Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-19974 State: PUBLISHED Published: 2018-12-17T18:00:00 Last Updated: 2024-08-05T11:51:17.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: In YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM scratch memory in libyara/exec.c. This can allow attackers to discover addresses in the real stack (not the YARA virtual stack). Additional Analyst Notes: - CVE Program Container: References: - https://bnbdr.github.io/posts/extracheese/ - https://github.com/VirusTotal/yara/issues/999 - https://github.com/bnbdr/swisscheese/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DFFXDAMP6G
isscheese/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DFFXDAMP6GJ337LIOTVF5I4T6QGMN3ZR/
CVE ID: CVE-2018-19975 State: PUBLISHED Published: 2018-12-17T18:00:00 Last Updated: 2024-08-05T11:51:17.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: In YARA 3.8.1, bytecode in a specially crafted compiled rule can read data from any arbitrary address in memory, in libyara/exec.c. Specifically, OP_COUNT can read a DWORD. Additional Analyst Notes: - CVE Program Container: References: - https://bnbdr.github.io/posts/extracheese/ - https://github.com/VirusTotal/yara/issues/999 - https://github.com/bnbdr/swisscheese/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DFFXDAMP6GJ337LIOTVF5I4T6QGMN3ZR/
CVE ID: CVE-2018-19976 State: PUBLISHED Published: 2018-12-17T18:00:00 Last Updated: 2024-08-05T11:51:17.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: In YARA 3.8.1, bytecode in a specially crafted compiled rule is exposed to information about its environment, in libyara/exec.c. This is a consequence of the design of the YARA virtual machine. Additional Analyst Notes: - CVE Program Container: References: - https://bnbdr.github.io/posts/extracheese/ - https://github.com/VirusTotal/yara/issues/999 - https://github.com/bnbdr/swisscheese/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DFFXDAMP6GJ337LIOTVF5I4T6QGMN3ZR/
CVE ID: CVE-2018-19977 State: PUBLISHED Published: 2019-05-29T17:18:21 Last Updated: 2024-08-05T11:51:17.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection (missing input validation, escaping) in the ftp upgrade configuration interface on the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows an authenticated remote attacker (simple user) -- in the same network as the device -- to trigger OS commands (like starting telnetd or opening a reverse shell) via a POST request to the web server. Additional Analyst Notes: - CVE Program Container: References: - https://www.auerswald.de/de/service/81-telefone/schnurgebundene-telefone/1568-comfortel-1200-ip.html - http
eferences: - https://www.auerswald.de/de/service/81-telefone/schnurgebundene-telefone/1568-comfortel-1200-ip.html - https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Auerswald_COMfortel_1200_IP.pdf?_=1549376183
CVE ID: CVE-2018-19978 State: PUBLISHED Published: 2019-05-29T17:25:15 Last Updated: 2024-08-05T11:51:17.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in the DHCP and PPPOE configuration interface of the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows a remote attacker (authenticated as simple user in the same network as the device) to trigger remote code execution via a POST request (ManufacturerName parameter) to the web server on the device. The web server is running with root privileges and the injected code will also run with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.auerswald.de/d
so run with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.auerswald.de/de/service/81-telefone/schnurgebundene-telefone/1568-comfortel-1200-ip.html - https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Auerswald_COMfortel_1200_IP.pdf?_=1549376183
CVE ID: CVE-2018-19980 State: PUBLISHED Published: 2018-12-08T18:00:00 Last Updated: 2024-08-05T11:51:17.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Anker Nebula Capsule Pro NBUI_M1_V2.1.9 devices allow attackers to cause a denial of service (reboot of the underlying Android 7.1.2 operating system) via a crafted application that sends data to WifiService. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ISCAS-Vulab/PoC_Nebula-Capsule-Pro-Wifi
CVE ID: CVE-2018-19981 State: PUBLISHED Published: 2019-04-04T14:34:56 Last Updated: 2024-08-05T11:51:17.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service. An attacker can use these credentials to create authenticated and/or authorized requests. Note that the attacker must have "root" privilege access to the Android filesystem in order to exploit this vulnerability (i.e. the device has been compromised, such as disabling or bypassing Android's fundamental security mechanisms). Additional Analyst Notes: - CVE Program Contai
