2018

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. A

Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafte

An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This affe

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulner

Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of serv

react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a comman

React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names a

The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires con

folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in m

An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks

A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to

Multipart-file uploads call variables to be improperly registered in the global scope. In cases where variables are not

In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archiv

JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass

A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by ope

The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring

The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmwa

The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parame

ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c.

CuppaCMS has XSS via an SVG document uploaded to the administrator/#/component/table_manager/view/cu_views URI.

Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter.

HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter.

Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page "body" field.

Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page title field.

No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter.

No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter.

There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-16

FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related

Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, ve

ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_csv_decode2 function in ok_csv.c.

Apache NetBeans (incubating) 9.0 NetBeans Proxy Auto-Configuration (PAC) interpretation is vulnerable for remote command

ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_wav_decode_ms_adpcm_data function in ok_wa

public\install\install.php in CIM 0.9.3 allows remote attackers to reload the product via the public/install/#/step3 URI

TEMMOKU T1.09 Beta allows admin/user/add CSRF.

UWA 2.3.11 allows index.php?g=admin&c=admin&a=add_admin_do CSRF.

imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI.

imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter.

imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/che

imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI.

imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.p

imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI.

imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.ph

Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in Template/edit/path URIs, as demon

Lei Feng TV CMS (aka LFCMS) 3.8.6 allows admin.php?s=/Member/add.html CSRF.

Lei Feng TV CMS (aka LFCMS) 3.8.6 allows full path disclosure via the /install.php?s=/1 URI.

UCMS 1.4.7 has XSS via the description parameter in an index.php list_editpost action.

sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.

UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_fileed