USN-3607-1: Screen Resolution Extra vulnerability

It was discovered that Screen Resolution Extra was using PolicyKit in an unsafe manner. A local attacker could potentially exploit this issue to bypass intended PolicyKit authorizations...

CVE-2018-8885

screenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit D-Bus API, which allows local users to bypass intended access restrictions by leveraging a race condition via a setuid or pkexec process that is mishandled in a PolicyKitService.checkpermission call...

CVE-2018-9004

In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorx86.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0...

CVE-2018-9006

In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorwin7x64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402004...

CVE-2018-8988

In Windows Master aka Windows Optimization Master 7.99.13.604, the driver file WoptiHWDetect.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002008...

CVE-2018-8903

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen...

Cross site scripting

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen...

CVE-2018-8903

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen...

CVE-2018-8903

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen...

CVE-2018-8903

CVE-2018-8903 affects Open-AuditIT/Open‑Audit Professional 2.1. The vulnerability is a stored XSS via the Name or Description fields on the Credentials page, stemming from insufficient input sanitization. Public references in the connected documents confirm exploitation guidance (stored XSS PoC) ...

March 22, 2018—KB4088889 (OS Build 14393.2155)

None None...

Apple Siri is the aeration privacy vulnerability: lock screen notifications directly read-vulnerability warning-the black bar safety net

! iOS 11, Apple introduced a new way to protect user privacy, the user through the iPhone's lock screen hide notification content, until the use of Touch ID or Face ID to unlock the device. But in fact, even if unable to unlock the phone, or is there a very simple way to read these hidden...

Denial of Service Vulnerability in 2345 Security BdPcSafe.sys Driver File

2345 Security Guard is a computer security management software that integrates computer checkup, Trojan horse detection and killing, garbage cleaning, repairing system vulnerabilities, system acceleration, software management and other functions under the banner of Shanghai 2,3,4,5 Network...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-07351)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345BdPcSafe.sys in 2345 Security Guard 3.6. The vulnerability arises due to an unvalidated input value from IOCtl 0x00222108. A local...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-07353)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345DumpBlock.sys in 2345 Security Guard 3.6. The vulnerability arises due to an unverified input value from IOCtl 0x00222044. A local...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-07356)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345Wrath.sys in 2345 Security Guard 3.6. The vulnerability arises due to an unverified input value from IOCtl 0x00222054. A local user...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-07354)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345Wrath.sys in 2345 Security Guard 3.6. The vulnerability arises due to an unvalidated input value from IOCtl 0x0022209c. A local user...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-07355)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345Wrath.sys in 2345 Security Guard 3.6. The vulnerability arises due to an unverified input value from IOCtl 0x00222098. A local user...

Investors concerned about smartphone addiction; Apple responds with new webpage

Hot on the heels of an open letter from investors urging Apple to do more to protect children from smartphone addiction, the tech giant has recently dedicated a page on their website to families. The "Families" page, which can be accessed at apple.com/families, contains tools parents can use to s...

CVE-2018-8737

Bookme Control Panel 2.0 Application is vulnerable to stored XSS within the Customers "Book Me" function. Within the Name and Note aka custName and custNote sections of the Customers screen, the application does not sanitize user-supplied input and renders injected JavaScript code to the user's...