Nagios XI Elevation of Privilege Vulnerability

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. An elevation of privilege vulnerability exists in Nagios XI version 5.2.x and version 5.4.x prior to 5.4.13...

Mautic cross-site scripting vulnerability (CNVD-2018-08601)

Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A cross-site scripting vulnerability exists in versions of Mautic prior to 2.13.0. A remote attacker can exploit this vulnerability to inject arbitrary...

Linux kernel denial of service vulnerability (CNVD-2018-07978)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'killsomethinginfo' function in the kernel/signal.c file in Linux kernel versions prior to 4.13. A local attacker can exploit th...

DEBIAN-CVE-2018-10087

The kernelwait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service by triggering an attempted use of the -INTMIN value...

Apple iOS and macOS High Sierra iCloud Drive Competitive Conditions Vulnerability

Apple iOS and macOS High Sierra are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS High Sierra is a dedicated operating system developed for Mac computers. iCloud Drive is one of the cloud-based file backup components. iCloud Drive is a cloud-based fil...

Apple macOS High Sierra kext tools elevation of privilege vulnerability

Apple macOS High Sierra is a suite of Apple's proprietary operating systems for Mac computers. kext tools is a graphical interface tool for installing drivers. A security vulnerability exists in the kext tools component of Apple macOS High Sierra versions prior to 10.13, which is caused by a logi...

Apple macOS High Sierra Disk Images Arbitrary Application Launch Vulnerability

Apple macOS High Sierra is a proprietary operating system developed by Apple for Mac computers.Disk Images is one of the components of the Disk Image Format. A security vulnerability exists in the Disk Images component of Apple macOS High Sierra versions prior to 10.13.4. The vulnerability can be...

CVE-2018-4136

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service out-of-bounds read via a crafted app...

CVE-2018-4092

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to bypass intended memory-read...

PT-2018-5605 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 11.2 macOS versions prior to 10.13.2 tvOS versions prior to 11.2 watchOS versions prior to 4.2 Description: The issue involves the Kernel component and allows attackers to execute arbitrary code in a privileged context o...

F5 BIG-IP PEM Denial of Service Vulnerability

F5 BIG-IP is an all-in-one network appliance that integrates network traffic management, application security management, load balancing, etc. PEM is one of the policy enforcement managers. A security vulnerability exists in F5 BIG-IP PEM versions 13.0.0 through 13.1.0.3 and 12.0.0 through...

OPENSUSE-SU-2018:0813-1 Security update for nginx

This update for nginx to version 1.13.9 fixes the following issues: - CVE-2017-7529: nginx: Integer overflow in nginx range filter module allowed memory disclosure bsc1048265 This update also contains all updates and improvements in 1.13.9 upstream release...

Red Hat Ceph Denial of Service Vulnerability

Red Hat Ceph is a Linux petabyte-level distributed file system from Red Hat. The main goal of the system is to be designed as a distributed file system without a single point of failure based on POSIX Portable Operating System Interface so that data can be fault-tolerant and seamlessly replicated...

Linux kernel denial of service vulnerability (CNVD-2018-04867)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the drivers/net/ethernet/hisilicon/hns/hnsenet.c file in Linux kernel versions prior to 4.13. A local attacker could exploit this...

DEBIAN-CVE-2017-18218

In drivers/net/ethernet/hisilicon/hns/hnsenet.c in the Linux kernel before 4.13, local users can cause a denial of service use-after-free and BUG or possibly have unspecified other impact by leveraging differences in skb handling between hnsnicnetxmithw and hnsnicnetxmit...

Servicing stack update for Windows 10 Version 1709, February 13, 2018

None None...

CVE-2018-0116

A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to be authorized as a subscriber without providing a valid password; however, the attacker must provide a valid username. The vulnerability is due to incorrect RADIUS user...

CVE-2018-0116

A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to be authorized as a subscriber without providing a valid password; however, the attacker must provide a valid username. The vulnerability is due to incorrect RADIUS user...

Apple macOS High Sierra Kernel Arbitrary Code Execution Vulnerability (CNVD-2018-02631)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A security vulnerability exists in the Kernel component of Apple macOS High Sierra versions prior to 10.13.3. The vulnerability can be exploited by an attacker to...

GNU Libtasn1 '_asn1_decode_simple_ber' function stack exhaustion vulnerability

GNU Libtasn1 is an ASN.1 architecture management library for use in GnuTLS a secure communications library that implements the SSL, TLS, and DTLS protocols by software developer Fabio Fiorina. A security vulnerability exists in the 'asn1decodesimpleber' function in the decoding.c file in GNU...