NoMachine 'nxfuse' elevation of privilege vulnerability

NoMachine is a remote desktop access tool from NoMachine Luxembourg. open Source DokanFS library is one of the open source file system libraries. nxfuse is one of the components that can expose NX data as a file system. A security vulnerability exists in the nxfuse component of the Open Source...

CVE-2018-6947

An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.662 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 32 and 64bit, and denial of service for Windows 8 and 10...

Xen Denial of Service Vulnerability (CNVD-2018-04653)

Xen is an open source virtual machine monitor developed by the Xen Project. A denial of service vulnerability exists in Xen 4.8.x through 4.10.x. Users of the x86 PVH client operating system can exploit this vulnerability to cause a denial of service null pointer dereference and hypervisor crash ...

Microsoft Windows kernel elevation of privilege vulnerability (CNVD-2018-05041)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the operating system kernels. A privilege extraction vulnerability exists in the Windows kernel in Microsoft Windows 10 versions 1703, 1709, and Windows Server version 1709,...

Microsoft Named Pipe File System Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Named Pipe File System is one of the named pipe file systems. An elevation vulnerability exists in the Named Pipe File System in Microsoft Windows 10 version 1709 and Windows Server version 1709, whic...

Microsoft Windows kernel local information disclosure vulnerability (CNVD-2018-05063)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the operating system kernels. An information disclosure vulnerability exists in the Windows kernel in Microsoft Windows 10 version 1709 and Windows Server version 1709, which...

Microsoft Windows Scripting Host Security Bypass Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft.Windows Scripting Host WSH is one of the scripting environments embedded in the system. A security feature bypass vulnerability exists in WSH in Microsoft Windows 10 versions 1703, 1709, and Windows Server version 1709. A...

CVE-2018-6488

Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution...

February 22, 2018—KB4077528 (OS Build 15063.936)

None None...

CVE-2017-17455

Mahara 16.10 before 16.10.7, 17.04 before 17.04.5, and 17.10 before 17.10.2 are vulnerable to being forced, via a man-in-the-middle attack, to interact with Mahara on the HTTP protocol rather than HTTPS even when an SSL certificate is present...

Application Crashes in Desktop Session When Using a Touchscreen Client

If an ICA Session is started from a Windows 10 client with touchscreen display or iPhone/iPad, Surface a Powerbuilder application crashes. If the Multi-touch screen is disabled in the client device manager the Powerbuilder application runs without errors. Other applications which use Microsoft UI...

CVE-2017-8948

A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i NNMi Software versions v10.0x, v10.1x, v10.2x was found...

CVE-2017-5811

A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2018-0847

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow information disclosure, due to how Internet Explorer handles objects in memory, aka...

CVE-2018-0826

Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Storage Services Elevation of Privilege Vulnerability"...

CVE-2018-0843

The Windows kernel in Windows 10 version 1709 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0756, CVE-2018-0809 an...

CVE-2018-0842

Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an elevation of privilege vulnerability due to how objects in memory are handled, aka...

CVE-2018-0827

Windows Scripting Host WSH in Windows 10 versions 1703 and 1709 and Windows Server, version 1709 allows a Device Guard security feature bypass vulnerability due to the way objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability"...

CVE-2018-0831

The Windows kernel in Windows 10 versions 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Kernel Elevation of Privilege Vulnerability"...

CVE-2018-0835

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834,...