Provide references for further information: Can you share references or external links related to CVE-2018-0691?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.au.com/information/notice_mobile/service/2018-002/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.softbank.jp/mobile/info/personal/news/service/20180927a/'}, {'name': 'JVN#37288228', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN37288228/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.nttdocomo.co.jp/info/notice/page/180927_00.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0691?


Explain the CVE ID: What does the identifier CVE-2018-0692 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0692.

Untrusted search path vulnerability in Baidu Browser Version 43.23.1000.500 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.


Provide references for further information: Can you share references or external links related to CVE-2018-0692?

{'name': 'JVN#77885134', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN77885134/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0692?


Explain the CVE ID: What does the identifier CVE-2018-0693 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0693.

Directory traversal vulnerability in FileZen V3.0.0 to V4.2.1 allows remote attackers to upload an arbitrary file in the specific directory in FileZen via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2018-0693?

{'name': 'JVN#95355683', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN95355683/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.soliton.co.jp/support/2018/003328.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0693?


Explain the CVE ID: What does the identifier CVE-2018-0694 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0694.

FileZen V3.0.0 to V4.2.1 allows remote attackers to execute arbitrary OS commands via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2018-0694?


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0694?


Explain the CVE ID: What does the identifier CVE-2018-0695 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0695.

Cross-site scripting vulnerability in User-friendly SVN (USVN) Version 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2018-0695?

{'name': 'JVN#73794686', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN73794686/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.usvn.info/2018/10/02/usvn-1.0.8'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0695?


Explain the CVE ID: What does the identifier CVE-2018-0696 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0696.

OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2018-0696?

{'name': 'JVN#49995005', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN49995005/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.cs.themistruct.com/report/wam20181012'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.osstech.co.jp/support/am2018-4-1-en'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0696?


Explain the CVE ID: What does the identifier CVE-2018-0697 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0697.

Cross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2018-0697?

{'name': 'JVN#14323043', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN14323043/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://metabase.com/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0697?


Explain the CVE ID: What does the identifier CVE-2018-0698 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0698.

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2018-0698?

{'name': 'JVN#96493183', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'https://jvn.jp/en/jp/JVN96493183/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://weseek.co.jp/security/2018/12/25/growi-prevent-xss2/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0698?


Explain the CVE ID: What does the identifier CVE-2018-0699 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0699.

Cross-site scripting vulnerability in YukiWiki 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2018-0699?

{'name': 'JVN#36343375', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN36343375/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hyuki.com/yukiwiki/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0699?


Explain the CVE ID: What does the identifier CVE-2018-0700 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0700.

YukiWiki 2.1.3 and earlier does not process a particular request properly that may allow consumption of large amounts of CPU and memory resources and may result in causing a denial of service condition.


Provide references for further information: Can you share references or external links related to CVE-2018-0700?


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0700?


Explain the CVE ID: What does the identifier CVE-2018-0701 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0701.

BlueStacks App Player (BlueStacks App Player for Windows 3.0.0 to 4.31.55, BlueStacks App Player for macOS 2.0.0 and later) allows an attacker on the same network segment to bypass access restriction to gain unauthorized access.


Provide references for further information: Can you share references or external links related to CVE-2018-0701?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.bluestacks.com/hc/en-us/articles/360018274091'}, {'name': 'JVN#60702986', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN60702986/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0701?


Explain the CVE ID: What does the identifier CVE-2018-0702 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0702.

Directory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to delete arbitrary files via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2018-0702?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.cybozu.support/article/34135/'}, {'name': 'JVN#83739174', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'https://jvn.jp/en/jp/JVN83739174/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0702?


Explain the CVE ID: What does the identifier CVE-2018-0703 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0703.

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via HTTP requests.


Provide references for further information: Can you share references or external links related to CVE-2018-0703?

{'name': 'JVN#15232217', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'https://jvn.jp/en/jp/JVN15232217/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://kb.cybozu.support/article/34088/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0703?


