Microsoft Windows Remote Code Execution Vulnerability (CNVD-2018-08336)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2008 SP2 is a set of server operating systems. A remote code execution vulnerability exists in Microsoft...

SAP Disclosure Management Unauthorized Access Vulnerability

SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. A security vulnerability exists in SAP Disclosure Management version 10.1. An attacker...

CyberArk Password Vault Web Access Remote Code Execution Vulnerability

CyberArk Password Vault Web Access is an enterprise password management application from CyberArk Software, Israel. The program is capable of managing sensitive passwords and controlling passwords for privileged accounts in various client/server and mainframe operating systems, switches, and...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-07774)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-07775)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2018-07777)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Internet Explorer IE is a Web browser that comes with the Windows operating system. A remote code execution vulnerability exists in Microsoft IE 11, which arises from the program failin...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-07772)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2018-07773)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-07984)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Edge is one of the a default browser that comes with the system. An informatio...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2018-08568)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the Windows system kernels. An information disclosure vulnerability exists in Microsoft Windows kernel. An attacker can exploit this vulnerability by logging on...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2018-07778)

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft Corporation, U.S.A. Internet Explorer IE is one of the web browsers that comes with the Windows operating system. A remote code execution vulnerability exists in Microsoft IE9, 10, and 11 that...

CVE-2018-2406

Unquoted windows search path directory/path traversal vulnerability in Crystal Reports Server, OEM Edition CRSE, 4.0, 4.10, 4.20, 4.30, startup path...

Servicing stack update for Windows 10, version 1507: April 10, 2018

None None...

Servicing stack update for Windows 10, version 1607: April 10, 2018

None None...

Servicing stack update for Windows 10, version 1709: April 10, 2018

None None...

Servicing stack update for Windows 10, version 1703: April 10, 2018

None None...

GitLab Cross-Site Scripting Vulnerability (CNVD-2018-08692)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A cross-site scripting vulnerability exists in GitLab CE and EE versions 9.2 through 10.4. The...

April 10, 2018—KB4099572 Update for Windows 10 Mobile (OS Build 15254.369)

April 10, 2018—KB4099572 Update for Windows 10 Mobile OS Build 15254.369 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: This build includes all the improvements from KB4093107. If you...

Apple macOS Sierra Kernel Security Bypass Vulnerability (CNVD-2018-08237)

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A security vulnerability exists in the Kernel component of Apple macOS Sierra versions prior to 10.12.4. The vulnerability can be exploited by an attacker to bypass th...

Apple iOS and macOS High Sierra iCloud Drive Competitive Conditions Vulnerability

Apple iOS and macOS High Sierra are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS High Sierra is a dedicated operating system developed for Mac computers. iCloud Drive is one of the cloud-based file backup components. iCloud Drive is a cloud-based fil...