Tag: 0day

[remote] HPE iMC – dbman RestoreDBase Unauthenticated Remote Command Execution (Metasploit)

[webapps] SAP NetWeaver J2EE Engine 7.40 – SQL Injection

[dos] Multiple CPUs – Information Leak Using Speculative Execution

[dos] Microsoft Edge Chakra – 'asm.js' Out-of-Bounds Read

[dos] Microsoft Windows – 'nt!NtQueryInformationProcess (information class 76, QueryProcessEnergyValues)' Kernel Stack Memory Disclosure

[dos] Microsoft Edge Chakra JIT – Escape Analysis Bug

[dos] Microsoft Edge Chakra JIT – BackwardPass::RemoveEmptyLoopAfterMemOp Does not Insert Branches

[dos] Microsoft Windows – 'nt!NtQuerySystemInformation (information class 138, QueryMemoryTopologyInformation)' Kernel Pool Memory Disclosure

[dos] Microsoft Edge Chakra JIT – Op_MaxInAnArray and Op_MinInAnArray can Explicitly call User-Defined JavaScript Functions

[dos] Disk Pulse Enterprise 10.1.18 – Denial of Service