CVE-2018-10650

There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10649

There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3...

Servicing stack update for Windows 10 Version 1709: May 21, 2018

None None...

Linux kernel 'etm_setup_aux' function denial-of-service vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'etmsetupaux' function in the drivers/hwtracing/coresight/coresight-etm-perf.c file in versions of the Linux kernel prior to...

WordPress WP Live Chat Support plugin <=8.0.07 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability found by Riccardo ten Cate in WordPress WP Live Chat Support plugin versions =8.0.07. Solution Update the WordPress WP Live Chat Support plugin to the latest available version at least 8.0.08...

Servicing stack update for Windows 10 Version 1607: May 17, 2018

None None...

USN-3648-1 curl vulnerabilities

Dario Weisser discovered that curl incorrectly handled long FTP server command replies. If a user or automated system were tricked into connecting to a malicious FTP server, a remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly execute...

Microsoft Windows Local Security Feature Bypass Vulnerability

Microsoft Windows 10, Windows Server 2016, and Windows Server Version 1709 are all products of Microsoft Corporation, U.S.A. Microsoft Windows 10 is a cross-platform operating system for PCs and laptops, tablets and devices such as cell phones.Windows Server 2016 and Windows Server Version 1709 a...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2018-09474)

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft Corporation, U.S.A. Internet Explorer IE is one of the web browsers that comes with the Windows operating system. A remote code execution vulnerability exists in Microsoft IE versions 10 and 11, which...

Microsoft Office Remote Code Execution Vulnerability (CNVD-2018-10431)

Microsoft Office 2010 SP2 and others are products of Microsoft Corporation.Microsoft Office 2010 SP2 is an office software suite product.Word 2007 SP3 is a word processing software. A remote code execution vulnerability exists in Microsoft Office that stems from the program failing to properly...

CVE-2018-8170

An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers...

CVE-2018-8164

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1,...

CVE-2018-8166

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1,...

CVE-2018-0955

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-10207)

Microsoft Windows 10 is a suite of operating systems from Microsoft Corporation.Edge is one of the default browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and is also available as a standalone JavaScript engine.... A remote code executi...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-10670)

Microsoft Windows 10 is a set of next-generation cross-platform operating systems released by Microsoft Corporation in the U.S. It is available for PCs and laptops, tablets, and cell phones, among other devices.Edge is one of the default browsers that comes with the system. An information...

Microsoft Edge Security Feature Bypass Vulnerability (CNVD-2018-10732)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Edge is one of the a default browser that comes with the system. A security...

Microsoft Edge Sensitive Information Disclosure Vulnerability

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft Corporation in the U.S. Edge and Internet Explorer IE are among the browsers that come with the systems. The former is the default browser that comes with the latest operating system, Windows 10, and...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-10210)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2018-10209)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Edge is one of the a default browser that comes with the system. A remote code...