uch as disabling or bypassing Android's fundamental security mechanisms). Additional Analyst Notes: - CVE Program Container: References: - https://raw.githubusercontent.com/lorenzodifuccia/cloudflare/master/Images/vulns/aws/aws_sdk_sp_01.png - https://raw.githubusercontent.com/lorenzodifuccia/cloudflare/master/Images/vulns/aws/aws_sdk_sp_02.png - https://raw.githubusercontent.com/lorenzodifuccia/cloudflare/master/Images/vulns/aws/aws_sdk_sp_03.png - https://aws-amplify.github.io/aws-sdk-android/docs/reference/com/amazonaws/auth/CognitoCachingCredentialsProvider.html
CVE ID: CVE-2018-19982 State: PUBLISHED Published: 2018-12-09T19:00:00 Last Updated: 2024-08-05T11:51:17.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on KT MC01507L Z-Wave S0 devices. It occurs because HPKP is not implemented. The communication architecture is APP > Server > Controller (HUB) > Node (products which are controlled by HUB). The prerequisite is that the attacker is on the same network as the target HUB, and can use IP Changer to change destination IP addresses (of all packets whose destination IP address is Server) to a proxy-server IP address. This allows sniffing of cleartext between Server and Controller. The cleartext command data i
a proxy-server IP address. This allows sniffing of cleartext between Server and Controller. The cleartext command data is transmitted to Controller using the proxy server's fake certificate, and it is able to control each Node of the HUB. Also, by operating HUB in Z-Wave Pairing Mode, it is possible to obtain the Z-Wave network key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/min1233/CVE/blob/master/1
CVE ID: CVE-2018-19983 State: PUBLISHED Published: 2018-12-09T19:00:00 Last Updated: 2024-08-05T11:51:17.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Sigma Design Z-Wave S0 through S2 devices. An attacker first prepares a Z-Wave frame-transmission program (e.g., Z-Wave PC Controller, OpenZWave, CC1110, etc.). Next, the attacker conducts a DoS attack against the Z-Wave S0 Security version product by continuously sending divided "Nonce Get (0x98 0x81)" frames. The reason for dividing the "Nonce Get" frame is that, in security version S0, when a node receives a "Nonce Get" frame, the node produces a random new nonce and sends it to the Src node of t
ion S0, when a node receives a "Nonce Get" frame, the node produces a random new nonce and sends it to the Src node of the received "Nonce Get" frame. After the nonce value is generated and transmitted, the node transitions to wait mode. At this time, when "Nonce Get" is received again, the node discards the previous nonce value and generates a random nonce again. Therefore, because the frame is encrypted with previous nonce value, the received normal frame cannot be decrypted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/min1233/CVE/blob/master/2
CVE ID: CVE-2018-19985 State: PUBLISHED Published: 2019-03-17T19:48:52 Last Updated: 2024-08-05T11:51:17.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151420/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00023
rity-Advisory-Slackware-14.2-kernel-Updates.html - http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00007.html - https://seclists.org/bugtraq/2019/Jan/52 - https://hexhive.epfl.ch/projects/perifuzz/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html - https://security.netapp.com/advisory/ntap-20190404-0002/ - https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html - https://usn.ubuntu.com/4115-1/ - https://usn.ubuntu.com/4118-1/ - https://access.redhat.com/errata/RHSA-2019:3309 - https://access.redhat.com
m/4115-1/ - https://usn.ubuntu.com/4118-1/ - https://access.redhat.com/errata/RHSA-2019:3309 - https://access.redhat.com/errata/RHSA-2019:3517
CVE ID: CVE-2018-19986 State: PUBLISHED Published: 2019-05-13T13:22:05 Last Updated: 2024-08-05T11:51:17.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices. In the SetRouterSettings.php source code, the RemotePort parameter is saved in the $path_inf_wan1."/web" internal configuration memory without any regex checking. And in the IPTWAN_build_command function of the iptwan.php source code, the data in $path_inf_wan1."/web" is used with the iptables command without any regex checking. A vulnerable /HNAP1/SetR
