1808 matches found
Python Software Foundation CPython on Windows Buffer Overflow Vulnerability
Python Software Foundation CPython on Windows is the Python Software Foundation's suite of Windows-based, open-source, object-oriented programming languages that are extensible, support modules and packages, and support multiple platforms.CPython also known as Python is a Python interpreter...
IBM Client Application Access elevation of privilege vulnerability (CNVD-2018-03868)
IBM Client Application Access and IBM Notes for Windows are both products of IBM Corporation.IBM Notes for Windows is a set of collaborative office software based on the Windows platform.IBM Client Application Access is a set of tools for accessing local applications based on the Windows platform...
Microsoft Internet Explorer 11 - Js::RegexHelper::RegexReplace Use-After-Free Exploit
Exploit for windows platform in category dos / poc...
Privilege escalation
The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service launcher, or CouchDB...
Google Chrome for Mac, Windows and Linux Security Bypass Vulnerability (CNVD-2018-03797)
Google Chrome for Mac, Windows and Linux is a web browser developed by Google, Inc. for the Mac, Windows and Linux platforms. A security vulnerability exists in versions of Google Chrome prior to 64.0.3282.119 for Windows, Mac and Linux platforms. A remote attacker can exploit this vulnerability ...
Google Chrome for Mac, Windows and Linux Blink Security Bypass Vulnerability
Google Chrome for Mac, Windows and Linux is a web browser for Mac, Windows and Linux platforms developed by Google Inc. Blink is one of a set of browser layout engines rendering engines co-developed by Google Inc. and Norway's Opera Software. Co-developed by the United States Google Google and...
Google Chrome for Mac, Windows and Linux New Tab Page Information Disclosure Vulnerability
Google Chrome for Mac, Windows and Linux is a web browser developed by Google for the Mac, Windows and Linux platforms.New Tab Page is one of the modules used to create new tab pages. A security vulnerability exists in New Tab Page in versions of Google Chrome prior to 64.0.3282.119 for Windows,...
Google Chrome for Mac, Windows and Linux Navigation URL Spoofing Vulnerability
Google Chrome for Mac, Windows and Linux is a web browser developed by Google for the Mac, Windows and Linux platforms.Navigation is one of the browser navigation modules. A security vulnerability exists in Navigation in versions of Google Chrome prior to 64.0.3282.119 on Windows, Mac and Linux...
HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability (CNVD-2018-03956)
HPE Intelligent Management Center iMC PLAT for Windows is a suite of intelligent management center solutions for networks based on the Windows platform from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services an...
UBUNTU-CVE-2018-4088
An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is...
CVE-2018-2575
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, and 12.2.0.1. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with network access via multiple protocols to compromise...
CVE-2018-2569
Vulnerability in the Java ME SDK component of Oracle Java Micro Edition subcomponent: Installer. The supported version that is affected is 8.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java ME SDK executes to compromise Java ME SDK...
CVE-2018-2569
Vulnerability in the Java ME SDK component of Oracle Java Micro Edition subcomponent: Installer. The supported version that is affected is 8.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java ME SDK executes to compromise Java ME SDK...
Design/Logic Flaw
Vulnerability in the Java ME SDK component of Oracle Java Micro Edition subcomponent: Installer. The supported version that is affected is 8.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java ME SDK executes to compromise Java ME SDK...
Design/Logic Flaw
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, and 12.2.0.1. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with network access via multiple protocols to compromise...
CVE-2018-2569
CVE-2018-2569 refers to a vulnerability in the Installer subcomponent of Oracle Java ME SDK (Windows, affected version 8.3). The issue is described as an easily exploitable flaw that allows an unauthenticated attacker with logon to the hosting infrastructure to compromise the Java ME SDK, with su...
CVE-2018-2575
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, and 12.2.0.1. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with network access via multiple protocols to compromise...
CVE-2018-2569
Vulnerability in the Java ME SDK component of Oracle Java Micro Edition subcomponent: Installer. The supported version that is affected is 8.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java ME SDK executes to compromise Java ME SDK...
CVE-2018-2575
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, and 12.2.0.1. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with network access via multiple protocols to compromise...