rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-0683 
Buffer overflow in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition via Cookie data.
Problem types: description: Buffer Overflow
Affected products: vendor: NEOJAPAN Inc.
product: Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier)
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0684 
Buffer overflow in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R3.0 and earlier, Denbun IMAP version V3.3I R3.0 and earlier) allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition via multipart/form-data format data.
Problem types: description: Buffer Overflow
Affected products: vendor: NEOJAPAN Inc.
product: Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R3.0 and earlier, Denbun IMAP version V3.3I R3.0 and earlier)
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0685 
SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search.
Problem types: description: SQL Injection
Affected products: vendor: NEOJAPAN Inc.
product: Denbun POP version V3.3P R4.0 and earlier
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0686 
Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote authenticated attackers to upload and execute any executable files via unspecified vectors.
Problem types: description: Unrestricted Upload of File with Dangerous Type
Affected products: vendor: NEOJAPAN Inc.
product: Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier)
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0687 
Cross-site scripting vulnerability in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: NEOJAPAN Inc.
product: Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier)
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0690 
An unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier could allow a man-in-the-middle attacker to tamper with an update file and inject executable files.
Problem types: description: Code injection
Affected products: vendor: Sony Video & Sound Products Inc.
product: Music Center for PC
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0691 
Multiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to version 1.1.23, NTT DOCOMO +Message App for Android prior to version 42.40.2800, NTT DOCOMO +Message App for iOS prior to version 1.1.23, KDDI +Message App for Android prior to version 1.0.6, and KDDI +Message App for iOS prior to version 1.1.23) do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: Fails to verify SSL certificates
Affected products: vendor: Softbank, NTT docomo, KDDI
product: Multiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to version 1.1.23, NTT DOCOMO +Message App for Android prior to version 42.40.2800, NTT DOCOMO +Message App for iOS prior to version 1.1.23, KDDI +Message App for Android prior to version 1.0.6, and KDDI +Message App for iOS prior to version 1.1.23)
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0692 
Untrusted search path vulnerability in Baidu Browser Version 43.23.1000.500 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Baidu, Inc.
product: Baidu Browser
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0693 
Directory traversal vulnerability in FileZen V3.0.0 to V4.2.1 allows remote attackers to upload an arbitrary file in the specific directory in FileZen via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: Soliton Systems K.K.
product: FileZen
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0694 
FileZen V3.0.0 to V4.2.1 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: Soliton Systems K.K.
product: FileZen
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0695 
Cross-site scripting vulnerability in User-friendly SVN (USVN) Version 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: USVN Team
product: User-friendly SVN (USVN)
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0696 
OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors.
Problem types: description: Fails to manage sessions
Affected products: vendor: OpenAM Consortium
product: OpenAM
Published: 2019-02-13T18:00:00.000Z
CVE-2018-0697 
Cross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Metabase, Inc.
product: Metabase
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0698 
Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: WESEEK, Inc.
product: GROWI
Published: 2019-01-09T22:00:00.000Z
CVE-2018-0699 
Cross-site scripting vulnerability in YukiWiki 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Hiroshi Yuki
product: YukiWiki
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0700 
YukiWiki 2.1.3 and earlier does not process a particular request properly that may allow consumption of large amounts of CPU and memory resources and may result in causing a denial of service condition.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: Hiroshi Yuki
product: YukiWiki
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0701 
BlueStacks App Player (BlueStacks App Player for Windows 3.0.0 to 4.31.55, BlueStacks App Player for macOS 2.0.0 and later) allows an attacker on the same network segment to bypass access restriction to gain unauthorized access.
Problem types: description: Fails to restrict access
Affected products: vendor: BlueStacks
product: BlueStacks App Player
Published: 2018-11-15T15:00:00.000Z
CVE-2018-0702 
Directory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to delete arbitrary files via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: Cybozu, Inc.
product: Cybozu Mailwise
Published: 2019-01-09T22:00:00.000Z
CVE-2018-0703 
Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via HTTP requests.
Problem types: description: Directory traversal
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2019-01-09T22:00:00.000Z
CVE-2018-0704 
Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via Keitai Screen.
Problem types: description: Directory traversal
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2019-01-09T22:00:00.000Z
CVE-2018-0705 
Directory traversal vulnerability in Cybozu Dezie 8.0.2 to 8.1.2 allows remote attackers to read arbitrary files via HTTP requests.
