Archive
9 May 2018
Vulnerabilities first published on this day (UTC), newest first.
105 results · Feed
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles…
-
Unscored —
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web…
-
Unscored —
A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity (UMCI)…
-
Unscored —
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Wi…
-
Unscored —
A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly han…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
Unscored —
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Wi…
-
Unscored —
Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a malicio…
-
Unscored —CVE-2018-10828 Public exploit
An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and wr…
-
Unscored —
download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration (without a log…
-
Unscored —
The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attacker…
-
Unscored —
Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompati…
-
High 7.5
389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters need…
-
Unscored —
Simple Taxonomy Revision module enables revisions for taxonomy terms for Drupal 8. The security team is marking this mo…
-
Medium 6.5
Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Note in Synology Note Station before 2.5.1-0844 allows rem…
-
Medium 6.5
Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote…
-
Unscored —
A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches run…
-
Critical 9.8
An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on T…
-
Unscored —
An issue was discovered in WildFly 10.1.2.Final. In the case of a default installation without a security realm referen…
-
Unscored —
An issue was discovered in HAProxy before 1.8.8. The incoming H2 frame length was checked against the max_frame_size se…
-
Unscored —CVE-2018-10830 Public exploit
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of ser…
-
Unscored —
Z-NOMP before 2018-04-05 has an incorrect Equihash solution verifier that allows attackers to spoof mining shares, as d…
-
Unscored —
LiteCart before 2.1.2 allows remote attackers to cause a denial of service (memory consumption) via URIs that do not ex…
-
Unscored —
Severalnines ClusterControl before 1.6.0-4699 allows XSS.
-
Unscored —
The Owned smart contract implementation for Aurora DAO (AURA), an Ethereum ERC20 token, allows attackers to acquire con…