2018

IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) uses weaker than expected c

IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) caches usernames and passwo

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspa

An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData[0] access in the function store16 in h

An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData[1] access in the function store3

An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::UpdateChunks in DLS.

An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::SaveString in DLS.cp

An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData[0] access in the function store32 in h

An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the function RIFF::Chunk::Read in RIFF.cpp.

An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData[1] access in the function store1

An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "always assign the sample of the first di

An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in the function RIFF::Chunk::Read in RIFF

An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "update dimension region's chunks" featur

An issue was discovered in libgig 4.1.0. There is an out of bounds read in gig::File::UpdateChunks in gig.cpp.

Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because of

trim_whitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read.

MP4Integer32Property::Read in atom_avcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service (heap-ba

In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service (infinit

libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read a

get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV).

Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4s

camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds

In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of classes allowe

blog/index.php in SansCMS 0.7 has XSS via the q parameter.

SeaCMS v6.61 allows Remote Code execution by placing PHP code in a movie picture address (aka v_pic) to /admin/admin

MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index.php, as demonstrated by a

MetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page.

In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI.

An issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists via the fourth and fifth input elements on the admi

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadAction_fileUpload.act

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. SQL injection exists via the admin/noticeMa

espritblock eos4j, an unofficial SDK for EOS, through 2018-07-12 mishandles floating-point numbers with more than four d

In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl

ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.

ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.

ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.

ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.

The debug handler in Symfony before v2.7.33, 2.8.x before v2.8.26, 3.x before v3.2.13, and 3.3.x before v3.3.6 has XSS v

redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use t

redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker

TP-Link WR840N devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets w

The approveAndCall function of a smart contract implementation for Aditus (ADI), an Ethereum ERC20 token, allows attacke

In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrar

An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially cra

An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially cra

An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially cr

An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially cr

An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted

An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted

Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in O