Explain the CVE ID: What does the identifier CVE-2018-0704 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0704.

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via Keitai Screen.


Provide references for further information: Can you share references or external links related to CVE-2018-0704?

{'name': 'JVN#15232217', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'https://jvn.jp/en/jp/JVN15232217/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://kb.cybozu.support/article/34091/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0704?


Explain the CVE ID: What does the identifier CVE-2018-0705 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0705.

Directory traversal vulnerability in Cybozu Dezie 8.0.2 to 8.1.2 allows remote attackers to read arbitrary files via HTTP requests.


Provide references for further information: Can you share references or external links related to CVE-2018-0705?

{'name': 'JVN#16697622', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'https://jvn.jp/en/jp/JVN16697622/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://kb.cybozu.support/article/34089/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0705?


Explain the CVE ID: What does the identifier CVE-2018-0706 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0706.

Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access sensitive information.


Provide references for further information: Can you share references or external links related to CVE-2018-0706?

{'name': '45015', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/45015/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.coresecurity.com/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities'}, {'name': '20180711 [CORE-2018-0006] - QNAP Qcenter Virtual Appliance Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2018/Jul/45'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/148515/QNAP-Qcenter-Virtual-Appliance-1.6.x-Information-Disclosure-Command-Injection.html'}, {'name': '45043', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/45043/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qnap.com/zh-tw/security-advisory/nas-201807-10'}, {'name': '20180711 [CORE-2018-0006] - QNAP Qcenter Virtual Appliance Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'https://www.securityfocus.com/archive/1/542141/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0706?


Explain the CVE ID: What does the identifier CVE-2018-0707 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0707.

Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.


Provide references for further information: Can you share references or external links related to CVE-2018-0707?


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0707?


Explain the CVE ID: What does the identifier CVE-2018-0708 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0708.

Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.


Provide references for further information: Can you share references or external links related to CVE-2018-0708?

{'name': '45015', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/45015/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.coresecurity.com/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities'}, {'name': '20180711 [CORE-2018-0006] - QNAP Qcenter Virtual Appliance Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2018/Jul/45'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/148515/QNAP-Qcenter-Virtual-Appliance-1.6.x-Information-Disclosure-Command-Injection.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qnap.com/zh-tw/security-advisory/nas-201807-10'}, {'name': '20180711 [CORE-2018-0006] - QNAP Qcenter Virtual Appliance Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'https://www.securityfocus.com/archive/1/542141/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0708?


Explain the CVE ID: What does the identifier CVE-2018-0709 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0709.

Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.


Provide references for further information: Can you share references or external links related to CVE-2018-0709?


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0709?


Explain the CVE ID: What does the identifier CVE-2018-0710 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0710.

Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.


Provide references for further information: Can you share references or external links related to CVE-2018-0710?


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0710?


Explain the CVE ID: What does the identifier CVE-2018-0711 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0711.

Cross-site scripting (XSS) vulnerability in QNAP QTS 4.3.3 build 20180126, QTS 4.3.4 build 20180315, and their earlier versions could allow remote attackers to inject arbitrary web script or HTML.


Provide references for further information: Can you share references or external links related to CVE-2018-0711?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qnap.com/zh-tw/security-advisory/nas-201804-27'}, {'name': '1040779', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040779'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0711?


Explain the CVE ID: What does the identifier CVE-2018-0712 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0712.

Command injection vulnerability in LDAP Server in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20180402, QTS 4.3.4 build 20180413 and their earlier versions could allow remote attackers to run arbitrary commands or install malware on the NAS.


Provide references for further information: Can you share references or external links related to CVE-2018-0712?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qnap.com/zh-tw/security-advisory/nas-201806-19'}, {'name': '1041141', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1041141'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0712?


Explain the CVE ID: What does the identifier CVE-2018-0714 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0714.

Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528 and their earlier versions could allow remote attackers to run arbitrary commands in the compromised application.


