CVE-2018-4928

Adobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

PT-2018-16643 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions Update 5 and earlier Adobe ColdFusion 11 versions Update 13 and earlier Description: The issue is related to an exploitable Unsafe XML External Entity Processing. Successful exploitation could lead to information...

PT-2018-16640 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions Update 5 and earlier Adobe ColdFusion 11 versions Update 13 and earlier Description: The issue is related to an Insecure Library Loading vulnerability. Successful exploitation could lead to local privilege escalation...

Oracle Retail Applications Retail Integration Bus Component Unauthorized Operation Vulnerability

Oracle Retail Applications is a set of retail application store solutions from Oracle Corporation. Retail Integration Bus is one of the components that provides real-time messaging for retailers' surveys. A security vulnerability exists in the RIB Kernal Apache Commons Collections subcomponent of...

CVE-2018-5517

On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs...

Netwide Assembler Buffer Overflow Vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A stack buffer out-of-bounds read vulnerability exists in the 'disasm' function of the disasm/disasm.c file in NASM version 2.13. A remote attacker can exploit this vulnerability to cause a denial of...

Apple macOS High Sierra Touch Bar Support Memory Corruption Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Touch Bar Support is one of the Touch Bar support components. A security vulnerability exists in the Touch Bar Support component in Apple macOS High Sierra versions prior to 10.13.3. An attacker can...

Apple macOS High Sierra Mail Man-in-the-Middle Attack Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple Inc. for Mac computers.Mail is one of the email components. A security vulnerability exists in the handling of S/MIME HTML email messages in the Mail component in Apple macOS High Sierra versions prior to 10.13.4. An...

Mautic cross-site scripting vulnerability (CNVD-2018-08601)

Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A cross-site scripting vulnerability exists in versions of Mautic prior to 2.13.0. A remote attacker can exploit this vulnerability to inject arbitrary...

Mautic CSV Injection Vulnerability

Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A CSV injection vulnerability exists in Mautic versions prior to 2.13.0. An attacker can exploit this vulnerability by sending a specially crafted reque...

Nagios XI Elevation of Privilege Vulnerability

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. An elevation of privilege vulnerability exists in Nagios XI version 5.2.x and version 5.4.x prior to 5.4.13...

Linux kernel denial of service vulnerability (CNVD-2018-07978)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'killsomethinginfo' function in the kernel/signal.c file in Linux kernel versions prior to 4.13. A local attacker can exploit th...

DEBIAN-CVE-2018-10087

The kernelwait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service by triggering an attempted use of the -INTMIN value...

Apple macOS High Sierra kext tools elevation of privilege vulnerability

Apple macOS High Sierra is a suite of Apple's proprietary operating systems for Mac computers. kext tools is a graphical interface tool for installing drivers. A security vulnerability exists in the kext tools component of Apple macOS High Sierra versions prior to 10.13, which is caused by a logi...

Apple macOS High Sierra Disk Images Arbitrary Application Launch Vulnerability

Apple macOS High Sierra is a proprietary operating system developed by Apple for Mac computers.Disk Images is one of the components of the Disk Image Format. A security vulnerability exists in the Disk Images component of Apple macOS High Sierra versions prior to 10.13.4. The vulnerability can be...

Apple iOS and macOS High Sierra iCloud Drive Competitive Conditions Vulnerability

Apple iOS and macOS High Sierra are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS High Sierra is a dedicated operating system developed for Mac computers. iCloud Drive is one of the cloud-based file backup components. iCloud Drive is a cloud-based fil...

CVE-2018-4136

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service out-of-bounds read via a crafted app...

CVE-2018-4092

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to bypass intended memory-read...

PT-2018-5605 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 11.2 macOS versions prior to 10.13.2 tvOS versions prior to 11.2 watchOS versions prior to 4.2 Description: The issue involves the Kernel component and allows attackers to execute arbitrary code in a privileged context o...

F5 BIG-IP PEM Denial of Service Vulnerability

F5 BIG-IP is an all-in-one network appliance that integrates network traffic management, application security management, load balancing, etc. PEM is one of the policy enforcement managers. A security vulnerability exists in F5 BIG-IP PEM versions 13.0.0 through 13.1.0.3 and 12.0.0 through...