PT-2018-2482 · Mysql Server +4 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.23 and prior MySQL Server versions 8.0.12 and prior Description: The issue is related to errors in resource release in the InnoDB component of the MySQL Server system. Exploitation of this issue can allow a remote...

PT-2018-2144 · Mysql Server +1 · Mysql Connectors +1

Name of the Vulnerable Software and Affected Versions: MySQL Connectors versions 8.0.12 and prior Description: The issue is related to insufficient access control in the Connector/J subcomponent of the MySQL Connectors system. It allows a remote attacker to gain unauthorized access to protected...

UBUNTU-CVE-2018-3171

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Partition. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

UBUNTU-CVE-2018-3187

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

Linux kernel KVM denial of service vulnerability (CNVD-2018-20467)

Linux kernel is the kernel used by the operating system Linux released by the Linux Foundation in the U.S. KVM is one of the kernel-based virtual machines. A security vulnerability exists in the t.c file of the KVM in versions of Linux kernel prior to 4.18.12 on the arm64 platform, which arises...

ALPINE-CVE-2018-1000808

Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS 12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploitable via Depends...

PT-2018-9532 · Openssl +2 · Pyopenssl +2

Name of the Vulnerable Software and Affected Versions: pyopenssl versions prior to 17.5.0 Description: The issue is related to a memory management problem in the PKCS 12 Store of pyopenssl, which can lead to a denial of service if memory runs low or is exhausted. This can be exploited by initiati...

UBUNTU-CVE-2018-1000808

Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS 12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploitable via Depends...

CVE-2018-14808

Emerson AMS Device Manager v12.0 to v13.5. Non-administrative users are able to change executable and library files on the affected products...

Emerson AMS Device Manager Code Execution Vulnerability

Emerson Electric AMS Device Manager is a fixed asset management software from Emerson Electric. The software provides predictive diagnostics, device configuration management, and other features. A code execution vulnerability exists in Emerson Electric AMS Device Manager versions 12.0 through 13....

UBUNTU-CVE-2018-4197

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

UBUNTU-CVE-2018-4361

A memory consumption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

UBUNTU-CVE-2018-4311

The issue was addressed by removing origin information. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

UBUNTU-CVE-2018-4323

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

UBUNTU-CVE-2018-4314

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

UBUNTU-CVE-2018-4316

A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

Pangu Hackers have Jailbroken iOS 12 on Apple's New iPhone XS

Bad news for Apple. The Chinese hacking team Pangu is back and has once again surprised everyone with a jailbreak for iOS 12 running on the brand-new iPhone XS. Well, that was really fast. Pangu jailbreak team has been quiet for a while, since it last released the untethered jailbreak tool for iO...

Apple macOS Mojave Information Disclosure Vulnerability (CNVD-2018-20090)

Apple iOS, tvOS, and macOS Mojave are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is an operating system for smart TVs; and macOS Mojave is a specialized operating system for Mac computers.Auto Unlock is one of the Auto Unlock components. A security...

Apple macOS Mojave and iOS Crash Reporter Information Disclosure Vulnerability

Apple macOS Mojave and iOS are both products of Apple Inc. Apple macOS Mojave is a dedicated operating system developed for Mac computers. iOS is an operating system developed for mobile devices. Crash Reporter is a component that debugs programs and records all test information. A security...

CVE-2018-15962

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a directory listing vulnerability. Successful exploitation could lead to information disclosure...