|
249931
|
5.5 |
MEDIUM
Local
|
microsoft
|
windows_server_2012 windows_server_2008 windows_server_2016 windows_10 windows_7 windows_8.1 windows_rt_8.1
|
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass,…
|
NVD-CWE-noinfo
|
CVE-2018-0970
|
2024-11-21 12:39 |
2018-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249932
|
5.5 |
MEDIUM
Local
|
microsoft
|
windows_server_2012 windows_server_2008 windows_server_2016 windows_10 windows_7 windows_8.1 windows_rt_8.1
|
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass,…
|
NVD-CWE-noinfo
|
CVE-2018-0969
|
2024-11-21 12:39 |
2018-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249933
|
4.3 |
MEDIUM
Network
|
microsoft
|
edge
|
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This C…
|
CWE-200
Information Exposure
|
CVE-2018-0892
|
2024-11-21 12:39 |
2018-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249934
|
5.3 |
MEDIUM
Network
|
microsoft
|
windows_10 windows_server_2016
|
A security feature bypass vulnerability exists when Active Directory incorrectly applies Network Isolation settings, aka "Active Directory Security Feature Bypass Vulnerability." This affects Windows…
|
NVD-CWE-noinfo
|
CVE-2018-0890
|
2024-11-21 12:39 |
2018-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249935
|
7.5 |
HIGH
Network
|
microsoft
|
internet_explorer
|
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. …
|
CWE-787
Out-of-bounds Write
|
CVE-2018-0870
|
2024-11-21 12:39 |
2018-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249936
|
5.5 |
MEDIUM
Local
|
microsoft
|
windows_server_2012 windows_server_2008 windows_server_2016 windows_10 windows_7 windows_8.1 windows_rt_8.1
|
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass,…
|
NVD-CWE-noinfo
|
CVE-2018-0968
|
2024-11-21 12:39 |
2018-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249937
|
5.3 |
MEDIUM
Network
|
microsoft
|
windows_server_2012 windows_10 windows_server_2016 windows_8.1 windows_server_2008 windows_7 windows_rt_8.1
|
A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service Denial of Service Vulnerability." This affects Windows 7, Windows…
|
NVD-CWE-noinfo
|
CVE-2018-0967
|
2024-11-21 12:39 |
2018-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249938
|
5.5 |
MEDIUM
Local
|
microsoft
|
windows_server_2012 windows_server_2008 windows_server_2016 windows_10 windows_7 windows_8.1 windows_rt_8.1
|
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows…
|
NVD-CWE-noinfo
|
CVE-2018-0960
|
2024-11-21 12:39 |
2018-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249939
|
5.5 |
MEDIUM
Local
|
microsoft
|
windows_server_2012 windows_server_2008 windows_server_2016 windows_10 windows_7 windows_8.1 windows_rt_8.1
|
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7…
|
CWE-665
Improper Initialization
|
CVE-2018-0887
|
2024-11-21 12:39 |
2018-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249940
|
7.8 |
HIGH
Local
|
gnu canonical debian redhat
|
patch ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server_tus enterprise_linux_server enterpris…
|
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear …
|
CWE-20
Improper Input Validation
|
CVE-2018-1000156
|
2024-11-21 12:39 |
2018-04-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|