DEBIAN-CVE-2018-4208

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks...

DEBIAN-CVE-2018-4207

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks...

CVE-2016-4642

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly reported HTTP proxies received credentials securely. This issue was addressed through improved warnings...

CVE-2019-0583

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows...

CVE-2019-0555

An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft XmlDocument Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows...

Server Security for the Modern IT Ecosystem

A Changing Landscape In recent years we’ve seen a fundamental shift in the IT landscape, accelerated towards cloud and containerized infrastructures. According to Forbes, by 2020 it is predicted that 83 percent of enterprise workloads will be in the cloud. Moving beyond the cloud, software...

Command injection

The server in Core FTP 2.0 build 653 on 32-bit platforms allows remote attackers to cause a denial of service daemon crash via a crafted XRMD command...

CVE-2018-20658

The server in Core FTP 2.0 build 653 on 32-bit platforms allows remote attackers to cause a denial of service daemon crash via a crafted XRMD command...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Key Lifecycle Manager (SKLM) (CVE-2018-1643)

Summary IBM WebSphere Application Server is shipped as a component of IBM Security Key Lifecycle Manager SKLM. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulleti...

ESPCMS suffers from a code execution vulnerability (CNVD-2018-26936)

ESPCMS is developed by PHP+MySQL and is able to run major mainstream cloud platforms. ESPCMS has a code execution vulnerability that can be exploited by attackers to gain control of the web server...

F5 Networks BIG-IP : Intel SPI Flash vulnerability (K19855851)

Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service. CVE-2017-5703 Impact BIG-IP A local attacker can alter the behavior of the SPI Flash memory, potentially leading to a...

McAfee Agent Local Denial of Service Vulnerability

McAfee Agent MA is a set of client components from McAfee that provides secure communication between ePolicy Orchestrator antivirus management platform and managed products. agent is one of the agent programs. A security vulnerability exists in agent in McAfee MA versions 5.0.0 through 5.0.6,...

ESPCMS has an xss vulnerability

ESPCMS is developed by PHP+MySQL and is able to run major mainstream cloud platforms. ESPCMS has an xss vulnerability that can be exploited by attackers to obtain the administrator COOKIE...

CVE-2018-20185

In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...

Heap overflow

In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...

CVE-2018-20185

In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...

UBUNTU-CVE-2018-4437

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9...

Supported Hypervisors for Citrix Virtual Apps and Desktops (MCS) and Citrix Provisioning (PVS)

Citrix is committed to ensuring that our products function with the latest partner hypervisor offering, such as Microsoft Azure, AWS, Google Cloud Platform, Nutanix Cloud Clusters on AWS, Nutanix Cloud Clusters on Azure, VMware Cloud on AWS, Azure VMware Solution, Google Cloud VMware Engine,...

WordPress CodeCanyon-5293356-Ajax-Store-Locator-Wordpress 1.2.0 Disclosure

Exploit Title : WordPress CodeCanyon-5293356-Ajax-Store-Locator-Wordpress Plugins 1.2.0 Multiple Vulnerabilities Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 10/12/2018 Vendor Homepage : wordpress.org codecanyon.net/item/ajax-store-locator-v-20/4106209?srank=1 ...

Design/Logic Flaw

An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes...