CVE-2018-0836

Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0837, CVE-2018-083...

CVE-2018-0822

NTFS in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way NTFS handles objects, aka "Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability"...

CVE-2018-0823

The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Named Pipe File System handles objects, aka "Named Pipe File System Elevation of Privilege Vulnerability"...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-03518)

Microsoft Windows 10 is a set of next-generation cross-platform operating systems released by Microsoft Corporation in the U.S. It is available for PCs and laptops, tablets, and cell phones, among other devices.Edge is one of the default browsers that comes with the system. An information...

Microsoft Edge Security Feature Bypass Vulnerability (CNVD-2018-03511)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Edge is one of the web browsers that comes with the system. A security feature bypass vulnerability exists in Edge in Microsoft Windows 10 versions 1607, 1703, and Windows Server 2016, which stems fro...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-03516)

Microsoft Windows 10 is a set of next-generation cross-platform operating systems released by Microsoft Corporation in the U.S. It is available for PCs and laptops, tablets, and cell phones, among other devices.Edge is one of the default browsers that comes with the system. An information...

Compatibility update for upgrading to Windows 10 version 1703: February 13, 2018

None None...

Servicing stack update for Windows 10 Version 1709, February 13, 2018

None None...

USN-3568-1 wavpack vulnerabilities

Hanno Böck discovered that WavPack incorrectly handled certain WV files. An attacker could possibly use this to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2016-10169 Joonun Jang discovered that WavPack incorrectly handled certain RF64 files. An...

CVE-2017-18178

Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the redirection target, if the target is specified using a certain %40 syntax. This is fixed in 10.1...

PostgreSQL Memory Disclosure Vulnerability

PostgreSQL is a free object-relational database management system developed by the PostgreSQL development group. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A security vulnerability exists in table partitioning ...

ALPINE-CVE-2018-1052

Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table...

SUSE-SU-2018:0384-1 Security update for mariadb

This update for mariadb to version 10.0.33 fixes several issues. These security issues were fixed: - CVE-2017-10378: Vulnerability in subcomponent: Server: Optimizer. Easily exploitable vulnerability allowed low privileged attacker with network access via multiple protocols to compromise MySQL...

UBUNTU-CVE-2018-1053

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pgupgrade creates file in current working directory containing the output of pgdumpall -g under umask which was in effect when the user invoked pgupgrade, and not under 0077 which...

CVE-2018-6486

XML External Entity XXE vulnerability in Micro Focus Fortify Audit Workbench AWB and Micro Focus Fortify Software Security Center SSC, versions 16.10, 16.20, 17.10. This vulnerability could be exploited to allow a XML External Entity XXE injection...

Servicing stack update for Windows 10 Version 1709: January 30, 2018

None None...

IBM Cognos TM1 Cross-Site Scripting Vulnerability (CNVD-2018-02368)

IBM Cognos TM1 is a suite of enterprise planning software for planning, budgeting, forecasting and analyzing from IBM in the United States. The software quickly analyzes data, models business needs, and collaborates on plans, budgets, and forecasts. A cross-site scripting vulnerability exists in...

USN-3547-1 libtasn1-6 vulnerabilities

It was discovered that Libtasn1 incorrectly handled certain files. If a user were tricked into opening a crafted file, an attacker could possibly use this to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2017-10790 It was discovered that Libtasn1...

Apple macOS High Sierra Kernel Arbitrary Code Execution Vulnerability (CNVD-2018-02631)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A security vulnerability exists in the Kernel component of Apple macOS High Sierra versions prior to 10.13.3. The vulnerability can be exploited by an attacker to...

CVE-2017-15531

Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts for management interface users. A remote attacker can use brute force search to guess a user password and gain access to Reporter...