CVEs

129,887 total · page 2291 of 2,598

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2018-8401	Microsoft Windows Server 2016	Hig	0.51	7.8	0.02		Aug 15, 2018	An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE…
CVE-2018-8400	Microsoft Windows 10 1909	Hig	0.51	7.8	0.02		Aug 15, 2018	An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from…
CVE-2018-8399	Microsoft Windows 10 Servers	Hig	0.46	7.0	0.01		Aug 15, 2018	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8404.
CVE-2018-8397	Microsoft Windows Server 2008	Hig	0.63	8.8	0.68		Aug 15, 2018	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka "GDI+ Remote Code Execution Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
CVE-2018-8390	Microsoft Edge	Hig	0.43	7.5	0.15		Aug 15, 2018	A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355,…
CVE-2018-8389	Microsoft Internet Explorer	Hig	0.51	7.5	0.30		Aug 15, 2018	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is…
CVE-2018-8387	Microsoft Edge	Hig	0.50	7.5	0.10		Aug 15, 2018	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8377.
CVE-2018-8385	Microsoft Internet Explorer	Hig	0.43	7.5	0.15		Aug 15, 2018	A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, Internet…
CVE-2018-8384	Microsoft Chakracore	Hig	0.50	7.5	0.64		Aug 15, 2018	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8266, CVE-2018-8380,…
CVE-2018-8381	Microsoft Edge	Hig	0.43	7.5	0.15		Aug 15, 2018	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8266,…
CVE-2018-8380	Microsoft Edge	Hig	0.43	7.5	0.15		Aug 15, 2018	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8266,…
CVE-2018-8379	Microsoft Excel	Hig	0.52	7.8	0.18		Aug 15, 2018	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel. This CVE ID is unique from CVE-2018-8375.
CVE-2018-8377	Microsoft Edge	Hig	0.50	7.5	0.10		Aug 15, 2018	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8387.
CVE-2018-8376	Microsoft Powerpoint	Hig	0.59	8.8	0.19		Aug 15, 2018	A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft PowerPoint.
CVE-2018-8375	Microsoft Office	Hig	0.52	7.8	0.17		Aug 15, 2018	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel. This CVE ID…
CVE-2018-8373	Microsoft Internet Explorer	Hig	0.66	7.5	0.62	KEV	Aug 15, 2018	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is…
CVE-2018-8372	Microsoft Internet Explorer	Hig	0.44	7.5	0.26		Aug 15, 2018	A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from…
CVE-2018-8371	Microsoft Internet Explorer	Hig	0.50	7.5	0.15		Aug 15, 2018	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is…
CVE-2018-8360	Microsoft .net Framework	Hig	0.50	7.5	0.10		Aug 15, 2018	An information disclosure vulnerability exists in Microsoft .NET Framework that could allow an attacker to access information in multi-tenant environments, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft…
CVE-2018-8359	Microsoft Chakracore	Hig	0.43	7.5	0.15		Aug 15, 2018	A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8371,…
CVE-2018-8357	Microsoft Internet Explorer	Hig	0.55	8.3	0.08		Aug 15, 2018	An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser Elevation of Privilege Vulnerability." This affects Internet Explorer 11, Microsoft Edge.
CVE-2018-8355	Microsoft Internet Explorer	Hig	0.50	7.5	0.68		Aug 15, 2018	A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from…
CVE-2018-8353	Microsoft Internet Explorer	Hig	0.57	7.5	0.67		Aug 15, 2018	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is…
CVE-2018-8350	Microsoft Windows Server 2003	Hig	0.59	8.8	0.20		Aug 15, 2018	A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.
