2018

An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. The

IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution. IBM

An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe al

Centers for Disease Control and Prevention MicrobeTRACE 0.1.12 allows remote attackers to execute arbitrary code, relate

Centers for Disease Control and Prevention MicrobeTRACE 0.1.11 allows remote attackers to execute arbitrary code, relate

bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.

mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote

Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to w

Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafte

Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing s

NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol (JDWP) enabled

There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going

From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to

The TPM on Integrated Management Module II (IMM2) on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows

In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an aut

glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenti

An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh (aka SMT), an Ethereu

An issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary files in the KTextEditor's

In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER rec

The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and

Buffer overflow in MedCoreD.sys in AhnLab V3 Internet Security 8.0.7.5 (Build 1373) allows local users to gain privilege

An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially c

An exploitable heap-based buffer overflow vulnerability exists in the read_legacy_biff function of FreeXL 1.0.3. A speci

An exploitable heap based buffer overflow vulnerability exists in the 'read_biff_next_record function' of FreeXL 1.0.3.

An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v

An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite versi

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation sui

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation sui

An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite ver

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suit

An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite ver

An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite ver

An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite ve

An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite ver

An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite ve

A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. A specially

An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A

An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11.

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Ca

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Ca

A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9. A specially crafted JPE

A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images. A specially crafte

A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A

A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0

An exploitable dll hijacking vulnerability exists in the poaService.exe service component of the Dell Precision Optimize

A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted G

A double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF

An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A speci

An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2_image-2.0.2. A speci