Denial Of Service (DoS)

xorg-x11-server is vulnerable to denial of service DoS attacks. The vulnerability exists as X.Org X Window System aka X11 and X X11R5 and X.Org Server aka xserver and xorg-server before 1.16.3, when using SUN-DES-1 Secure RPC authentication credentials, does not check the return value of a malloc...

January 15, 2019—KB4480976 (OS Build 17134.556)

None None...

January 15, 2019—KB4480969 (Preview of Monthly Rollup)

None None...

January 15, 2019—KB4480967 (OS Build 16299.936)

None None...

CVE-2018-6096

A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

Design/Logic Flaw

A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

UBUNTU-CVE-2018-6096

A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

CVE-2018-16080

A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2018-6096

CVE-2018-6096 is a Fullscreen UI spoof vulnerability in Google Chrome/Chromium where a JavaScript window could overlap the fullscreen notification, enabling a remote attacker to obscure the fullscreen warning via a crafted HTML page. Public details confirm the issue affects Chromium/Chrome prior ...

Session becomes unresponsive and application window is totally black after starting published AutoDesk Revit

Once user launches the published AutoDesk Revit, the previously launched application windows will hang and become totally black. All applications are locked in taskbar...

Fedora 29 : electron-cash (2018-7d6590724e)

Updated to 3.3.4. Security fix by upstream : Anti-Phishing protection.. Server-provided text will not appear in user-facing GUI windows anymore. Server error messages are instead parsed and mapped to predefined strings. Note that Tenable Network Security has extracted the preceding description...

Fly-wm File Manager Unauthorized Access

The vulnerability of the Fly-wm file manager in the Astra Linux operating system is related to an error that causes buffer overflows and unauthorized access to a locked user’s session when entering a specially crafted, large-length password. Additionally, there are security issues with the sumac...

PT-2018-3735

Name of the Vulnerable Software and Affected Versions X Window System affected versions not specified ALT Linux affected versions not specified ROSA Linux affected versions not specified МСВСфера affected versions not specified Description The issue is related to the lack of validation when one...

PT-2018-3734

Name of the Vulnerable Software and Affected Versions X Window System affected versions not specified Description The issue is related to inadequate access control when transmitting window events initiated by graphical applications with low privileges to windows of applications with high...

PT-2018-2756

Name of the Vulnerable Software and Affected Versions Этлас affected versions not specified Description The issue is related to a lack of protection in the SQL query structure. An attacker can exploit this by entering a specially crafted SQL query in the "Название процесса" field of the process...

New Facebook Bug Exposed 6.8 Million Users Photos to Third-Party Apps

Facebook's latest screw-up — a programming bug in Facebook website accidentally gave 1,500 third-party apps access to the unposted Facebook photos of as many as 6.8 million users. Facebook today quietly announced that it discovered a new API bug in its photo-sharing system that let 876 developers...

CVE-2018-19439

XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 but was fixed in later versions including 5.4. helpwindow.jsp has reflected XSS via all parameters, as demonstrated by the sgdadmin/faces/comsunwebui/help/helpwindow.jsp windowTitle parameter...

Failed to call RPC function 'Vss.FinishSnapshot'

Article Applicability The first part of the error document in this article, Failed to call RPC function , is common and occurs anytime an RPC function cannot be invoked. This article is specifically related to an issue where the VSS snapshot closes prematurely because the KeepSnapshot RPC calls...

KB4471319: Windows Server 2008 December 2018 Security Update

The remote Windows host is missing security update 4471319 or cumulative update 4471325. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific...

Microsoft Lync For Mac 2011 Injection

Exploit Title: Microsoft Lync for Mac 2011 Injection Forced Browsing/Download Author: @nyxgeek - TrustedSec Date: 2018-03-20 Vendor Homepage: microsoft.com Software Link: https://www.microsoft.com/en-us/download/details.aspx?id=36517 CVE: CVE-2018-8474 Version: Lync:Mac 2011 14.4.3, likely earlie...