cve-2018-13379 vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application's error...

Gnu Gnutls Fedoraproject Fedora 32

4.3

CVSSv2

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This...

3.5

CVSSv2

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'....

Microsoft Team Foundation Server 2018 Microsoft Azure Devops Server 2019.0.11 Article available

6.8

CVSSv2

Adobe Photoshop CC versions 19.1.3 and earlier, 18.1.3 and earlier, and 18.1.2 and earlier have an Out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user....

Adobe Photoshop Cc2 Articles available

7.2

CVSSv2

A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation...

Trendmicro Antivirus For Mac 2017 Trendmicro Antivirus For Mac 2018 Trendmicro Antivirus For Mac 2019

7.2

CVSSv2

A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation...

Trendmicro Antivirus For Mac 2017 Trendmicro Antivirus For Mac 2018 Trendmicro Antivirus For Mac 2019

7.2

CVSSv2

A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation...

Trendmicro Antivirus For Mac 2017 Trendmicro Antivirus For Mac 2018 Trendmicro Antivirus For Mac 2019

7.2

CVSSv2

A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute...

Trendmicro Antivirus For Mac 2017 Trendmicro Antivirus For Mac 2018 Trendmicro Antivirus For Mac 2019

7.2

CVSSv2

A ctl_set KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to...

Trendmicro Antivirus For Mac 2017 Trendmicro Antivirus For Mac 2018 Trendmicro Antivirus For Mac 2019

9

CVSSv2

An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure...

Microsoft Team Foundation Server 2018 Microsoft Azure Devops Server 20191 Article available

« PREV 1 2 3 4 5 6 7 8 9 NEXT »