2018

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters.

The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter.

Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as de

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.

The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game,

The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow v

An issue was discovered in manage_filter_edit_page.php in MantisBT 2.x through 2.15.0. A cross-site scripting (XSS) vuln

A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) in MantisBT 2.1.0 through 2.

The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child processe

An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x

An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x

An issue was discovered in GitLab Community Edition and Enterprise Edition 10.7.x before 10.7.6. The usage of 'url_for'

Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privil

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0

An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17,

django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.

In Universal Media Server (UMS) 7.1.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML Extern

IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder could

IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability b

CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerabi

NetApp 7-Mode Transition Tool allows users with valid credentials to access functions and information which may have bee

An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing

An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integ

An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywor

An issue was discovered in image_save_png in image/image-png.cpp in Free Lossless Image Format (FLIF) 0.3. Attackers can

An issue was discovered in Rincewind 0.1. There is a cross-site scripting (XSS) vulnerability involving a p=account requ

An issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter p of index.php and anot

paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter,

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting

An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_

An exploitable permanent denial of service vulnerability exists in Insteon Hub running firmware version 1013. The firmwa

exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2

In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to i

In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to autom

An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted X

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware versi

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware versi

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware versi

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware versi

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware versi

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware versi

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware versi

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware versi

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware versi

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware versi

An exploitable stack-based buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP s

An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implem

An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implem

An input validation flaw exists in ttembed. With a crafted input file, an attacker may be able to trigger a denial of se

Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially le