News aggregator

CVE-2018-3696

National Vulnerability Database - Wed, 11/14/2018 - 09:29
Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access.
Categories: Security News

CVE-2018-3697

National Vulnerability Database - Wed, 11/14/2018 - 09:29
Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access.
Categories: Security News

CVE-2018-3698

National Vulnerability Database - Wed, 11/14/2018 - 09:29
Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access.
Categories: Security News

CVE-2018-3699

National Vulnerability Database - Wed, 11/14/2018 - 09:29
Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access.
Categories: Security News

CVE-2018-19271

National Vulnerability Database - Wed, 11/14/2018 - 06:29
Centreon 3.4.x allows SQL Injection via the main.php searchH parameter.
Categories: Security News

CVE-2018-19277

National Vulnerability Database - Wed, 11/14/2018 - 06:29
securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file
Categories: Security News

CVE-2018-19186

National Vulnerability Database - Wed, 11/14/2018 - 04:29
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter.
Categories: Security News

CVE-2018-19187

National Vulnerability Database - Wed, 11/14/2018 - 04:29
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement.
Categories: Security News

CVE-2018-19188

National Vulnerability Database - Wed, 11/14/2018 - 04:29
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fort_id parameter.
Categories: Security News

CVE-2018-19189

National Vulnerability Database - Wed, 11/14/2018 - 04:29
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in an error.php echo statement.
Categories: Security News

CVE-2018-19190

National Vulnerability Database - Wed, 11/14/2018 - 04:29
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php error_msg parameter.
Categories: Security News

Vuln: Asterisk Open Source Remote Buffer Overflow Vulnerability

SecurityFocus Vulnerabilities - Wed, 11/14/2018 - 00:00
Asterisk Open Source Remote Buffer Overflow Vulnerability
Categories: Security News

Vuln: OpenSSL CVE-2018-5407 Side Channel Attack Information Disclosure Vulnerability

SecurityFocus Vulnerabilities - Wed, 11/14/2018 - 00:00
OpenSSL CVE-2018-5407 Side Channel Attack Information Disclosure Vulnerability
Categories: Security News

Vuln: Siemens SIMATIC Panels Multiple Security Vulnerabilities

SecurityFocus Vulnerabilities - Wed, 11/14/2018 - 00:00
Siemens SIMATIC Panels Multiple Security Vulnerabilities
Categories: Security News

Vuln: Dell EMC RecoverPoint Information Disclosure and Denial of Service Vulnerabilities

SecurityFocus Vulnerabilities - Wed, 11/14/2018 - 00:00
Dell EMC RecoverPoint Information Disclosure and Denial of Service Vulnerabilities
Categories: Security News

CVE-2018-8584

National Vulnerability Database - Tue, 11/13/2018 - 20:29
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
Categories: Security News

CVE-2018-8588

National Vulnerability Database - Tue, 11/13/2018 - 20:29
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-2018-8543, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557.
Categories: Security News

CVE-2018-8589

National Vulnerability Database - Tue, 11/13/2018 - 20:29
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
Categories: Security News

CVE-2018-8592

National Vulnerability Database - Tue, 11/13/2018 - 20:29
An elevation of privilege vulnerability exists in Windows 10 version 1809 when installed from physical media (USB, DVD, etc, aka "Windows Elevation Of Privilege Vulnerability." This affects Windows 10, Windows Server 2019.
Categories: Security News

CVE-2018-8600

National Vulnerability Database - Tue, 11/13/2018 - 20:29
A Cross-site Scripting (XSS) vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input, aka "Azure App Service Cross-site Scripting Vulnerability." This affects Azure App.
Categories: Security News

Pages