CVEs

405,321 total · page 6193 of 8,107

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-5217	K7 Computing K7 Antivirus	Hig	0.51	7.8	0.00	Jan 4, 2018	In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x95002578.
CVE-2018-5216	Radiantcms Radiant CMS	Med	0.35	5.4	0.01	Jan 4, 2018	Radiant CMS 1.1.4 has XSS via crafted Markdown input in the part_body_content parameter to an admin/pages/*/edit resource.
CVE-2018-5215	Fork CMS Fork CMS	Med	0.35	5.4	0.01	Jan 4, 2018	Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter.
CVE-2017-17867	Inteno iopsys	Hig	0.61	8.8	0.11	Jan 4, 2018	Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field in the odhcpd configuration to specify an arbitrary program, as demonstrated by a program located on an SMB share. This issue existed…
CVE-2018-5214	WordPress Add Link to Facebook	Med	0.35	5.4	0.01	Jan 4, 2018	The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fb_facebook_id parameter to wp-admin/profile.php.
CVE-2018-5213	WordPress Simple Download Monitor	Med	0.35	5.4	0.01	Jan 4, 2018	The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload (aka Downloadable File) parameter in an edit action to wp-admin/post.php.
CVE-2018-5212	WordPress Simple Download Monitor	Med	0.35	5.4	0.01	Jan 4, 2018	The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload_thumbnail (aka File Thumbnail) parameter in an edit action to wp-admin/post.php.
CVE-2017-1727	IBM Security Key Lifecycle Manager	Med	0.28	4.3	0.01	Jan 4, 2018	IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 discloses sensitive information in error messages that could aid an attacker in further attacks against the system. IBM X-Force ID: 134869.
CVE-2017-1699	IBM MQ Managed File Transfer Agent	Low	0.21	3.3	0.00	Jan 4, 2018	IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. A local attacker could exploit this vulnerability to modify or delete data contained in the files with an unknown impact. IBM X-Force ID: 134391.
CVE-2017-1673	IBM Security Key Lifecycle Manager	Med	0.40	6.1	0.01	Jan 4, 2018	IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2017-1672	IBM Security Key Lifecycle Manager	Hig	0.57	8.8	0.01	Jan 4, 2018	IBM Tivoli Key Lifecycle Manager 2.6 and 2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 133639.
CVE-2017-1669	IBM Security Key Lifecycle Manager	Low	0.24	3.7	0.01	Jan 4, 2018	IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 133636.
CVE-2017-1665	IBM Security Key Lifecycle Manager	Med	0.38	5.9	0.01	Jan 4, 2018	IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 133559.
CVE-2017-1664	IBM Security Key Lifecycle Manager	Med	0.38	5.9	0.01	Jan 4, 2018	IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 133557.
CVE-2017-14960	Opentext Document Sciences Xpression	Hig	0.52	7.5	0.04	Jan 4, 2018	xDashboard in OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 has SQL Injection.
CVE-2014-7862	Zohocorp Desktop Central	Cri	0.73	9.8	0.81	Jan 4, 2018	The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action.
CVE-2017-17837	Apache DeltaSpike	Med	0.33	6.1	0.04	Jan 4, 2018	The Apache DeltaSpike-JSF 1.8.0 module has a XSS injection leak in the windowId handling. The default size of the windowId get's cut off after 10 characters (by default), so the impact might be limited. A fix got applied and released in Apache deltaspike-1.8.1.
CVE-2017-15714	Apache Ofbiz	Cri	0.64	9.8	0.03	Jan 4, 2018	The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed. This allows for code injection by passing that code through the URL. For example by appending this code "__format=%27;alert(%27xss%27)" to the URL an alert window would execute.