CVE-2018-8349	Microsoft Windows Server 2008	Hig	0.59	8.8	0.23		Aug 15, 2018	A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server…
CVE-2018-8347	Microsoft Windows Server 2016	Hig	0.51	7.8	0.01		Aug 15, 2018	An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2018-8346	Microsoft Windows Server 2008	Hig	0.59	8.8	0.20		Aug 15, 2018	A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code Execution Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from…
CVE-2018-8345	Microsoft Windows Server 2008	Hig	0.50	7.5	0.15		Aug 15, 2018	A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows…
CVE-2018-8344	Microsoft Windows Server 2008	Hig	0.59	8.8	0.23		Aug 15, 2018	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,…
CVE-2018-8343	Microsoft Windows Server 2008	Hig	0.51	7.8	0.01		Aug 15, 2018	An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server…
CVE-2018-8342	Microsoft Windows Server 2008	Hig	0.51	7.8	0.01		Aug 15, 2018	An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server…
CVE-2018-8339	Microsoft Windows Server 2008	Hig	0.46	7.0	0.01		Aug 15, 2018	An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior, aka "Windows Installer Elevation of Privilege Vulnerability." This affects Windows 7, Windows…
CVE-2018-8316	Microsoft Internet Explorer	Hig	0.50	7.5	0.14		Aug 15, 2018	A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading executable libraries, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 11, Internet Explorer 10.
CVE-2018-8266	Microsoft Edge	Hig	0.44	7.5	0.29		Aug 15, 2018	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8380,…
CVE-2018-15172	TP-Link Tl Wr840n Firmware	Hig	0.52	7.5	0.08		Aug 15, 2018	TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.
CVE-2018-15156	Openemr Openemr	Hig	0.51	8.8	0.10		Aug 15, 2018	OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/fax/faxq.php after modifying the "hylafax_server" global variable in…
CVE-2018-15155	Openemr Openemr	Hig	0.51	8.8	0.10		Aug 15, 2018	OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/fax/fax_dispatch.php after modifying the "hylafax_enscript" global variable in…
CVE-2018-15154	Openemr Openemr	Hig	0.51	8.8	0.10		Aug 15, 2018	OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/billing/sl_eob_search.php after modifying the "print_command" global variable in…
CVE-2018-15153	Openemr Openemr	Hig	0.55	8.8	0.61		Aug 15, 2018	OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/main/daemon_frame.php after modifying the "hylafax_server" global variable in…
CVE-2018-15151	Openemr Openemr	Hig	0.57	8.8	0.02		Aug 15, 2018	SQL injection vulnerability in interface/de_identification_forms/find_code_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'search_term' parameter.
CVE-2018-15150	Openemr Openemr	Hig	0.57	8.8	0.02		Aug 15, 2018	SQL injection vulnerability in interface/de_identification_forms/de_identification_screen2.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'temporary_files_dir' variable in…
CVE-2018-15149	Openemr Openemr	Hig	0.57	8.8	0.02		Aug 15, 2018	SQL injection vulnerability in interface/forms/eye_mag/php/Anything_simple.php from library/forms.inc in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'encounter' parameter.
CVE-2018-15148	Openemr Openemr	Hig	0.57	8.8	0.02		Aug 15, 2018	SQL injection vulnerability in interface/patient_file/encounter/search_code.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'text' parameter.
CVE-2018-15147	Openemr Openemr	Hig	0.57	8.8	0.02		Aug 15, 2018	SQL injection vulnerability in interface/forms_admin/forms_admin.php from library/registry.inc in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'id' parameter.
CVE-2018-15146	Openemr Openemr	Hig	0.57	8.8	0.02		Aug 15, 2018	SQL injection vulnerability in interface/de_identification_forms/find_immunization_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'search_term' parameter.
CVE-2018-15138	Ericssonlg Ipecs Nms	Hig	0.50	7.5	0.13		Aug 15, 2018	Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.
CVE-2018-12056	All For One All For One	Hig	0.49	7.5	0.02		Aug 15, 2018	The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables because the _seed value can be retrieved with a getStorageAt call. Therefore, it allows attackers to always win and get…
CVE-2018-11687	Bitcoin Red Project Bitcoin Red	Hig	0.49	7.5	0.01		Aug 15, 2018	An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red (BTCR), an Ethereum ERC20 token, allows the owner to accomplish an unauthorized increase of digital assets by providing a large address[] array, as exploited in the wild in May…
CVE-2018-0952	Microsoft Windows Server 2016	Hig	0.54	7.8	0.06		Aug 15, 2018	An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual…
CVE-2018-6973	VMware Workstation	Hig	0.57	8.8	0.00		Aug 15, 2018	VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. This issue may allow a guest to execute code on the host.

