CVE-2018-0912

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909,...

CVE-2018-0921

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911, CVE-2018-0912,...

CVE-2018-0868

Windows Installer in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how input i...

CVE-2018-0815

The Windows Graphics Device Interface GDI in Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows GDI Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0816, a...

CVE-2018-0944

Technical details for CVE-2018-0944 are not publicly available in the provided connected documents. Monitor for updates; based on current inputs, no concrete affected products, versions, exploit info, or remediation are disclosed here.

CVE-2018-0912

No technical details for CVE-2018-0912 are present in the provided documents. Monitor for updates as more information becomes available.

CVE-2018-0917

Technical details about CVE-2018-0917 are not publicly provided in the supplied documents; no specifics on affected products, root cause, impact, or remediations are described beyond the initial entry. Monitor for updates.

CVE-2018-0921

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911, CVE-2018-0912,...

PT-2018-9074

Name of the Vulnerable Software and Affected Versions: ASP.NET Core versions 1.0 through 2.0 Description: The issue is related to how ASP.NET web applications handle web requests, allowing an elevation of privilege. Recommendations: For ASP.NET Core versions 1.0 through 2.0, at the moment, there ...

PT-2018-9068

Name of the Vulnerable Software and Affected Versions: ASP.NET Core versions 1.0 through 2.0 Description: The issue is related to how web applications created from templates validate web requests, allowing an elevation of privilege. Recommendations: For ASP.NET Core versions 1.0 through 2.0, upda...

PT-2018-9145

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: An issue exists where Microsoft SharePoint Server fails to properly sanitize a specially crafted web request, allowing for potential elevation of privilege. This could...

PT-2018-9120

Name of the Vulnerable Software and Affected Versions: Windows 10 versions 1607 through 1709 Windows Server 2016 Windows Server, version 1709 Description: The issue is related to how the virtual registry is managed in the Desktop Bridge, allowing an elevation of privilege. This could potentially...

PT-2018-9162

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server 2010 version 14.3.452.0 Service Pack 3 Update Rollup 20 Microsoft Exchange Server 2013 versions 15.0.1497.2 through 15.0.1514.2 Microsoft Exchange Server 2016 versions 15.1.1034.26 through 15.1.1066.14 Description: T...

PT-2018-9164

Name of the Vulnerable Software and Affected Versions: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 Description: An elevation of...

PT-2018-9144

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: An issue exists where Microsoft SharePoint Server fails to properly sanitize a specially crafted web request, allowing for potential elevation of privilege. This could...

PT-2018-1161

Name of the Vulnerable Software and Affected Versions Windows 10 versions 1607 through 1709 Windows Server 2016 Windows Server, version 1709 Description The issue is related to the management of file paths in the Desktop Bridge Virtual File System VFS, which can lead to an elevation of privilege...

Security Updates for Exchange (March 2018)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the way that Microsoft Exchange Server handles URL redirects. If an impacted user is using Microsoft...

PT-2018-9166

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue arises from Microsoft SharePoint Server's failure to properly verify tenant permissions, leading to an elevation of privilege. This could allow an attacker to...

CVE-2018-6183

BitDefender Total Security 2018 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of an "insecurely created named pipe". Ensures full access to Everyone users group...

Debian DLA-1304-1 : zsh security update

It was discovered that there were multiple vulnerabilities in the 'zsh' shell : - CVE-2014-10070: Fix a privilege-elevation issue if the environment has not been properly sanitized. - CVE-2014-10071: Prevent a buffer overflow for very long file - descriptors in the '& fd' syntax. - CVE-2014-10072...