Category: Security

[local] Jungo Windriver 12.5.1 – Privilege Escalation

[webapps] D-Link Routers 110/412/615/815 < 1.03 – 'service.cgi' Arbitrary Code Execution

[remote] HPE iMC – dbman RestoreDBase Unauthenticated Remote Command Execution (Metasploit)

[webapps] SAP NetWeaver J2EE Engine 7.40 – SQL Injection

[dos] Multiple CPUs – Information Leak Using Speculative Execution

[dos] Microsoft Edge Chakra – 'asm.js' Out-of-Bounds Read

[dos] Microsoft Windows – 'nt!NtQueryInformationProcess (information class 76, QueryProcessEnergyValues)' Kernel Stack Memory Disclosure

[dos] Microsoft Edge Chakra JIT – Escape Analysis Bug

[dos] Microsoft Edge Chakra JIT – BackwardPass::RemoveEmptyLoopAfterMemOp Does not Insert Branches

[dos] Microsoft Windows – 'nt!NtQuerySystemInformation (information class 138, QueryMemoryTopologyInformation)' Kernel Pool Memory Disclosure