CVE-2018-0803	Microsoft Edge	Med	0.28	4.2	0.04	Jan 4, 2018	Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to access information from one domain and inject it into another domain, due to how Microsoft Edge enforces cross-domain policies, aka "Microsoft Edge Elevation of…
CVE-2018-0800	Microsoft Edge	Med	0.35	5.3	0.07	Jan 4, 2018	Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from…
CVE-2018-0788	Microsoft Windows Server 2008	Hig	0.46	7.0	0.01	Jan 4, 2018	The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 and R2 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "OpenType Font…
CVE-2018-0781	Microsoft Edge	Hig	0.50	7.5	0.11	Jan 4, 2018	Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".…
CVE-2018-0780	Microsoft Edge	Med	0.42	5.3	0.59	Jan 4, 2018	Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure…
CVE-2018-0778	Microsoft Edge	Hig	0.49	7.5	0.09	Jan 4, 2018	Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758,…
CVE-2018-0777	Microsoft Edge	Hig	0.58	7.5	0.78	Jan 4, 2018	Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".…
CVE-2018-0776	Microsoft Edge	Hig	0.58	7.5	0.78	Jan 4, 2018	Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".…
CVE-2018-0775	Microsoft Edge	Hig	0.57	7.5	0.68	Jan 4, 2018	Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758,…
CVE-2018-0774	Microsoft Edge	Hig	0.57	7.5	0.68	Jan 4, 2018	Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758,…
CVE-2018-0773	Microsoft Edge	Hig	0.49	7.5	0.09	Jan 4, 2018	Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758,…
CVE-2018-0772	Microsoft Internet Explorer	Hig	0.50	7.5	0.12	Jan 4, 2018	Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute…
CVE-2018-0770	Microsoft Edge	Hig	0.58	7.5	0.78	Jan 4, 2018	Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".…
CVE-2018-0769	Microsoft Edge	Hig	0.58	7.5	0.79	Jan 4, 2018	Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".…
CVE-2018-0768	Microsoft Edge	Hig	0.49	7.5	0.09	Jan 4, 2018	Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758,…
CVE-2018-0767	Microsoft Edge	Med	0.43	5.3	0.65	Jan 4, 2018	Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure…
CVE-2018-0766	Microsoft Edge	Med	0.29	4.3	0.08	Jan 4, 2018	Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the Microsoft Edge PDF Reader handles objects in memory, aka "Microsoft Edge Information…
CVE-2018-0762	Microsoft Internet Explorer	Hig	0.50	7.5	0.12	Jan 4, 2018	Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute…
CVE-2018-0758	Microsoft Edge	Hig	0.58	7.5	0.81	Jan 4, 2018	Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".…
CVE-2018-0754	Microsoft Windows Server 2008	Med	0.36	5.5	0.02	Jan 4, 2018	The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information…
CVE-2018-0753	Microsoft Windows Server 2012	Med	0.39	5.9	0.09	Jan 4, 2018	Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a denial of service vulnerability due to the way objects are handled in memory, aka "Windows IPSec Denial of Service…
CVE-2018-0752	Microsoft Windows Server 2012	Hig	0.54	7.8	0.03	Jan 4, 2018	The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka…
CVE-2018-0751	Microsoft Windows Server 2012	Hig	0.49	7.1	0.03	Jan 4, 2018	The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka…
CVE-2018-0750	Microsoft Windows Server 2008	Med	0.36	5.5	0.02	Jan 4, 2018	The Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability".
CVE-2018-0749	Microsoft Windows Server 2008	Hig	0.54	7.8	0.03	Jan 4, 2018	The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of…
CVE-2018-0748	Microsoft Windows Server 2008	Hig	0.54	7.8	0.03	Jan 4, 2018	The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the…
CVE-2018-0747	Microsoft Windows Server 2008	Med	0.31	4.7	0.02	Jan 4, 2018	The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the…
CVE-2018-0746	Microsoft Windows Server 2012	Med	0.34	4.7	0.04	Jan 4, 2018	The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows…
CVE-2018-0745	Microsoft Windows 10 1909	Med	0.34	4.7	0.03	Jan 4, 2018	The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from…
CVE-2018-0744	Microsoft Windows Server 2012	Hig	0.50	7.0	0.15	Jan 4, 2018	The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows…
CVE-2018-0743	Microsoft Windows Subsystem For Linux	Hig	0.49	7.0	0.03	Jan 4, 2018	Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability".
CVE-2018-0741	Microsoft Windows Server 2008	Med	0.35	5.3	0.07	Jan 4, 2018	The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Microsoft Color Management Information Disclosure Vulnerability".

CVE-2018-5217HigJan 4, 2018
K7 Computing
K7 Antivirus
risk 0.51cvss 7.8epss 0.00
In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x95002578.
CVE-2018-5216MedJan 4, 2018
Radiantcms
Radiant CMS
risk 0.35cvss 5.4epss 0.01
Radiant CMS 1.1.4 has XSS via crafted Markdown input in the part_body_content parameter to an admin/pages/*/edit resource.
