2018

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm

An exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core's HTTP server of Samsun

An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 -

AccuPOS 2017.8 is installed with the insecure "Authenticated Users: Modify" permission for files within the installation

POSIM EVO 15.13 for Windows includes hardcoded database credentials for the "root" database user. "root" access to POSIM

POSIM EVO 15.13 for Windows includes an "Emergency Override" administrative account that may be accessed through POSIM's

The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values

Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the se

Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 may allow non-administrative users to change executable a

Becton, Dickinson and Company (BD) Alaris Plus medical syringe pumps (models Alaris GS, Alaris GH, Alaris CC, and Alaris

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory corruption vulnerability. An authenticated remote a

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An authenticated remote at

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An authenticated remote a

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface.

curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server.

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts

A improper authorization vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in UpdateCenter.java tha

A exposure of sensitive information vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in Computer.j

A improper authentication vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in SecurityRealm.java,

A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in CronTab.java that allows a

A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.

A vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in XStream2.java that allows attackers to have

An issue was discovered in the MapR File System in MapR Converged Data Platform and MapR-XD 6.x and earlier. Under certa

An exploitable buffer overflow vulnerability exists in the PubNub message handler for the "control" channel of Insteon H

An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1

An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server o

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts

An exploitable buffer overflow vulnerability exists in the camera "create" feature of video-core's HTTP server of Samsun

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extract

An exploitable buffer overflow vulnerability exists in the camera "replace" feature of video-core's HTTP server of Samsu

An exploitable JSON injection vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sma

Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Sam

An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-co

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extract

On Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine Firmware Version 1.10.65, and Network Firmware

On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted commands sent through the PubNub service c

On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service c

On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service c

An exploitable firmware downgrade vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrad

An exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013. The HTTP server allows

An exploitable denial of service vulnerability exists in Insteon Hub running firmware version 1012. Leftover demo functi

GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindow

A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authentica

A vulnerability was found while fuzzing libbpg 0.9.7. It is a NULL pointer dereference issue due to missing check of the

A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnera

This affects Apache Cayenne 4.1.M1, 3.2.M1, 4.0.M2 to 4.0.M5, 4.0.B1, 4.0.B2, 4.0.RC1, 3.1, 3.1.1, 3.1.2. CayenneModeler

In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both t

In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device d

In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an