CVE Vulnerability Catalog

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center and other tools expose functionality to read/write data from/to IO ports. This could be leveraged to run code with elevated privileges.

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center and other tools expose functionality to read and write arbitrary physical memory. A local attacker could leverage this to elevate privileges.

The GDrv low-level driver in GIGABYTE APP Center and other tools exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. This affects Internet Explorer 9, 10, and 11. This CVE ID is unique from CVE-2018-8643.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. This affects multiple versions of Windows, including Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. This affects multiple versions of Windows, including Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers.

NoneCms V1.3 has a vulnerability in thinkphp/library/think/App.php that allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrated by the query string s=index/\think\Request/input&filter=phpinfo&data=1.

Execution of user-supplied JavaScript during array deserialization leading to an out-of-bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

The Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier, has a code execution vulnerability that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.

PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local File Inclusion attack, by including /api/addusers and executing it. By providing the 'id' and 'users' parameters, an unauthenticated attacker can create a user with read-write privileges (including administrator).

Integer overflow in computing the required allocation size when instantiating a new JavaScript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys. This affects Windows Server 2008, Windows 7, and Windows Server 2008 R2.

An elevation of privilege vulnerability exists in Microsoft Exchange Server. This affects Microsoft Exchange Server.

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects.

An issue was discovered on Tenda AC7, AC9, and AC10 devices with specific firmware versions. A command injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request because the formsetUsbUnload function executes a dosystemCmd function with untrusted input.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. Affects multiple Windows versions including Windows 7, Windows 10, and Windows Server.

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to a SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution.

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.