CVE-2018-8401HigAug 15, 2018
Microsoft
Windows Server 2016
risk 0.51cvss 7.8epss 0.02
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE…
CVE-2018-8400HigAug 15, 2018
Microsoft
Windows 10 1909
risk 0.51cvss 7.8epss 0.02
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from…
CVE-2018-8399HigAug 15, 2018
Microsoft
Windows 10 Servers
risk 0.46cvss 7.0epss 0.01
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8404.
CVE-2018-8397HigAug 15, 2018
Microsoft
Windows Server 2008
risk 0.63cvss 8.8epss 0.68
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka "GDI+ Remote Code Execution Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
CVE-2018-8390HigAug 15, 2018
Microsoft
Edge
risk 0.43cvss 7.5epss 0.15
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355,…
CVE-2018-8389HigAug 15, 2018
Microsoft
Internet Explorer
risk 0.51cvss 7.5epss 0.30
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is…
CVE-2018-8387HigAug 15, 2018
Microsoft
Edge
risk 0.50cvss 7.5epss 0.10
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8377.
CVE-2018-8385HigAug 15, 2018
Microsoft
Internet Explorer
risk 0.43cvss 7.5epss 0.15
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, Internet…
CVE-2018-8384HigAug 15, 2018
Microsoft
Chakracore
risk 0.50cvss 7.5epss 0.64
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8266, CVE-2018-8380,…
CVE-2018-8381HigAug 15, 2018
Microsoft
Edge
risk 0.43cvss 7.5epss 0.15
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8266,…
CVE-2018-8380HigAug 15, 2018
Microsoft
Edge
risk 0.43cvss 7.5epss 0.15
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8266,…
CVE-2018-8379HigAug 15, 2018
Microsoft
Excel
risk 0.52cvss 7.8epss 0.18
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel. This CVE ID is unique from CVE-2018-8375.
CVE-2018-8377HigAug 15, 2018
Microsoft
Edge
risk 0.50cvss 7.5epss 0.10
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8387.
CVE-2018-8376HigAug 15, 2018
Microsoft
Powerpoint
risk 0.59cvss 8.8epss 0.19
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft PowerPoint.
CVE-2018-8375HigAug 15, 2018
Microsoft
Office
risk 0.52cvss 7.8epss 0.17
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel. This CVE ID…
CVE-2018-8373HigKEVAug 15, 2018
Microsoft
Internet Explorer
risk 0.66cvss 7.5epss 0.62
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is…
CVE-2018-8372HigAug 15, 2018
Microsoft
Internet Explorer
risk 0.44cvss 7.5epss 0.26
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from…
CVE-2018-8371HigAug 15, 2018
Microsoft
Internet Explorer
risk 0.50cvss 7.5epss 0.15
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is…
CVE-2018-8360HigAug 15, 2018
Microsoft
.net Framework
risk 0.50cvss 7.5epss 0.10
An information disclosure vulnerability exists in Microsoft .NET Framework that could allow an attacker to access information in multi-tenant environments, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft…
CVE-2018-8359HigAug 15, 2018
Microsoft
Chakracore
risk 0.43cvss 7.5epss 0.15
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8371,…
CVE-2018-8357HigAug 15, 2018
Microsoft
Internet Explorer
risk 0.55cvss 8.3epss 0.08
An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser Elevation of Privilege Vulnerability." This affects Internet Explorer 11, Microsoft Edge.
CVE-2018-8355HigAug 15, 2018
Microsoft
Internet Explorer
risk 0.50cvss 7.5epss 0.68
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from…
CVE-2018-8353HigAug 15, 2018
Microsoft
Internet Explorer
risk 0.57cvss 7.5epss 0.67
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is…
CVE-2018-8350HigAug 15, 2018
Microsoft
Windows Server 2003
risk 0.59cvss 8.8epss 0.20
A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.