Provide references for further information: Can you share references or external links related to CVE-2018-0714?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qnap.com/zh-tw/security-advisory/nas-201808-13'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0714?


Explain the CVE ID: What does the identifier CVE-2018-0715 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0715.

Cross-site scripting vulnerability in QNAP Photo Station versions 5.7.0 and earlier could allow remote attackers to inject Javascript code in the compromised application.


Provide references for further information: Can you share references or external links related to CVE-2018-0715?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qnap.com/zh-tw/security-advisory/nas-201808-23'}, {'name': '45348', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/45348/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0715?


Explain the CVE ID: What does the identifier CVE-2018-0716 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0716.

Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject Javascript code in the compromised application.


Provide references for further information: Can you share references or external links related to CVE-2018-0716?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qnap.com/zh-tw/security-advisory/nas-201811-29'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0716?


Explain the CVE ID: What does the identifier CVE-2018-0718 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0718.

Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands in the compromised application.


Provide references for further information: Can you share references or external links related to CVE-2018-0718?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qnap.com/zh-tw/security-advisory/nas-201809-14'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0718?


Explain the CVE ID: What does the identifier CVE-2018-0719 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0719.

Cross-site Scripting (XSS) vulnerability in NAS devices of QNAP Systems Inc. QTS allows attackers to inject javascript. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on build 20180725; version 4.3.4 and prior versions on build 20180710.


Provide references for further information: Can you share references or external links related to CVE-2018-0719?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qnap.com/zh-tw/security-advisory/nas-201809-20'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0719?


Explain the CVE ID: What does the identifier CVE-2018-0721 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0721.

Buffer Overflow vulnerability in NAS devices. QTS allows attackers to run arbitrary code. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on build 20180725; version 4.3.4 and prior versions on build 20180710.


Provide references for further information: Can you share references or external links related to CVE-2018-0721?


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0721?


Explain the CVE ID: What does the identifier CVE-2018-0722 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0722.

Path Traversal vulnerability in Photo Station versions: 5.7.2 and earlier in QTS 4.3.4, 5.4.4 and earlier in QTS 4.3.3, 5.2.8 and earlier in QTS 4.2.6 could allow remote attackers to access sensitive information on the device.


Provide references for further information: Can you share references or external links related to CVE-2018-0722?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qnap.com/zh-tw/security-advisory/nas-201901-14'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0722?


Explain the CVE ID: What does the identifier CVE-2018-0723 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0723.

Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724.


Provide references for further information: Can you share references or external links related to CVE-2018-0723?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qnap.com/zh-tw/security-advisory/nas-201812-26'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0723?


Explain the CVE ID: What does the identifier CVE-2018-0724 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0724.

Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723.


Provide references for further information: Can you share references or external links related to CVE-2018-0724?


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0724?


Explain the CVE ID: What does the identifier CVE-2018-0728 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0728.

This improper access control vulnerability in Helpdesk allows attackers to access the system logs. To fix the vulnerability, QNAP recommend updating QTS and Helpdesk to their latest versions.


Provide references for further information: Can you share references or external links related to CVE-2018-0728?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qnap.com/zh-tw/security-advisory/nas-201911-20'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0728?


Explain the CVE ID: What does the identifier CVE-2018-0729 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0729.

This command injection vulnerability in Music Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating Music Station to their latest versions.


Provide references for further information: Can you share references or external links related to CVE-2018-0729?


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0729?


Explain the CVE ID: What does the identifier CVE-2018-0730 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0730.

This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.


Provide references for further information: Can you share references or external links related to CVE-2018-0730?


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0730?


Explain the CVE ID: What does the identifier CVE-2018-0731 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0731.


Provide references for further information: Can you share references or external links related to CVE-2018-0731?


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0731?


Explain the CVE ID: What does the identifier CVE-2018-0732 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0732.

During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).


