CVE-2018-4980

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This is due to an incorrect scope handling during the emitting of byte code which could cause memory corruption and allow an attacker to execute code in the context of the current user. This CVE ID is different from CVE-2018-0758,...

Synaptics Keyboard & Touchpad Driver Running Arbitrary Code - US

Lenovo Security Advisory: LEN-19151 Potential Impact: Execution diversion – launching arbitrary code within the user’s context Severity: Low Scope of Impact: Industry-wide CVE Identifier: TBD, Summary Description: An attacker who has already obtained access to a user’s account could attach an...

Vulnerability of Microsoft Edge, Internet Explorer browsers, and the JavaScript scenario handler ChakraCore, caused by memory object handling errors, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Edge, Internet Explorer, and the JavaScript scenario handler ChakraCore arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Chakra Scripting Engine Remote Memory Corruption Vulnerability

Microsoft ChakraCore is the core of the JavaScript engine used by Edge, a web browser from Microsoft. A remote code execution vulnerability exists in Microsoft ChakraCore. The vulnerability can be exploited by a remote attacker to execute arbitrary code in the context of the current user,...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2018-11932)

Internet Explorer is a web browser from Microsoft. A memory corruption vulnerability exists in Microsoft Internet Explorer. The vulnerability stems from Internet Explorer failing to properly access objects in memory. A remote attacker can exploit the vulnerability to execute arbitrary code in the...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2018-11935)

Microsoft Edge is Microsoft's built-in browser in its latest operating system, Windows 10. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from Edge failing to properly access objects in memory. A remote attacker can exploit the vulnerability to execute arbitra...

OX App Suite Cross-Site Scripting Vulnerability

OX App Suite is a collection of cloud-based applications that support the management of email, contacts, calendars, media, documents and more. A cross-site scripting vulnerability exists in OX App Suite, which can be exploited by an attacker to execute malicious code in the user context...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2018-11917)

Microsoft Edge is Microsoft's built-in browser in its latest operating system, Windows 10. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from the program failing to properly access objects in memory. A remote attacker can exploit the vulnerability with the he...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2018-11936)

Internet Explorer is a web browser from Microsoft. A memory corruption vulnerability exists in Microsoft Internet Explorer. The vulnerability stems from Internet Explorer failing to properly access objects in memory. A remote attacker can exploit the vulnerability to execute arbitrary code in the...

Microsoft Windows CVE-2018-8210 Arbitrary Code Execution Vulnerability

Description Microsoft Windows is prone to an arbitrary code-execution vulnerability. A local attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft...

IBM InfoSphere Information Server Cross-Site Request Forgery Vulnerability (CNVD-2018-17155)

IBM InfoSphere Information Server is the information integration platform. A cross-site request forgery vulnerability exists in the IBM InfoSphere Information Server component, which allows remote attackers to exploit the vulnerability to construct malicious URIs, bait a request, and can be used ...

OX App Suite 7.8.4 XSS / Privilege Management / SSRF / Traversal

Dear subscribers, we've migrated our public disclosure workflow to full-disclosure and are catching up on publishing recent vulnerabilities through this channel. Feel free to join our bug bounty programs open-xchange, dovecot, powerdns at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange...

CVE-2018-4945

Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

Improper access control

Incorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager Version 13 before build 13740 allows an attacker to delete any file and read certain files on the server in the context of the user which by default is "NT AUTHORITY / SYSTEM" by sending a specially...

CVE-2016-10529

Droppy versions 3.5.0 does not perform any verification for cross-domain websocket requests. An attacker is able to make a specially crafted page that can send requests as the context of the currently logged in user. For example this means the malicious user could add a new admin account under hi...

Adobe Acrobat/Reader Buffer Overflow Vulnerability (CNVD-2018-10997)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader buffer overflow vulnerability exists. Remote attackers can use t...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader in the existence of out-of-bounds read vulnerability. A remote...

CVE-2018-4937

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2018-4919

Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...