Problem types: description: Directory traversal
Affected products: vendor: Cybozu, Inc.
product: Cybozu Dezie
Published: 2019-01-09T22:00:00.000Z
CVE-2018-0706 
Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access sensitive information.
Problem types: description: Exposure of Private Information
Affected products: vendor: QNAP
product: Q'center Virtual Appliance
Published: 2018-07-16T15:00:00.000Z
CVE-2018-0707 
Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
Problem types: description: Command Injection
Affected products: vendor: QNAP
product: Q'center Virtual Appliance
Published: 2018-07-16T15:00:00.000Z
CVE-2018-0708 
Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
Problem types: description: Command Injection
Affected products: vendor: QNAP
product: Q'center Virtual Appliance
Published: 2018-07-16T15:00:00.000Z
CVE-2018-0709 
Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
Problem types: description: Command Injection
Affected products: vendor: QNAP
product: Q'center Virtual Appliance
Published: 2018-07-16T15:00:00.000Z
CVE-2018-0710 
Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
Problem types: description: Command Injection
Affected products: vendor: QNAP
product: Q'center Virtual Appliance
Published: 2018-07-16T15:00:00.000Z
CVE-2018-0711 
Cross-site scripting (XSS) vulnerability in QNAP QTS 4.3.3 build 20180126, QTS 4.3.4 build 20180315, and their earlier versions could allow remote attackers to inject arbitrary web script or HTML.
Problem types: description: Cross-site scripting
Affected products: vendor: QNAP
product: QTS
Published: 2018-04-30T13:00:00.000Z
CVE-2018-0712 
Command injection vulnerability in LDAP Server in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20180402, QTS 4.3.4 build 20180413 and their earlier versions could allow remote attackers to run arbitrary commands or install malware on the NAS.
Problem types: description: Command Injection
Affected products: vendor: QNAP
product: LDAP Server in QTS
Published: 2018-06-21T13:00:00.000Z
CVE-2018-0714 
Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528 and their earlier versions could allow remote attackers to run arbitrary commands in the compromised application.
Problem types: description: Command Injection
Affected products: vendor: QNAP
product: Helpdesk in QTS
Published: 2018-08-13T13:00:00.000Z
CVE-2018-0715 
Cross-site scripting vulnerability in QNAP Photo Station versions 5.7.0 and earlier could allow remote attackers to inject Javascript code in the compromised application.
Problem types: description: Cross-site scripting
Affected products: vendor: QNAP
product: Photo Station
Published: 2018-08-27T13:00:00.000Z
CVE-2018-0716 
Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject Javascript code in the compromised application.
Problem types: description: Cross-site scripting
Affected products: vendor: QNAP
product: Qsync Central
Published: 2018-11-30T14:00:00.000Z
CVE-2018-0718 
Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands in the compromised application.
Problem types: description: Command Injection
Affected products: vendor: QNAP
product: Music Station
Published: 2018-09-14T13:00:00.000Z
CVE-2018-0719 Security Advisory for Vulnerabilities in QTS
Cross-site Scripting (XSS) vulnerability in NAS devices of QNAP Systems Inc. QTS allows attackers to inject javascript. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on build 20180725; version 4.3.4 and prior versions on build 20180710.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: QNAP Systems Inc.
product: QTS
vendor: QNAP Systems Inc.
product: QTS
vendor: QNAP Systems Inc.
product: QTS
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Davide Cioccia, security researcher
Published: 2018-11-27T21:00:00.000Z
CVE-2018-0721 Security Advisory for Vulnerabilities in QTS
Buffer Overflow vulnerability in NAS devices. QTS allows attackers to run arbitrary code. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on build 20180725; version 4.3.4 and prior versions on build 20180710.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: QNAP Systems Inc.
product: QTS
vendor: QNAP Systems Inc.
product: QTS
vendor: QNAP Systems Inc.
product: QTS
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.7
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L
version: 3.1
Credits: lang: en
value: Yuki, security researcher
Published: 2018-11-27T22:00:00.000Z
CVE-2018-0722 
Path Traversal vulnerability in Photo Station versions: 5.7.2 and earlier in QTS 4.3.4, 5.4.4 and earlier in QTS 4.3.3, 5.2.8 and earlier in QTS 4.2.6 could allow remote attackers to access sensitive information on the device.
Problem types: description: Path Traversal
Affected products: vendor: QNAP
product: Photo Station
Published: 2019-02-01T18:00:00.000Z
CVE-2018-0723 
Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724.