CVE-2018-8349HigAug 15, 2018
Microsoft
Windows Server 2008
risk 0.59cvss 8.8epss 0.23
A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server…
CVE-2018-8347HigAug 15, 2018
Microsoft
Windows Server 2016
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2018-8346HigAug 15, 2018
Microsoft
Windows Server 2008
risk 0.59cvss 8.8epss 0.20
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code Execution Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from…
CVE-2018-8345HigAug 15, 2018
Microsoft
Windows Server 2008
risk 0.50cvss 7.5epss 0.15
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows…
CVE-2018-8344HigAug 15, 2018
Microsoft
Windows Server 2008
risk 0.59cvss 8.8epss 0.23
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,…
CVE-2018-8343HigAug 15, 2018
Microsoft
Windows Server 2008
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server…
CVE-2018-8342HigAug 15, 2018
Microsoft
Windows Server 2008
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server…
CVE-2018-8339HigAug 15, 2018
Microsoft
Windows Server 2008
risk 0.46cvss 7.0epss 0.01
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior, aka "Windows Installer Elevation of Privilege Vulnerability." This affects Windows 7, Windows…
CVE-2018-8316HigAug 15, 2018
Microsoft
Internet Explorer
risk 0.50cvss 7.5epss 0.14
A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading executable libraries, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 11, Internet Explorer 10.
CVE-2018-8266HigAug 15, 2018
Microsoft
Edge
risk 0.44cvss 7.5epss 0.29
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8380,…
CVE-2018-15172HigAug 15, 2018
TP-Link
Tl Wr840n Firmware
risk 0.52cvss 7.5epss 0.08
TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.
CVE-2018-15156HigAug 15, 2018
Openemr
Openemr
risk 0.51cvss 8.8epss 0.10
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/fax/faxq.php after modifying the "hylafax_server" global variable in…
CVE-2018-15155HigAug 15, 2018
Openemr
Openemr
risk 0.51cvss 8.8epss 0.10
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/fax/fax_dispatch.php after modifying the "hylafax_enscript" global variable in…
CVE-2018-15154HigAug 15, 2018
Openemr
Openemr
risk 0.51cvss 8.8epss 0.10
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/billing/sl_eob_search.php after modifying the "print_command" global variable in…
CVE-2018-15153HigAug 15, 2018
Openemr
Openemr
risk 0.55cvss 8.8epss 0.61
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/main/daemon_frame.php after modifying the "hylafax_server" global variable in…
CVE-2018-15151HigAug 15, 2018
Openemr
Openemr
risk 0.57cvss 8.8epss 0.02
SQL injection vulnerability in interface/de_identification_forms/find_code_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'search_term' parameter.
CVE-2018-15150HigAug 15, 2018
Openemr
Openemr
risk 0.57cvss 8.8epss 0.02
SQL injection vulnerability in interface/de_identification_forms/de_identification_screen2.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'temporary_files_dir' variable in…
CVE-2018-15149HigAug 15, 2018
Openemr
Openemr
risk 0.57cvss 8.8epss 0.02
SQL injection vulnerability in interface/forms/eye_mag/php/Anything_simple.php from library/forms.inc in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'encounter' parameter.
CVE-2018-15148HigAug 15, 2018
Openemr
Openemr
risk 0.57cvss 8.8epss 0.02
SQL injection vulnerability in interface/patient_file/encounter/search_code.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'text' parameter.
CVE-2018-15147HigAug 15, 2018
Openemr
Openemr
risk 0.57cvss 8.8epss 0.02
SQL injection vulnerability in interface/forms_admin/forms_admin.php from library/registry.inc in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'id' parameter.
CVE-2018-15146HigAug 15, 2018
Openemr
Openemr
risk 0.57cvss 8.8epss 0.02
SQL injection vulnerability in interface/de_identification_forms/find_immunization_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'search_term' parameter.
CVE-2018-15138HigAug 15, 2018
Ericssonlg
Ipecs Nms
risk 0.50cvss 7.5epss 0.13
Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.
CVE-2018-12056HigAug 15, 2018
All For One
All For One
risk 0.49cvss 7.5epss 0.02
The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables because the _seed value can be retrieved with a getStorageAt call. Therefore, it allows attackers to always win and get…
CVE-2018-11687HigAug 15, 2018
Bitcoin Red Project
Bitcoin Red
risk 0.49cvss 7.5epss 0.01
An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red (BTCR), an Ethereum ERC20 token, allows the owner to accomplish an unauthorized increase of digital assets by providing a large address[] array, as exploited in the wild in May…
CVE-2018-0952HigAug 15, 2018
Microsoft
Windows Server 2016
risk 0.54cvss 7.8epss 0.06
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual…
CVE-2018-6973HigAug 15, 2018
VMware
Workstation
risk 0.57cvss 8.8epss 0.00
VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. This issue may allow a guest to execute code on the host.