2018

Escalation of privilege in Intel Saffron admin application before 11.4 allows an authenticated user to access unauthoriz

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute

Escalation of privilege in Intel Saffron MemoryBase before 11.4 allows an authenticated user access to privileged inform

Escalation of privilege in Intel Saffron MemoryBase before version 11.4 potentially allows an authorized user of the Saf

Insufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to IDP 2018 Update 2 allo

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against project

openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project

Out-of-bounds read condition in older versions of some Intel Graphics Driver for Windows code branches allows local user

It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading

An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openj

It was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the credentials passed to it

It was found that the Karaf container used by Red Hat JBoss Fuse 6.x, and Red Hat JBoss A-MQ 6.x, deserializes objects p

A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary fil

JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplet

An exposure of sensitive information vulnerability exists in Jenkins Tinfoil Security Plugin 1.6.1 and earlier in Tinfoi

An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesC

A server-side request forgery vulnerability exists in Jenkins Confluence Publisher Plugin 2.0.1 and earlier in Confluenc

A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDesc

A data modification vulnerability exists in Jenkins Resource Disposer Plugin 0.11 and earlier in AsyncResourceDisposer.j

An exposure of sensitive information vulnerability exists in Jenkins SSH Agent Plugin 1.15 and earlier in SSHAgentStepEx

A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration

A man in the middle vulnerability exists in Jenkins Inedo ProGet Plugin 0.8 and earlier in ProGetApi.java, ProGetConfig.

An exposure of sensitive information vulnerability exists in Jenkins Anchore Container Image Scanner Plugin 10.16 and ea

A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier

An exposure of sensitive information vulnerability exists in Jenkins meliora-testlab Plugin 1.14 and earlier in TestlabN

An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.

A cross-site scripting vulnerability exists in Jenkins Shelve Project Plugin 1.5 and earlier in ShelveProjectAction/inde

An exposure of sensitive information vulnerability exists in Jenkins Accurev Plugin 0.7.16 and earlier in AccurevSCM.jav

An exposure of sensitive information vulnerability exists in Jenkins SaltStack Plugin 3.1.6 and earlier in SaltAPIBuilde

A server-side request forgery vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublishe

A man in the middle vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java, AT

It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could a

A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable

It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement

A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains

Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document.

tss_alloc in sys/arch/i386/i386/gdt.c in OpenBSD 6.2 and 6.3 has a Local Denial of Service (system crash) due to incorre

Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authe

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafte

curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users

A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-afte

The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read vi

The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.

A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons o

A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back

The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input

The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if

curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with

The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if th