Problem types: description: Cross-site scripting
Affected products: vendor: QNAP
product: Q'center Virtual Appliance
Published: 2018-12-26T16:00:00.000Z
CVE-2018-0724 
Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723.
Problem types: description: Cross-site scripting
Affected products: vendor: QNAP
product: Q'center Virtual Appliance
Published: 2018-12-26T16:00:00.000Z
CVE-2018-0728 
This improper access control vulnerability in Helpdesk allows attackers to access the system logs. To fix the vulnerability, QNAP recommend updating QTS and Helpdesk to their latest versions.
Problem types: description: Improper Access
Affected products: vendor: n/a
product: QNAP NAS devices
Published: 2019-12-04T16:27:47.000Z
CVE-2018-0729 
This command injection vulnerability in Music Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating Music Station to their latest versions.
Problem types: description: Commend Injection
Affected products: vendor: n/a
product: QNAP NAS devices
Published: 2019-12-04T16:33:08.000Z
CVE-2018-0730 
This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.
Problem types: description: Commend Injection
Affected products: vendor: n/a
product: QNAP NAS devices
Published: 2019-12-04T16:37:11.000Z
CVE-2018-0732 Client DoS due to large DH parameter
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).
Problem types: description: Client side Denial of Service
Affected products: vendor: OpenSSL
product: OpenSSL
Credits: lang: en
value: Guido Vranken
Published: 2018-06-12T13:00:00.000Z
CVE-2018-0733 Incorrect CRYPTO_memcmp on HP-UX PA-RISC
Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security claims of the scheme. The module can only be compiled by the HP-UX assembler, so that only HP-UX PA-RISC targets are affected. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g).
Problem types: description: Message forgery
Affected products: vendor: OpenSSL
product: OpenSSL
Credits: lang: en
value: Peter Waltenberg (IBM)
Published: 2018-03-27T21:00:00.000Z
CVE-2018-0734 Timing attack against DSA
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).
Problem types: description: Constant time issue
Affected products: vendor: OpenSSL
product: OpenSSL
Credits: lang: en
value: Samuel Weiser
Published: 2018-10-30T12:00:00.000Z
CVE-2018-0735 Timing attack against ECDSA signature generation
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).
Problem types: description: Constant time issue
Affected products: vendor: OpenSSL
product: OpenSSL
Credits: lang: en
value: Samuel Weiser
Published: 2018-10-29T13:00:00.000Z
CVE-2018-0737 Cache timing vulnerability in RSA Key Generation
The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).
Problem types: description: Constant time issue
Affected products: vendor: OpenSSL
product: OpenSSL
Credits: lang: en
value: Alejandro Cabrera Aldaya, Billy Brumley, Cesar Pereida Garcia and Luis Manuel Alvarez Tapia
Published: 2018-04-16T17:00:00.000Z
CVE-2018-0739 Constructed ASN.1 types with a recursive definition could exceed the stack
Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).
Problem types: description: Stack overflow
Affected products: vendor: OpenSSL
product: OpenSSL
Credits: lang: en
value: OSS-fuzz
Published: 2018-03-27T21:00:00.000Z
CVE-2018-0741 
The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Microsoft Color Management Information Disclosure Vulnerability".
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft Corporation
product: Color Management Module (Icm32.dll)
Published: 2018-01-04T14:00:00.000Z
CVE-2018-0742 
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0756. CVE-2018-0809, CVE-2018-0820 and CVE-2018-0843.
Problem types: description: Important
Affected products: vendor: Microsoft Corporation
product: Windows
Published: 2018-02-15T02:00:00.000Z
CVE-2018-0743 
Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability".
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft Corporation
product: Windows Subsystem for Linux
Published: 2018-01-04T14:00:00.000Z
CVE-2018-0744 
The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability".
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft Corporation
product: Windows kernel
Published: 2018-01-04T14:00:00.000Z
CVE-2018-0745 
The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0746 and CVE-2018-0747.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft Corporation
product: Windows kernel
Published: 2018-01-04T14:00:00.000Z
CVE-2018-0746 
The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0745 and CVE-2018-0747.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft Corporation
product: Windows kernel
Published: 2018-01-04T14:00:00.000Z
CVE-2018-0747 
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0745 and CVE-2018-0746.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft Corporation
product: Windows kernel
Published: 2018-01-04T14:00:00.000Z