Archive
11 July 2018
Vulnerabilities first published on this day (UTC), newest first.
98 results · Feed
-
Unscored —CVE-2018-8007 EPSS 12%
Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of ad…
-
Medium 4.4
It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as …
-
High 7.0
A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious te…
-
Unscored —
A reflected XSS issue was discovered in the registration form in Rocket.Chat before 0.66. When one creates an account, …
-
Unscored —
An XSS issue was discovered in packages/rocketchat-mentions/Mentions.js in Rocket.Chat before 0.65. The real name of a …
-
Unscored —CVE-2018-0949 EPSS 12%
A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving U…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
Unscored —
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft…
-
Unscored —CVE-2018-8311 EPSS 17%
A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly saniti…
-
Unscored —
A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "Wor…
-
Unscored —CVE-2018-8324 EPSS 10%
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft…
-
Unscored —
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".…
-
Unscored —CVE-2018-8275 EPSS 21%
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft …
-
Unscored —CVE-2018-8206 EPSS 12%
A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka …
-
Unscored —CVE-2018-8262 EPSS 21%
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft …
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…
-
Unscored —
A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when renderi…
-
High 7.5CVE-2018-8280 EPSS 21%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle …
-
Unscored —
A remote code execution vulnerability exists in Visual Studio software when the software does not check the source mark…
-
Unscored —
An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape, aka "Windows Elev…
-
Unscored —CVE-2018-8281 EPSS 21%
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle ob…
-
Critical 9.8
Sensitive Data Exposure in msrcrypto
A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScr…
-
Unscored —
A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links sha…
-
Unscored —CVE-2018-8296 EPSS 17%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
-
Unscored —
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code in…
-
Unscored —CVE-2018-8327 EPSS 23%
A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code…
-
Unscored —CVE-2018-8300 EPSS 14%
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…
-
High 7.5CVE-2018-8287 EPSS 16%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explo…
-
Unscored —CVE-2018-8289 EPSS 10%
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft…
-
Medium 5.5
Improper Certificate Validation in Microsoft .NET Framework components
A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Micros…
-
Unscored —
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privile…
-
High 7.5CVE-2018-8283 EPSS 15%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8287, C…
-
High 7.5CVE-2018-8171 EPSS 11%
Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated
A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MV…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —CVE-2018-8312 EPSS 21%
A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Mic…
-
Unscored —
A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembl…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
High 7.5CVE-2018-8294 EPSS 21%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —CVE-2018-8297 EPSS 10%
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft…