CVE-2018-6236

A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222813 by the tmusa driver. An attacker must first obtain the...

Security update for icu (moderate)

icu was updated to fix two security issues. These security issues were fixed: - CVE-2014-8147: The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU used an integer data type that is...

Fortinet FortiOS Local Elevation of Privilege Vulnerability (CNVD-2018-10482)

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, anti-virus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. A security...

[ASA-201805-22] wireshark-gtk: multiple issues

Arch Linux Security Advisory ASA-201805-22 ========================================== Severity: Critical Date : 2018-05-25 CVE-ID : CVE-2018-11354 CVE-2018-11355 CVE-2018-11356 CVE-2018-11357 CVE-2018-11358 CVE-2018-11359 CVE-2018-11360 CVE-2018-11361 CVE-2018-11362 Package : wireshark-gtk Type :...

CVE-2018-5680

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...

CVE-2018-5675

CVE-2018-5675 affects Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1. The flaw occurs in the processing of PDF files with embedded u3d images, where crafted data can trigger an out-of-bounds write in a buffer, allowing remote code execution under the current process. An attacker must ent...

Ubuntu: Security Advisory (USN-3658-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Directory traversal

A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the FileDrop servlet. Authentication is required to exploit this vulnerability...

Microsoft Windows: CD and DVD: Deny execute access

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincddvddenyexecuteaccess.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for CD and DVD: Deny execute access Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: Removable Disks: Deny execute access

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windisksdenyexecuteaccess.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Removable Disks: Deny execute access Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net Thi...

CVE-2018-10092

The admin panel in Dolibarr before 7.0.2 might allow remote attackers to execute arbitrary commands by leveraging support for updating the antivirus command and parameters used to scan file uploads...

CVE-2017-11240

Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2018-11128

The ObjReader::ReadObj function in ObjReader.cpp in vincent0629 PDFParser allows remote attackers to cause a denial of service stack-based buffer overflow or possibly execute arbitrary code via a crafted pdf file...

Stack overflow

The ObjReader::ReadObj function in ObjReader.cpp in vincent0629 PDFParser allows remote attackers to cause a denial of service stack-based buffer overflow or possibly execute arbitrary code via a crafted pdf file...

CVE-2018-11128

The ObjReader::ReadObj function in ObjReader.cpp in vincent0629 PDFParser allows remote attackers to cause a denial of service stack-based buffer overflow or possibly execute arbitrary code via a crafted pdf file...

CVE-2018-11128

The CVE-2018-11128 entry describes a buffer overflow in Pdfparser’s ObjReader::ReadObj() within vincent0629 PDFParser, exploitable by processing a crafted PDF. The vulnerability can lead to denial of service or arbitrary code execution on affected systems. CVSS2 (AV:N/AC:M/Au:N/C:P/I:P/A:P) sugge...

CVE-2018-9976

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10479

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...