Provide references for further information: Can you share references or external links related to CVE-2018-0732?

{'name': '[debian-lts-announce] 20180728 [SECURITY] [DLA 1449-1] openssl security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html'}, {'name': '104442', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/104442'}, {'name': 'DSA-4355', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4355'}, {'name': 'RHSA-2018:2552', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:2552'}, {'name': 'GLSA-201811-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201811-03'}, {'name': 'USN-3692-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3692-2/'}, {'name': 'RHSA-2018:2553', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:2553'}, {'name': 'RHSA-2018:3505', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:3505'}, {'name': 'USN-3692-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3692-1/'}, {'name': 'RHSA-2018:3221', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:3221'}, {'name': 'DSA-4348', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4348'}, {'name': '1041090', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1041090'}, {'name': 'RHSA-2019:1297', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:1297'}, {'name': 'RHSA-2019:1296', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:1296'}, {'name': 'RHSA-2019:1543', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:1543'}, {'name': 'FEDORA-2019-db06efdea1', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/'}, {'name': 'FEDORA-2019-00c25b9379', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/'}, {'name': 'FEDORA-2019-9a0a7c0986', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpuapr2020.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujan2021.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-14'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://securityadvisories.paloaltonetworks.com/Home/Detail/133'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-13'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-17'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-12'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20181105-0001/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3984ef0b72831da8b3ece4745cac4f8575b19098'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.openssl.org/news/secadv/20180612.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ea7abeeabf92b7aca160bdd0208636d4da69f4f4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20190118-0002/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-419820.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0732?


Explain the CVE ID: What does the identifier CVE-2018-0733 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0733.

Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security claims of the scheme. The module can only be compiled by the HP-UX assembler, so that only HP-UX PA-RISC targets are affected. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g).


Provide references for further information: Can you share references or external links related to CVE-2018-0733?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-07'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-04'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html'}, {'name': 'GLSA-201811-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201811-21'}, {'name': '103517', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/103517'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-06'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20180330-0002/'}, {'name': '1040576', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040576'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=56d5a4bfcaf37fa420aef2bb881aa55e61cf5f2f'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.openssl.org/news/secadv/20180327.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0733?


Explain the CVE ID: What does the identifier CVE-2018-0734 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0734.

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).


Provide references for further information: Can you share references or external links related to CVE-2018-0734?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html'}, {'name': 'USN-3840-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3840-1/'}, {'name': 'DSA-4355', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4355'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20181105-0002/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8abfe72e8c1de1b95f50aa0d9134803b4d00070f'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-17'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-16'}, {'name': '105758', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/105758'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ef11e19d1365eea2b1851e6f540a0bf365d303e7'}, {'name': 'DSA-4348', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4348'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=43e6a58d4991a451daf4891ff05a48735df871ac'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.openssl.org/news/secadv/20181030.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20190118-0002/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20190423-0002/'}, {'name': 'openSUSE-SU-2019:1547', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html'}, {'name': 'openSUSE-SU-2019:1814', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html'}, {'name': 'RHSA-2019:2304', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:2304'}, {'name': 'FEDORA-2019-db06efdea1', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/'}, {'name': 'FEDORA-2019-00c25b9379', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/'}, {'name': 'FEDORA-2019-9a0a7c0986', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/'}, {'name': 'RHSA-2019:3700', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:3700'}, {'name': 'RHSA-2019:3933', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:3933'}, {'name': 'RHSA-2019:3935', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:3935'}, {'name': 'RHSA-2019:3932', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:3932'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujan2020.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpuapr2020.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0734?


Explain the CVE ID: What does the identifier CVE-2018-0735 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0735.

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).


