ilsani/rd

Releases0

Security advisories and random stuff

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-18519 ↗	Nov 19, 2018Monday, 19 November 2018, 08:29	—	6.8 MEDIUM
BestXsoftware Best Free Keylogger before 6.0.0 allows local users to gain privileges via a Trojan horse "%PROGRAMFILES%\BFK 5.2.9\syscrb.exe" file because of insecure permissions for the BUILTIN\Users group.
CVE-2017-8114 ↗	Apr 29, 2017Saturday, 29 April 2017, 19:59	8.8 HIGH	6.5 MEDIUM
Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin.
CVE-2017-6078 ↗	Feb 21, 2017Tuesday, 21 February 2017, 07:59	—	4.3 MEDIUM
FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with a crafted biSize field in the BITMAPINFOHEADER section.