2018

The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated file disclos

An issue was discovered in Zoho ManageEngine Desktop Central before 100251. By leveraging access to a log file, a contex

An issue was discovered in Zoho ManageEngine Desktop Central before 100230. There is unauthenticated remote access to al

X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary fi

The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allow

The NotificationRepresentationFactoryImpl class in Atlassian Universal Plugin Manager before version 2.22.9 allows remot

The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input.

The IncomingMailServers resource in Atlassian JIRA Server before version 7.6.7, from version 7.7.0 before version 7.7.5,

In curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session even if the client cer

It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints. An attacker

An issue was discovered in a smart contract implementation for Virgo_ZodiacToken, an Ethereum token. In this contract, '

An issue was discovered in a smart contract implementation for STeX White List (STE(WL)), an Ethereum token. The contrac

An issue was discovered in a smart contract implementation for EUC (EUC), an Ethereum token. The contract has an integer

An issue was discovered in a smart contract implementation for SingaporeCoinOrigin (SCO), an Ethereum token. The contrac

An issue was discovered in a smart contract implementation for UserWallet 0x0a7bca9FB7AfF26c6ED8029BB6f0F5D291587c42, an

An issue was discovered in a smart contract implementation for MKCB, an Ethereum token. If the owner sets the value of s

libsixel 1.8.1 has a memory leak in sixel_allocator_new in allocator.c.

libsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_dec

An issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add a user account via admin.php?m=Admin

An issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add an admin account via admin.php?m=Adm

The content://wappush content provider in com.android.provider.telephony, as found in some custom ROMs for Android phone

XMLReader.php in PHPOffice Common before 0.2.9 allows XXE.

The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as demonstrated by /../..

The increaseApproval function of a smart contract implementation for Tracto (TRCT), an Ethereum ERC20 token, has an inte

OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_router_wifiap on Xiaomi R3D befo

OS command injection in the guest Wi-Fi settings feature in /cgi-bin/luci on Xiaomi R3P before 2.14.5, R3C before 2.12.1

ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intende

ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing a non-admin user to es

A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it poin

The Fibre Channel over Ethernet (FCoE) feature in IBM System Networking and Blade Network Technology (BNT) switches runn

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as

Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multi

Accellion FTP server prior to version FTA_9_12_220 only returns the username in the server response if the username is i

ManageEngine Applications Manager 12 and 13 before build 13200, allows unserialization of unsafe Java objects. The vulne

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthent

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, uses hard coded credentials. Acces

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, are potentially vulnerable to impr

The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting. In

The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to unrestricted upload of dangerous

ManageEngine Applications Manager 12 and 13 before build 13690 allows an authenticated user, who is able to access /regi

In ManageEngine Applications Manager 12 and 13 before build 13200, an authenticated user is able to alter all of their o

EpubCheck 4.0.1 does not properly restrict resolving external entities when parsing XML in EPUB files during validation.

On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account