DNS Global Blocklist DNS Redirection

The vulnerability of the DNS Global Blocklist mechanism in the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability allows a malicious actor to redirect traffic to a malicious destination remotely...

Windows Kernel Information Disclosure

The vulnerability of the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

Microsoft Windows Filter Manager Code Execution

The vulnerability of the Filter Manager component of the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code and gain control over the vulnerable system by deleting a specific file...

Windows Privilege Escalation

The vulnerability of the Windows operating system is related to access control errors. Exploiting this vulnerability allows an attacker to execute processes with elevated privileges through a specially created application...

Microsoft Graphics Component Disclosure

The vulnerability of the Microsoft Graphics component in the Microsoft Excel Viewer, Microsoft Office programs and Office 365, the Microsoft Office Compatibility Pack, the Microsoft PowerPoint Viewer, the Microsoft Office Word Viewer, and the Microsoft Windows operating system is related to objec...

PHP 5.6.x < 5.6.13 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.13. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free memory errors exist related to the unserialize function, which a remote attacker can exploit to execute arbitra...

PT-2019-1150

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: A remote code execution issue exists due to errors in handling objects in memory by the Chakra scripting engine in Microsoft Edge. This could allow an attacker to execute arbitrary...

Webgalamb Information Disclosure / XSS / CSRF / SQL Injection

Summary ------- Vendor: E.N.S. Zrt www.ens.hu Product: Webgalamb www.webgalamb.hu, www.facebook.com/webgalamb Webgalamb is a commercial email marketing software for managing subscription lists and sending out bulk emails. It is not SaaS but a PHP based web application that is typically hosted nex...

Fedora 29 : phpMyAdmin (2018-088802878a)

Upstream announcement : The phpMyAdmin team is pleased to announce the release of phpMyAdmin version 4.8.4. Among other bug fixes, this contains several important security fixes. The security fixes involve : - Local file inclusion https://www.phpmyadmin.net/security/PMASA-2018-6/, - XSRF/CSRF...

Fedora 28 : xen (2018-a7ac26523d)

x86: mishandling of debug exceptions XSA-260, CVE-2018-8897 x86 vHPET interrupt injection errors XSA-261 1576089 qemu may drive Xen into unbounded loop XSA-262 ---- update to xen-4.10.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora updat...

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors. An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr v0.9.5. Remote attackers could leverage this vulnerability to cause a denial-of-service v...

Microsoft PowerPoint Data Processing Code Execution

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft SharePoint Enterprise Server Privilege Escalation

The vulnerability of the Microsoft SharePoint Enterprise Server software is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through a specially crafted request...

Excel Spreadsheet Data Processing Arbitrary Code

The vulnerability of Excel spreadsheet editors is related to data processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Internet Explorer VBScript Code Execution

The vulnerability of the VBScript mechanism in Internet Explorer exists due to object handling errors in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a specially created web page...

Microsoft SharePoint Enterprise Server Privilege Escalation

The vulnerability of the Microsoft SharePoint Enterprise Server software is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through a specially crafted request...

Microsoft Edge Internet Explorer Code Execution

The vulnerability of Microsoft Edge and Internet Explorer 11 is related to errors in the memory object handling mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with user privileges using specially crafted web page content...

Cisco Discovery DoS

The vulnerability of the Cisco Discovery protocol in Cisco IOS and Cisco IOS XE operating systems is related to errors in memory management mechanisms. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially crafted packets...

Qualcomm Android Buffer Overflow

The vulnerability of the Qualcomm Android operating system is related to array indexing errors. Exploiting this vulnerability can allow attackers to cause buffer overflows in memory by using malicious XML data in the firehose directory...

Security update for go1.10 (important)

This update for go1.10 fixes the following issues: Security vulnerabilities fixed: - CVE-2018-16873 bsc1118897: cmd/go: remote command execution during "go get -u". - CVE-2018-16874 bsc1118898: cmd/go: directory traversal in "go get" via curly braces in import paths - CVE-2018-16875 bsc1118899:...