2018

Proxy.exe in DualDesk 20 allows Remote Denial Of Service (daemon crash) via a long string to TCP port 5500.

SEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service (daemon crash) via an in

SafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified installation directories a

SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executab

SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executab

SafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation directories and executable mod

SafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation directories and executable m

SafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified installation directories and ex

SafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified installation directories and e

SafeNet Authentication Service TokenValidator Proxy Agent uses a weak ACL for unspecified installation directories and e

SafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories and executable modules

SafeNet Authentication Service End User Software Tools for Windows uses a weak ACL for unspecified installation director

The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page.

The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses an inadequate account lockout setting that could allow a r

The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker wit

An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted

An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted

An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted

An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted

An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted

This vulnerability allows adjacent attackers to inject arbitrary Controller Area Network messages on vulnerable installa

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Amazon Music Player

An issue was discovered in Enalean Tuleap 9.17. Lack of CSRF attack mitigation while changing an e-mail address makes it

In Drupal versions 8.4.x versions before 8.4.5 when using node access controls with a multilingual site, Drupal marks th

In Drupal versions 8.4.x versions before 8.4.5 users with permission to post comments are able to view content and comme

CSRF exists in Hoosk 1.7.0 via /admin/users/new/add, resulting in account creation.

An issue was discovered in CImg v.220. A double free in load_bmp in CImg.h occurs when loading a crafted bmp image.

An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted

An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure i

In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured.

A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x bef

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service (memory consumption) via a

In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulner

The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts runnin

A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager w

In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryp

In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious reposi

In libzypp before 20170803 it was possible to retrieve unsigned packages without a warning to the user which could lead

In libzypp before 20170803 it was possible to add unsigned YUM repositories without warning to the user that could lead

A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escal

\application\admin\controller\update_urls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to ad

The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute a

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build

ABAP File Interface in, SAP BASIS, from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memor

Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble I

An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoM

Directory traversal vulnerability in widgets/logs.php in BlackCat CMS before 1.1.2 allows remote attackers to read arbit