of the device protection components. A local security bypass...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2018-11918)

Microsoft Edge is Microsoft's built-in browser in its latest operating system, Windows 10. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from the program failing to properly access objects in memory. A remote attacker can exploit the vulnerability with the he...

Microsoft Windows Win32k Component Elevation of Privilege Vulnerability

Microsoft Windows 10 and Windows Server Version 1803 are both products of Microsoft Corporation.Microsoft Windows 10 is a cross-platform operating system for PCs and laptops, tablets, and cell phones.Windows Server Version 1803 is a server operating system.Win32k is the kernel portion of the...

Microsoft Edge and ChakraCore Memory Corruption Vulnerability

Microsoft Windows 10 is a next-generation cross-platform operating system from Microsoft.Edge is one of the browsers that comes with the system.ChakraCore is the core of an open-source JavaScript engine that is used in Edge, and can also be used as a stand-alone JavaScript engine. engine. A memor...

PT-2018-17926 · Node.Js +3 · Node.Js +3

Name of the Vulnerable Software and Affected Versions: Node.js versions 6.x through 9.x Description: The issue arises when calling Buffer.fill or Buffer.alloc with certain parameters, leading to a hang and potentially resulting in a Denial of Service. The implementations of Buffer.alloc and...

Microsoft Windows Cortana Elevation of Privilege Vulnerability

Microsoft Windows 10, Windows Server Version 1709 and Windows Server Version 1803 are all products of Microsoft Corporation USA.Microsoft Windows 10 is a cross-platform operating system for PCs and Microsoft Windows 10 is a cross-platform operating system for PCs and devices such as laptops,...

IBM Robotic Process Automation with Automation Anywhere Cross-Site Request Forgery Vulnerability

IBM Robotic Process Automation with Automation Anywhere is a process automation solution developed by IBM USA and Automation Anywhere. A cross-site request forgery vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 10.0. A remote attacker can exploit this...

CVE-2018-5174

In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEEMASKFLAGNOUI" flag associated with downloaded files and will not show any UI. Files that are unknown and potentially dangerous will be allowed to run because SmartScreen will not prompt the user for a decision, and i...

WordPress Top-10 Plugin SQL Injection Vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Top-10 is one of the plug-ins that calculates the number of daily visits and total number of visits to each post and...

CVE-2018-4236

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOGraphics" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2018-4242

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Hypervisor" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2018-4184

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Speech" component. It allows attackers to bypass a sandbox protection mechanism to obtain microphone access...