Provide references for further information: Can you share references or external links related to CVE-2018-0735?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=56fb454d281a023b3f950d969693553d3f3ceea1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html'}, {'name': '105750', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/105750'}, {'name': 'USN-3840-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3840-1/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20181105-0002/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/'}, {'name': '1041986', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1041986'}, {'name': '[debian-lts-announce] 20181121 [SECURITY] [DLA 1586-1] openssl security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html'}, {'name': 'DSA-4348', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4348'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=b1d6d55ece1c26fa2829e2b819b038d7b6d692b4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.openssl.org/news/secadv/20181029.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html'}, {'name': 'RHSA-2019:3700', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:3700'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujan2020.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0735?


Explain the CVE ID: What does the identifier CVE-2018-0736 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0736.


Provide references for further information: Can you share references or external links related to CVE-2018-0736?


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0736?


Explain the CVE ID: What does the identifier CVE-2018-0737 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0737.

The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).


Provide references for further information: Can you share references or external links related to CVE-2018-0737?

{'name': '[debian-lts-announce] 20180728 [SECURITY] [DLA 1449-1] openssl security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html'}, {'name': 'DSA-4355', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4355'}, {'name': 'USN-3628-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3628-2/'}, {'name': 'GLSA-201811-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201811-21'}, {'name': 'USN-3692-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3692-2/'}, {'name': 'RHSA-2018:3505', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:3505'}, {'name': '103766', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/103766'}, {'name': 'USN-3692-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3692-1/'}, {'name': 'RHSA-2018:3221', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:3221'}, {'name': 'DSA-4348', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4348'}, {'name': '1040685', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040685'}, {'name': 'USN-3628-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3628-1/'}, {'name': 'FEDORA-2019-db06efdea1', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/'}, {'name': 'FEDORA-2019-00c25b9379', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/'}, {'name': 'FEDORA-2019-9a0a7c0986', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/'}, {'name': 'RHSA-2019:3933', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:3933'}, {'name': 'RHSA-2019:3935', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:3935'}, {'name': 'RHSA-2019:3932', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:3932'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpuapr2020.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-14'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://securityadvisories.paloaltonetworks.com/Home/Detail/133'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-13'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-17'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-12'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com//security-alerts/cpujul2021.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=349a41da1ad88ad87825414752a8ff5fdd6a6c3f'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6939eab03a6e23d2bd2c3f5e34fe1d48e542e787'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.openssl.org/news/secadv/20180416.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20180726-0003/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0737?


Explain the CVE ID: What does the identifier CVE-2018-0738 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0738.


Provide references for further information: Can you share references or external links related to CVE-2018-0738?


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0738?


Explain the CVE ID: What does the identifier CVE-2018-0739 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0739.

Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).


Provide references for further information: Can you share references or external links related to CVE-2018-0739?

{'name': 'USN-3611-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3611-2/'}, {'name': 'DSA-4158', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4158'}, {'name': 'GLSA-201811-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201811-21'}, {'name': 'RHSA-2019:0367', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:0367'}, {'name': 'DSA-4157', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4157'}, {'name': 'RHSA-2018:3505', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:3505'}, {'name': '103518', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/103518'}, {'name': '1040576', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040576'}, {'name': 'RHSA-2018:3221', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:3221'}, {'name': '105609', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/105609'}, {'name': 'USN-3611-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3611-1/'}, {'name': '[debian-lts-announce] 20180330 [SECURITY] [DLA 1330-1] openssl security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/03/msg00033.html'}, {'name': 'RHSA-2019:0366', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:0366'}, {'name': 'RHSA-2018:3090', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:3090'}, {'name': 'RHSA-2019:1711', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:1711'}, {'name': 'RHSA-2019:1712', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:1712'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20180726-0002/'}, {'name': 'GLSA-202007-53', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202007-53'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://securityadvisories.paloaltonetworks.com/Home/Detail/133'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com//security-alerts/cpujul2021.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-07'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-04'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2ac4c6f7b2b2af20c0e2b0ba05367e454cd11b33'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9310d45087ae546e27e61ddf8f6367f29848220d'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2018-06'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20180330-0002/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.openssl.org/news/secadv/20180327.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0739?