CVE-2018-5215MedJan 4, 2018
Fork CMS
Fork CMS
risk 0.35cvss 5.4epss 0.01
Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter.
CVE-2017-17867HigJan 4, 2018
Inteno
iopsys
risk 0.61cvss 8.8epss 0.11
Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field in the odhcpd configuration to specify an arbitrary program, as demonstrated by a program located on an SMB share. This issue existed…
CVE-2018-5214MedJan 4, 2018
WordPress
Add Link to Facebook
risk 0.35cvss 5.4epss 0.01
The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fb_facebook_id parameter to wp-admin/profile.php.
CVE-2018-5213MedJan 4, 2018
WordPress
Simple Download Monitor
risk 0.35cvss 5.4epss 0.01
The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload (aka Downloadable File) parameter in an edit action to wp-admin/post.php.
CVE-2018-5212MedJan 4, 2018
WordPress
Simple Download Monitor
risk 0.35cvss 5.4epss 0.01
The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload_thumbnail (aka File Thumbnail) parameter in an edit action to wp-admin/post.php.
CVE-2017-1727MedJan 4, 2018
IBM
Security Key Lifecycle Manager
risk 0.28cvss 4.3epss 0.01
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 discloses sensitive information in error messages that could aid an attacker in further attacks against the system. IBM X-Force ID: 134869.
CVE-2017-1699LowJan 4, 2018
IBM
MQ Managed File Transfer Agent
risk 0.21cvss 3.3epss 0.00
IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. A local attacker could exploit this vulnerability to modify or delete data contained in the files with an unknown impact. IBM X-Force ID: 134391.
CVE-2017-1673MedJan 4, 2018
IBM
Security Key Lifecycle Manager
risk 0.40cvss 6.1epss 0.01
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2017-1672HigJan 4, 2018
IBM
Security Key Lifecycle Manager
risk 0.57cvss 8.8epss 0.01
IBM Tivoli Key Lifecycle Manager 2.6 and 2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 133639.
CVE-2017-1669LowJan 4, 2018
IBM
Security Key Lifecycle Manager
risk 0.24cvss 3.7epss 0.01
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 133636.
CVE-2017-1665MedJan 4, 2018
IBM
Security Key Lifecycle Manager
risk 0.38cvss 5.9epss 0.01
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 133559.
CVE-2017-1664MedJan 4, 2018
IBM
Security Key Lifecycle Manager
risk 0.38cvss 5.9epss 0.01
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 133557.
CVE-2017-14960HigJan 4, 2018
Opentext
Document Sciences Xpression
risk 0.52cvss 7.5epss 0.04
xDashboard in OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 has SQL Injection.
CVE-2014-7862CriJan 4, 2018
Zohocorp
Desktop Central
risk 0.73cvss 9.8epss 0.81
The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action.
CVE-2017-17837MedJan 4, 2018
Apache
DeltaSpike
risk 0.33cvss 6.1epss 0.04
The Apache DeltaSpike-JSF 1.8.0 module has a XSS injection leak in the windowId handling. The default size of the windowId get's cut off after 10 characters (by default), so the impact might be limited. A fix got applied and released in Apache deltaspike-1.8.1.
CVE-2017-15714CriJan 4, 2018
Apache
Ofbiz
risk 0.64cvss 9.8epss 0.03
The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed. This allows for code injection by passing that code through the URL. For example by appending this code "__format=%27;alert(%27xss%27)" to the URL an alert window would execute.
