Apple macOS High Sierra NVIDIA Graphics Drivers Memory Read Limit Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.NVIDIA Graphics Drivers is one of the graphics driver components. A security vulnerability exists in NVIDIA Graphics Drivers in Apple macOS High Sierra versions prior to 10.13.4. An attacker can exploit...

Kernel Security Bypass Vulnerability in Multiple Apple Products (CNVD-2018-09805)

Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. macOS High Sierra is a specialized operating system developed for Mac computers. tvOS is a smart TV operating system. watchOS is a smart watch operating system...

Apple macOS High Sierra Kernel Security Bypass Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A security vulnerability exists in the Kernel component in Apple macOS High Sierra versions prior to 10.13.2. The vulnerability can be exploited by an attacker wi...

CVE-2018-0267

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, local attacker to view sensitive data that should be restricted. This could include LDAP credentials. The vulnerability is due to insufficient protection of database tables over the web...

Microsoft Office: Always require users to connect to verify permission

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013connecttoverifypermission.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Always require users to connect to verify permission Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

SAP Disclosure Management Unauthorized Access Vulnerability

SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. A security vulnerability exists in SAP Disclosure Management version 10.1. An attacker...

CVE-2018-2403

Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted. It is possible for an authorized user to get SAP Disclosure Management to point a specific chapter type to a chapter the user has not been given access to...

Type confusion

Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted. It is possible for an authorized user to get SAP Disclosure Management to point a specific chapter type to a chapter the user has not been given access to...

CVE-2018-2403

SAP Disclosure Management 10.1 contains an access-control weakness that allows an authorized user to point a specific chapter type to a chapter the user should not access, effectively exposing restricted information. The vulnerability is documented across multiple sources (NVD CVE-2018-2403, CNVD...

UCOPIA Wireless Appliance Elevation of Privilege Vulnerability

The UCOPIA Wireless Appliance is a wireless device from the French company UCOPIA. A security vulnerability exists in the restricted administration shell in the UCOPIA Wireless Appliance versions prior to 4.4.20, 5.0.x versions prior to 5.0.19, and 5.1.x versions prior to 5.1.11, which stems from...

Microsoft Wireless Keyboard CVE-2018-8117 Local Security Bypass Vulnerability

Description Microsoft Wireless Keyboard is prone to a local security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Wireless Keyboard 850...

Microsoft Windows Kernel CVE-2018-0973 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

New Relic: [NR Synthetics] Restricted User can add/modify alert conditions on monitors without any synthetics privileges

There is a privilege escalation bug that allows a user with restricted privileges to make changes to alerts on Synthetics monitors, without the proper permissions to do so in fact, they can make changes with NO synthetics permissions. In order to reproduce this it's easiest if you have two accoun...

Amazon Linux AMI : nvidia (ALAS-2018-991)

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a NULL pointer dereference may lead to denial of service or possible escalation of privileges. CVE-2018-6247 NVIDIA Windows GPU Display Driver contains a vulnerability ...

CVE-2018-6252

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape where the software allows an actor access to restricted functionality that is unnecessary to production usage, and which may result in denial of service...

SAP Business Client Information Disclosure Vulnerability

SAP Business Client is a user management interface from SAP Germany. The product provides management interfaces for different SAP business applications for managing SAP products. A security vulnerability exists in SAP Business Client version 6.5. An attacker could exploit the vulnerability to...

Dell Storage Manager EMConfigMigration Service Directory Traversal Vulnerability

Dell Storage Manager is an application for managing and monitoring multiple Storage Center, PS Series portfolio FluidFS from Dell USA. A directory traversal vulnerability exists in the EMConfigMigration service in Dell Storage Manager versions prior to 16.3.20. A remote attacker could exploit the...

CVE-2017-17743

Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices before 4.4.20, 5.0.x before 5.0.19, and 5.1.x before 5.1.11 allows authenticated remote attackers to escape the shell and escalate their privileges by uploading a .bashrc file containing th...

How to attach files in Secure Mail keeping the policy restricted

In Secure Mail/WorxMail versions 10.3.5 and later, Android users can't attach images directly from the Gallery app when the Inbound document exchange Open-in policy is set to Restricted. If you want to keep this policy set to Restricted but still allow users to add photos from the Gallery, follow...

SAP Business Process Automation Information Disclosure Vulnerability

SAP Business Process Automation BPA By Redwood is a suite of business process automation solutions from SAP, Germany. A security vulnerability exists in SAP BPA By Redwood versions 9.00 and 9.10. An attacker could exploit the vulnerability to access restricted information...