Archive
13 September 2018
Vulnerabilities first published on this day (UTC), newest first.
12 results · Clear filters · Feed
-
Unscored —CVE-2018-16987 Public exploit
Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstr…
-
Unscored —
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, ak…
-
High 7.8
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…
KEV Mar 28, 2022 -
Unscored —
A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted mess…
-
Unscored —CVE-2018-8449 Public exploit
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security …
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCon…
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCon…
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privi…
-
High 7.5
Denial of service in ASP.NET Core
A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.
-
Unscored —CVE-2018-8410 Public exploit
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memor…