CVE-2018-0803MedJan 4, 2018
Microsoft
Edge
risk 0.28cvss 4.2epss 0.04
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to access information from one domain and inject it into another domain, due to how Microsoft Edge enforces cross-domain policies, aka "Microsoft Edge Elevation of…
CVE-2018-0800MedJan 4, 2018
Microsoft
Edge
risk 0.35cvss 5.3epss 0.07
Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from…
CVE-2018-0788HigJan 4, 2018
Microsoft
Windows Server 2008
risk 0.46cvss 7.0epss 0.01
The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 and R2 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "OpenType Font…
CVE-2018-0781HigJan 4, 2018
Microsoft
Edge
risk 0.50cvss 7.5epss 0.11
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".…
CVE-2018-0780MedJan 4, 2018
Microsoft
Edge
risk 0.42cvss 5.3epss 0.59
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure…
CVE-2018-0778HigJan 4, 2018
Microsoft
Edge
risk 0.49cvss 7.5epss 0.09
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758,…
CVE-2018-0777HigJan 4, 2018
Microsoft
Edge
risk 0.58cvss 7.5epss 0.78
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".…
CVE-2018-0776HigJan 4, 2018
Microsoft
Edge
risk 0.58cvss 7.5epss 0.78
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".…
CVE-2018-0775HigJan 4, 2018
Microsoft
Edge
risk 0.57cvss 7.5epss 0.68
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758,…
CVE-2018-0774HigJan 4, 2018
Microsoft
Edge
risk 0.57cvss 7.5epss 0.68
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758,…
CVE-2018-0773HigJan 4, 2018
Microsoft
Edge
risk 0.49cvss 7.5epss 0.09
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758,…
CVE-2018-0772HigJan 4, 2018
Microsoft
Internet Explorer
risk 0.50cvss 7.5epss 0.12
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute…
CVE-2018-0770HigJan 4, 2018
Microsoft
Edge
risk 0.58cvss 7.5epss 0.78
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".…
CVE-2018-0769HigJan 4, 2018
Microsoft
Edge
risk 0.58cvss 7.5epss 0.79
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".…
CVE-2018-0768HigJan 4, 2018
Microsoft
Edge
risk 0.49cvss 7.5epss 0.09
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758,…
CVE-2018-0767MedJan 4, 2018
Microsoft
Edge
risk 0.43cvss 5.3epss 0.65
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure…
CVE-2018-0766MedJan 4, 2018
Microsoft
Edge
risk 0.29cvss 4.3epss 0.08
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the Microsoft Edge PDF Reader handles objects in memory, aka "Microsoft Edge Information…
CVE-2018-0762HigJan 4, 2018
Microsoft
Internet Explorer
risk 0.50cvss 7.5epss 0.12
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute…
CVE-2018-0758HigJan 4, 2018
Microsoft
Edge
risk 0.58cvss 7.5epss 0.81
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".…
CVE-2018-0754MedJan 4, 2018
Microsoft
Windows Server 2008
risk 0.36cvss 5.5epss 0.02
The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information…
CVE-2018-0753MedJan 4, 2018
Microsoft
Windows Server 2012
risk 0.39cvss 5.9epss 0.09
Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a denial of service vulnerability due to the way objects are handled in memory, aka "Windows IPSec Denial of Service…
CVE-2018-0752HigJan 4, 2018
Microsoft
Windows Server 2012
risk 0.54cvss 7.8epss 0.03
The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka…
CVE-2018-0751HigJan 4, 2018
Microsoft
Windows Server 2012
risk 0.49cvss 7.1epss 0.03
The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka…
CVE-2018-0750MedJan 4, 2018
Microsoft
Windows Server 2008
risk 0.36cvss 5.5epss 0.02
The Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability".
CVE-2018-0749HigJan 4, 2018
Microsoft
Windows Server 2008
risk 0.54cvss 7.8epss 0.03
The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of…
CVE-2018-0748HigJan 4, 2018
Microsoft
Windows Server 2008
risk 0.54cvss 7.8epss 0.03
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the…
CVE-2018-0747MedJan 4, 2018
Microsoft
Windows Server 2008
risk 0.31cvss 4.7epss 0.02
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the…
CVE-2018-0746MedJan 4, 2018
Microsoft
Windows Server 2012
risk 0.34cvss 4.7epss 0.04
The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows…
CVE-2018-0745MedJan 4, 2018
Microsoft
Windows 10 1909
risk 0.34cvss 4.7epss 0.03
The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from…
CVE-2018-0744HigJan 4, 2018
Microsoft
Windows Server 2012
risk 0.50cvss 7.0epss 0.15
The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows…
CVE-2018-0743HigJan 4, 2018
Microsoft
Windows Subsystem For Linux
risk 0.49cvss 7.0epss 0.03
Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability".
CVE-2018-0741MedJan 4, 2018
Microsoft
Windows Server 2008
risk 0.35cvss 5.3epss 0.07
The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Microsoft Color Management Information Disclosure Vulnerability".