2018

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity (UMCI)

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, a

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packe

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized

A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Co

Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a maliciou

Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatib

389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needi

In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of serv

An issue was discovered in HAProxy before 1.8.8. The incoming H2 frame length was checked against the max_frame_size set

Z-NOMP before 2018-04-05 has an incorrect Equihash solution verifier that allows attackers to spoof mining shares, as de

LiteCart before 2.1.2 allows remote attackers to cause a denial of service (memory consumption) via URIs that do not exi

The Owned smart contract implementation for Aurora DAO (AURA), an Ethereum ERC20 token, allows attackers to acquire cont

Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) wa

A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(c

nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC fr

RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability

Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0.1522077968 are affected by multiple OS command injecti

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack.

In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD)

In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD)

Spring Cloud SSO Connector, version 2.1.2, contains a regression which disables issuer validation in resource servers th

Liferay 6.2.x and before has an FCKeditor configuration that allows an attacker to upload or transfer files of dangerous

Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows rem

Buffer overflow in the WriteMP3GainAPETag function in apetag.c in mp3gain through 1.5.2-r2 allows remote attackers to ca

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of serv

There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lea