NordVPN Elevation of Privilege Vulnerability

NordVPN for Windows is a Windows-based VPN software for anonymous access to the Internet. A lifting vulnerability in version 6.12.7.0 of NordVPN for Windows-based platforms stems from a NetNamedPipe endpoint created by the 'nordvpn-service' service that allows arbitrary installed applications to...

Adobe InDesign CC Elevation of Privilege Vulnerability

Adobe InDesign CC is a set of layout editing applications from the American company Audobee Adobe. An untrustworthy search path vulnerability exists in Adobe InDesign CC 13.0 and earlier versions for Windows and Macintosh-based platforms. A local attacker can exploit this vulnerability to gain...

DEBIAN-CVE-2018-4129

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

UBUNTU-CVE-2018-4101

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attacker...

UBUNTU-CVE-2018-4114

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

Studio 42 elFinder on Windows Arbitrary File Deletion Vulnerability

Studio 42 elFinder on Windows is a Windows-based platform using jQuery and jQuery UI and written in JavaScript open source Web file manager . A security vulnerability exists in the 'zipdl' function of the elFinder.class.php file in versions of Studio 42 elFinder prior to 2.1.37 for Windows-based...

IBM Notes DLL Loading Remote Code Execution Vulnerability

IBM Notes for Windows is a set of IBM's Windows-based platform for collaborative office software. The software has e-mail, calendar, scheduling and other office functions. A remote code execution vulnerability exists in IBM Notes for Windows. A remote attacker can cause a user to double-click on ...

CVE-2018-0886

The Credential Security Support Provider protocol CredSSP in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code...

Python Software Foundation CPython on Windows Buffer Overflow Vulnerability

Python Software Foundation CPython on Windows is the Python Software Foundation's suite of Windows-based, open-source, object-oriented programming languages that are extensible, support modules and packages, and support multiple platforms.CPython also known as Python is a Python interpreter...

IBM Client Application Access elevation of privilege vulnerability (CNVD-2018-03868)

IBM Client Application Access and IBM Notes for Windows are both products of IBM Corporation.IBM Notes for Windows is a set of collaborative office software based on the Windows platform.IBM Client Application Access is a set of tools for accessing local applications based on the Windows platform...

Microsoft Internet Explorer 11 - Js::RegexHelper::RegexReplace Use-After-Free Exploit

Exploit for windows platform in category dos / poc...

Privilege escalation

The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service launcher, or CouchDB...

Google Chrome for Mac, Windows and Linux Security Bypass Vulnerability (CNVD-2018-03797)

Google Chrome for Mac, Windows and Linux is a web browser developed by Google, Inc. for the Mac, Windows and Linux platforms. A security vulnerability exists in versions of Google Chrome prior to 64.0.3282.119 for Windows, Mac and Linux platforms. A remote attacker can exploit this vulnerability ...

HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability (CNVD-2018-03956)

HPE Intelligent Management Center iMC PLAT for Windows is a suite of intelligent management center solutions for networks based on the Windows platform from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services an...

Google Chrome for Mac, Windows and Linux New Tab Page Information Disclosure Vulnerability

Google Chrome for Mac, Windows and Linux is a web browser developed by Google for the Mac, Windows and Linux platforms.New Tab Page is one of the modules used to create new tab pages. A security vulnerability exists in New Tab Page in versions of Google Chrome prior to 64.0.3282.119 for Windows,...

Google Chrome for Mac, Windows and Linux Blink Security Bypass Vulnerability

Google Chrome for Mac, Windows and Linux is a web browser for Mac, Windows and Linux platforms developed by Google Inc. Blink is one of a set of browser layout engines rendering engines co-developed by Google Inc. and Norway's Opera Software. Co-developed by the United States Google Google and...

Google Chrome for Mac, Windows and Linux Navigation URL Spoofing Vulnerability

Google Chrome for Mac, Windows and Linux is a web browser developed by Google for the Mac, Windows and Linux platforms.Navigation is one of the browser navigation modules. A security vulnerability exists in Navigation in versions of Google Chrome prior to 64.0.3282.119 on Windows, Mac and Linux...

UBUNTU-CVE-2018-4088

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is...

CVE-2018-2575

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, and 12.2.0.1. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with network access via multiple protocols to compromise...

CVE-2018-2569

Vulnerability in the Java ME SDK component of Oracle Java Micro Edition subcomponent: Installer. The supported version that is affected is 8.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java ME SDK executes to compromise Java ME SDK...