the data in $path_inf_wan1."/web" is used with the iptables command without any regex checking. A vulnerable /HNAP1/SetRouterSettings XML message could have shell metacharacters in the RemotePort element such as the `telnetd` string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pr0v3rbs/CVE/tree/master/CVE-2018-19986%20-%2019990
CVE ID: CVE-2018-19987 State: PUBLISHED Published: 2019-05-13T13:23:33 Last Updated: 2024-08-05T11:51:17.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices mishandle IsAccessPoint in /HNAP1/SetAccessPointMode. In the SetAccessPointMode.php source code, the IsAccessPoint parameter is saved in the ShellPath script file without any regex checking. After the script file is executed, the command injection occurs. A vulnerable /HNAP1/SetAccessPointMode XML message could have shell metacharacters in the IsAcc
ommand injection occurs. A vulnerable /HNAP1/SetAccessPointMode XML message could have shell metacharacters in the IsAccessPoint element such as the `telnetd` string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pr0v3rbs/CVE/tree/master/CVE-2018-19986%20-%2019990
CVE ID: CVE-2018-19988 State: PUBLISHED Published: 2019-05-13T13:24:27 Last Updated: 2024-08-05T11:51:18.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the /HNAP1/SetClientInfoDemo message, the AudioMute and AudioEnable parameters are vulnerable, and the vulnerabilities affect D-Link DIR-868L Rev.B 2.05B02 devices. In the SetClientInfoDemo.php source code, the AudioMute and AudioEnble parameters are saved in the ShellPath script file without any regex checking. After the script file is executed, the command injection occurs. It needs to bypass the wget command option with a single quote. A vulnerable /HNAP1/SetClientInfoDemo XML message could have single quotes and backqu
ommand option with a single quote. A vulnerable /HNAP1/SetClientInfoDemo XML message could have single quotes and backquotes in the AudioMute or AudioEnable element, such as the '`telnetd`' string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pr0v3rbs/CVE/tree/master/CVE-2018-19986%20-%2019990
CVE ID: CVE-2018-19989 State: PUBLISHED Published: 2019-05-13T13:25:14 Last Updated: 2024-08-05T11:51:18.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DIR-822 Rev.C 3.10B06 devices. In the SetQoSSettings.php source code, the uplink parameter is saved in the /bwc/entry:1/bandwidth and /bwc/entry:2/bandwidth internal configuration memory without any regex checking. And in the bwc_tc_spq_start, bwc_tc_wfq_start, and bwc_tc_adb_start functions of the bwcsvcs.php source code, the data in /bwc/entry:1/bandwidth and /bwc/entry:2/bandwidth is use
adb_start functions of the bwcsvcs.php source code, the data in /bwc/entry:1/bandwidth and /bwc/entry:2/bandwidth is used with the tc command without any regex checking. A vulnerable /HNAP1/SetQoSSettings XML message could have shell metacharacters in the uplink element such as the `telnetd` string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pr0v3rbs/CVE/tree/master/CVE-2018-19986%20-%2019990
CVE ID: CVE-2018-19990 State: PUBLISHED Published: 2019-05-13T13:26:05 Last Updated: 2024-08-05T11:51:17.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the /HNAP1/SetWiFiVerifyAlpha message, the WPSPIN parameter is vulnerable, and the vulnerability affects D-Link DIR-822 B1 202KRb06 devices. In the SetWiFiVerifyAlpha.php source code, the WPSPIN parameter is saved in the $rphyinf1."/media/wps/enrollee/pin" and $rphyinf2."/media/wps/enrollee/pin" and $rphyinf3."/media/wps/enrollee/pin" internal configuration memory without any regex checking. And in the do_wps function of the wps.php source code, the data in $rphyinf3."/media/wps/enrollee/pin" is used with the wpatalk comma
_wps function of the wps.php source code, the data in $rphyinf3."/media/wps/enrollee/pin" is used with the wpatalk command without any regex checking. A vulnerable /HNAP1/SetWiFiVerifyAlpha XML message could have shell metacharacters in the WPSPIN element such as the `telnetd` string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pr0v3rbs/CVE/tree/master/CVE-2018-19986%20-%2019990
CVE ID: CVE-2018-19991 State: PUBLISHED Published: 2018-12-10T00:00:00 Last Updated: 2024-08-05T11:51:17.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler (for get_uri_args or get_post_args) to block the API misuse described in CVE-2018-9230. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alexazhou/VeryNginx/issues/218
