CVE-2018-0820

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are...

Microsoft Edge Security Feature Bypass Vulnerability (CNVD-2018-03511)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Edge is one of the web browsers that comes with the system. A security feature bypass vulnerability exists in Edge in Microsoft Windows 10 versions 1607, 1703, and Windows Server 2016, which stems fro...

Update to add SHA-2 code signing support for Windows Server 2008 SP2

Update to add SHA-2 code signing support for Windows Server 2008 SP2 Summary This update provides support for the Secure Hash Algorithm-2 SHA-2 code signing and verification functionality in the 64-bit version of Windows Server 2008 Service Pack 2 SP2 which includes the following: Support for...

SQL Injection Vulnerability in DocCms 2016

DocCMS rice husk enterprise building system, also known as rice husk cms, doccms, formerly known as deep throat enterprise building system ShlCms, is a free and open source enterprise website building system, enterprise website generation system. DocCms 2016 has a SQL injection vulnerability,...

CVE-2017-13209

creationtimestamp| type| source ---|---|--- 2018-01-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43513...

Denial of Service Vulnerability in Multiple F5 Products (CNVD-2018-01138)

F5 BIG-IP 2000s and so on are the products of F5 Corporation in the U.S.A. F5 BIG-IP 2000s is an all-in-one network appliance that integrates the functions of network traffic management, application security management, and load balancing, etc. BIG-IP LTM is a local traffic manager. A denial of...

CVE-2017-17570

creationtimestamp| type| source ---|---|--- 2017-12-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43261...

CVE-2017-17588

creationtimestamp| type| source ---|---|--- 2017-12-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43251...

CVE-2017-12579

creationtimestamp| type| source ---|---|--- 2017-12-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43223...

CVE-2017-11832

The Microsoft Windows embedded OpenType EOT font engine in Windows 7 SP1, Windows Server 2008 SP2 and 2008 R2 SP1, and Windows Server 2012 allows an attacker to potentially read data that was not intended to be disclosed, due to the way that the Microsoft Windows EOT font engine parses specially...

October 2017 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2 (KB 4043767)

October 2017 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2 KB 4043767 Notice This update has been released as part of the October 2017 Preview of Quality Rollup for .NET Framework 3.5, 4.5.2...

CVE-2017-11813

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Memo...

PT-2017-11411 · Juniper Networks · Contrail

The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials. Affected releases are Contrail releases 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and ha...

DEBIAN-CVE-2012-6696

inspircd in Debian before 2.0.7 does not properly handle unsigned integers. NOTE: This vulnerability exists because of an incomplete fix to CVE-2012-1836...

CVE-2017-8740

creationtimestamp| type| source ---|---|--- 2017-09-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42764...

CVE-2017-8710

The Microsoft Common Console Document .msc in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1 allows an attacker to read arbitrary files via an XML external entity XXE declaration, due to the way that the Microsoft Common Console Document .msc parses XML input containing a reference t...

Microsoft Office Memory Corruption Vulnerability (CNVD-2017-32622)

Microsoft Office 2007 SP3, etc. are office software suite products developed by the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Office, which arises from the program failing to properly handle objects in memory. A remote attacker could exploit this...

CVE-2017-14075

creationtimestamp| type| source ---|---|--- 2017-09-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42625...

SUSE-SU-2017:2356-1 Security update for postgresql96

This update for postgresql96 fixes the following issues: CVE-2017-7547: Further restrict visibility of pgusermappings.umoptions, to protect passwords stored as user mapping options. bsc1051685 CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. bsc1051684...

JasPer Denial of Service Vulnerability (CNVD-2017-25685)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer, which can be exploited by a remote...