Explain the CVE ID: What does the identifier CVE-2018-0740 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0740.


Provide references for further information: Can you share references or external links related to CVE-2018-0740?


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0740?


Explain the CVE ID: What does the identifier CVE-2018-0741 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0741.

The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Microsoft Color Management Information Disclosure Vulnerability".


Provide references for further information: Can you share references or external links related to CVE-2018-0741?

{'name': '102349', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102349'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0741'}, {'name': '1040093', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040093'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0741?


Explain the CVE ID: What does the identifier CVE-2018-0742 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0742.

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0756. CVE-2018-0809, CVE-2018-0820 and CVE-2018-0843.


Provide references for further information: Can you share references or external links related to CVE-2018-0742?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0742'}, {'name': '102937', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102937'}, {'name': '1040373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040373'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0742?


Explain the CVE ID: What does the identifier CVE-2018-0743 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0743.

Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability".


Provide references for further information: Can you share references or external links related to CVE-2018-0743?

{'name': '1040094', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040094'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/saaramar/execve_exploit'}, {'tags': ['x_refsource_MISC'], 'url': 'https://twitter.com/AmarSaar/status/948892321755598848'}, {'name': '43962', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43962/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0743'}, {'name': '102350', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102350'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0743?


Explain the CVE ID: What does the identifier CVE-2018-0744 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0744.

The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability".


Provide references for further information: Can you share references or external links related to CVE-2018-0744?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0744'}, {'name': '102351', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102351'}, {'name': '1040090', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040090'}, {'name': '43446', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43446/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0744?


Explain the CVE ID: What does the identifier CVE-2018-0745 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0745.

The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0746 and CVE-2018-0747.


Provide references for further information: Can you share references or external links related to CVE-2018-0745?

{'name': '1040097', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040097'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0745'}, {'name': '102353', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102353'}, {'name': '43470', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43470/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0745?


Explain the CVE ID: What does the identifier CVE-2018-0746 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0746.

The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0745 and CVE-2018-0747.


Provide references for further information: Can you share references or external links related to CVE-2018-0746?

{'name': '1040097', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040097'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0746'}, {'name': '43471', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43471/'}, {'name': '102365', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102365'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0746?


Explain the CVE ID: What does the identifier CVE-2018-0747 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0747.

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0745 and CVE-2018-0746.


Provide references for further information: Can you share references or external links related to CVE-2018-0747?

{'name': '1040097', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040097'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0747'}, {'name': '102366', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102366'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0747?


Explain the CVE ID: What does the identifier CVE-2018-0748 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0748.

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way memory addresses are handled, aka "Windows Elevation of Privilege Vulnerability".


Provide references for further information: Can you share references or external links related to CVE-2018-0748?

{'name': '43514', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43514/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://95cnsec.com/windows-kernel-cve-2018-0748-exploit.html'}, {'name': '102354', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102354'}, {'name': '1040095', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040095'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0748'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0748?


Explain the CVE ID: What does the identifier CVE-2018-0749 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0749.

The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way SMB Server handles specially crafted files, aka "Windows Elevation of Privilege Vulnerability".


Provide references for further information: Can you share references or external links related to CVE-2018-0749?

{'name': '1040096', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040096'}, {'name': '102355', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102355'}, {'name': '43517', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43517/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0749'}, {'tags': ['x_refsource_MISC'], 'url': 'https://95cnsec.com/windows-smb-cve-2018-0749-exploit.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0749?


Explain the CVE ID: What does the identifier CVE-2018-0750 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0750.

The Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability".


Provide references for further information: Can you share references or external links related to CVE-2018-0750?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0750'}, {'name': '1040091', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040091'}, {'name': '102357', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102357'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0750?


Explain the CVE ID: What does the identifier CVE-2018-0751 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0751.

The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2018-0752.


Provide references for further information: Can you share references or external links related to CVE-2018-0751?