CVE ID: CVE-2018-19992 State: PUBLISHED Published: 2019-01-03T19:00:00 Last Updated: 2024-08-05T11:51:18.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" (POST) or "town" (POST) parameter to adherents/type.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/0f06e39d23636bd1e4039ac61a743c79725c798b
CVE ID: CVE-2018-19993 State: PUBLISHED Published: 2019-01-03T19:00:00 Last Updated: 2024-08-05T11:51:17.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the transphrase parameter to public/notice.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/fc3fcc5455d9a610b85723e89e8be43a41ad1378
CVE ID: CVE-2018-19994 State: PUBLISHED Published: 2019-01-03T19:00:00 Last Updated: 2024-08-05T11:51:18.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/850b939ffd2c7a4443649331b923d5e0da2d6446
CVE ID: CVE-2018-19995 State: PUBLISHED Published: 2019-01-03T19:00:00 Last Updated: 2024-08-05T11:51:17.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" (POST) or "town" (POST) parameter to user/card.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/4b8be6ed64763327018ac1c076f81ddffa87855e - https://github.com/Dolibarr/dolibarr/commit/bacd5110fbdc81a35030fdc322775fa15ea85924
CVE ID: CVE-2018-19998 State: PUBLISHED Published: 2019-01-03T19:00:00 Last Updated: 2024-08-05T11:51:18.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/2b088a73c121a52e006c0d76ea4da7ffeb7b4f4a - https://github.com/Dolibarr/dolibarr/commit/bacd5110fbdc81a35030fdc322775fa15ea85924
CVE ID: CVE-2018-19999 State: PUBLISHED Published: 2019-06-07T16:13:37 Last Updated: 2024-08-05T11:51:18.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local users to bypass authentication in the application and execute code in the context of the Windows SYSTEM account, leading to privilege escalation. To exploit this vulnerability, an attacker must have local access the the host running Serv-U, and a Serv-U administrator have an active management console session. Additional Analyst Notes: - CVE Program Container: References: - https://www.themissinglink.com.au/
ent console session. Additional Analyst Notes: - CVE Program Container: References: - https://www.themissinglink.com.au/security-advisories-cve-2018-19999 - https://seclists.org/fulldisclosure/2019/May/46
CVE ID: CVE-2018-1000 State: PUBLISHED Published: 2018-04-12T01:00:00 Last Updated: 2024-08-05T03:44:11.807Z Vendors: Microsoft Products: Internet Explorer 9, Internet Explorer 11, Internet Explorer 10 Problem Types: Information Disclosure Description: An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0981, CVE-2018-0987, CVE-2018-0989. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/10406
CVE-2018-0989. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040653 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1000 - http://www.securityfocus.com/bid/103603 - https://lists.apache.org/thread.html/6c9991dbcb7358e18a46cd113fa0fd7586eaf312b1c7f7d4cdb16fa1%40%3Csolr-user.lucene.apache.org%3E - https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E - https://lists.apache.org/thread.html/83315d9b28d9010eeeec360f3295105354b8ff30d94e75b5c67c13ac%40%3Csolr-user.lucene.apache.org%3E
CVE ID: CVE-2018-1001 State: PUBLISHED Published: 2018-04-12T01:00:00 Last Updated: 2024-08-05T03:44:11.823Z Vendors: Microsoft Products: Internet Explorer 9, Internet Explorer 11, Internet Explorer 10 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0988, CVE-2018-0996. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040653 - https://portal.msr
nal Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040653 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1001 - http://www.securityfocus.com/bid/103609
CVE ID: CVE-2018-1003 State: PUBLISHED Published: 2018-04-12T01:00:00 Last Updated: 2024-08-05T03:44:11.967Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10 Problem Types: Remote Code Execution Description: A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016,
s 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040651 - http://www.securityfocus.com/bid/103655 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1003
CVE ID: CVE-2018-1004 State: PUBLISHED Published: 2018-04-12T01:00:00 Last Updated: 2024-08-05T03:44:11.838Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Internet Explorer 9, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Internet Explorer 9, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10.
t Explorer 9, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040655 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1004 - http://www.securityfocus.com/bid/103657