{'name': '43515', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43515/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0751'}, {'name': '102359', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102359'}, {'name': '1040095', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040095'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0751?


Explain the CVE ID: What does the identifier CVE-2018-0752 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0752.

The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2018-0751.


Provide references for further information: Can you share references or external links related to CVE-2018-0752?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0752'}, {'name': '1040095', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040095'}, {'name': '102360', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102360'}, {'name': '43516', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43516/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0752?


Explain the CVE ID: What does the identifier CVE-2018-0753 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0753.

Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a denial of service vulnerability due to the way objects are handled in memory, aka "Windows IPSec Denial of Service Vulnerability".


Provide references for further information: Can you share references or external links related to CVE-2018-0753?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0753'}, {'name': '1040089', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040089'}, {'name': '102361', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102361'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0753?


Explain the CVE ID: What does the identifier CVE-2018-0754 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0754.

The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "OpenType Font Driver Information Disclosure Vulnerability".


Provide references for further information: Can you share references or external links related to CVE-2018-0754?

{'name': '1040098', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040098'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0754'}, {'name': '102362', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102362'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0754?


Explain the CVE ID: What does the identifier CVE-2018-0755 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0755.

The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0760, CVE-2018-0761, and CVE-2018-0855.


Provide references for further information: Can you share references or external links related to CVE-2018-0755?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0755'}, {'name': '102934', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102934'}, {'name': '1040374', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040374'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0755?


Explain the CVE ID: What does the identifier CVE-2018-0756 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0756.

The Windows kernel in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0809, CVE-2018-0820 and CVE-2018-0843.


Provide references for further information: Can you share references or external links related to CVE-2018-0756?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0756'}, {'name': '1040373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040373'}, {'name': '102941', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102941'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0756?


Explain the CVE ID: What does the identifier CVE-2018-0757 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0757.

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0810.


Provide references for further information: Can you share references or external links related to CVE-2018-0757?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0757'}, {'name': '1040373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040373'}, {'name': '102947', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102947'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0757?


Explain the CVE ID: What does the identifier CVE-2018-0758 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0758.

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.


Provide references for further information: Can you share references or external links related to CVE-2018-0758?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0758'}, {'name': '102405', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102405'}, {'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}, {'name': '43491', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43491/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0758?


Explain the CVE ID: What does the identifier CVE-2018-0760 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0760.

The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2012 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0755, CVE-2018-0761, and CVE-2018-0855.


Provide references for further information: Can you share references or external links related to CVE-2018-0760?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0760'}, {'name': '102953', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102953'}, {'name': '1040374', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040374'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0760?


Explain the CVE ID: What does the identifier CVE-2018-0761 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0761.

The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0755, CVE-2018-0760, and CVE-2018-0855.


Provide references for further information: Can you share references or external links related to CVE-2018-0761?

{'name': '102952', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102952'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0761'}, {'name': '1040374', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040374'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0761?


Explain the CVE ID: What does the identifier CVE-2018-0762 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0762.

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.


Provide references for further information: Can you share references or external links related to CVE-2018-0762?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0762'}, {'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}, {'name': '102408', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102408'}, {'name': '1040099', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040099'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0762?


Explain the CVE ID: What does the identifier CVE-2018-0763 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0763.

Microsoft Edge in Microsoft Windows 10 1703 and 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0839.


Provide references for further information: Can you share references or external links related to CVE-2018-0763?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0763'}, {'name': '102873', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102873'}, {'name': '1040372', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040372'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0763?


Explain the CVE ID: What does the identifier CVE-2018-0764 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0764.

Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vulnerability". This CVE is unique from CVE-2018-0765.


Provide references for further information: Can you share references or external links related to CVE-2018-0764?

{'name': '102387', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102387'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0764'}, {'name': 'RHSA-2018:0379', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0379'}, {'name': '1040152', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040152'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0764?


Explain the CVE ID: What does the identifier CVE-2018-0765 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0765.

A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, .NET Core 2.0, Microsoft .NET Framework 4.7.2.


Provide references for further information: Can you share references or external links related to CVE-2018-0765?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0765'}, {'name': '104060', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/104060'}, {'name': '1040851', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040851'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0765?


Explain the CVE ID: What does the identifier CVE-2018-0766 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0766.

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the Microsoft Edge PDF Reader handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability".


Provide references for further information: Can you share references or external links related to CVE-2018-0766?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0766'}, {'name': '102388', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102388'}, {'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0766?


Explain the CVE ID: What does the identifier CVE-2018-0767 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0767.

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0780 and CVE-2018-0800.


Provide references for further information: Can you share references or external links related to CVE-2018-0767?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0767'}, {'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}, {'name': '102393', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102393'}, {'name': '43522', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43522/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0767?


Explain the CVE ID: What does the identifier CVE-2018-0768 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0768.

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.


Provide references for further information: Can you share references or external links related to CVE-2018-0768?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0768'}, {'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}, {'name': '102395', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102395'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0768?


Explain the CVE ID: What does the identifier CVE-2018-0769 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0769.

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.


Provide references for further information: Can you share references or external links related to CVE-2018-0769?

{'name': '102396', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102396'}, {'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}, {'name': '43710', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43710/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0769'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0769?


Explain the CVE ID: What does the identifier CVE-2018-0770 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0770.

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.


Provide references for further information: Can you share references or external links related to CVE-2018-0770?

{'name': '44075', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44075/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0770'}, {'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}, {'name': '102397', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102397'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0770?


Explain the CVE ID: What does the identifier CVE-2018-0771 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0771.

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows a security feature bypass, due to how Edge handles different-origin requests, aka "Microsoft Edge Security Feature Bypass".


Provide references for further information: Can you share references or external links related to CVE-2018-0771?

{'name': '102857', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102857'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0771'}, {'name': '1040372', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040372'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0771?


Explain the CVE ID: What does the identifier CVE-2018-0772 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0772.

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.


Provide references for further information: Can you share references or external links related to CVE-2018-0772?

{'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}, {'name': '102409', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102409'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0772'}, {'name': '1040099', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040099'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0772?


Explain the CVE ID: What does the identifier CVE-2018-0773 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0773.

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.


Provide references for further information: Can you share references or external links related to CVE-2018-0773?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0773'}, {'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}, {'name': '102398', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102398'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0773?


Explain the CVE ID: What does the identifier CVE-2018-0774 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0774.

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.


Provide references for further information: Can you share references or external links related to CVE-2018-0774?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0774'}, {'name': '43715', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43715/'}, {'name': '102399', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102399'}, {'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0774?


Explain the CVE ID: What does the identifier CVE-2018-0775 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0775.

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.


Provide references for further information: Can you share references or external links related to CVE-2018-0775?

{'name': '43717', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43717/'}, {'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0775'}, {'name': '102400', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102400'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0775?


Explain the CVE ID: What does the identifier CVE-2018-0776 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0776.

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.


Provide references for further information: Can you share references or external links related to CVE-2018-0776?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0776'}, {'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}, {'name': '43723', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43723/'}, {'name': '102401', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102401'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0776?


Explain the CVE ID: What does the identifier CVE-2018-0777 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0777.

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0778, and CVE-2018-0781.


Provide references for further information: Can you share references or external links related to CVE-2018-0777?

{'name': '102402', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102402'}, {'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}, {'name': '43718', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43718/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0777'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0777?


Explain the CVE ID: What does the identifier CVE-2018-0778 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-0778.

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, and CVE-2018-0781.


Provide references for further information: Can you share references or external links related to CVE-2018-0778?

{'name': '1040100', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040100'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0778'}, {'name': '102403', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102403'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-0778?


Explain the CVE ID: What does the identifier CVE-2018-0780 mean in the context of cybersecurity?