2018

Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote disclosure of informat

Juniper Networks CSO versions prior to 4.0.0 may log passwords in log files leading to an information disclosure vulnera

Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone ser

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys

Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with har

Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 have Cassandra service enabled by default with h

Junos OS routing protocol daemon (RPD) process may crash and restart or may lead to remote code execution while processi

QFX5200 and QFX10002 devices that have been shipped with Junos OS 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15

A Denial of Service vulnerability exists in the Juniper Networks Junos OS JDHCPD daemon which allows an attacker to core

The receipt of a crafted BGP UPDATE can lead to a routing process daemon (RPD) crash and restart. Repeated receipt of th

Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP

Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) line cards or PTX1K to crash and restart

While experiencing a broadcast storm, placing the fxp0 interface into promiscuous mode via the 'monitor traffic interfac

Receipt of a crafted or malformed RSVP PATH message may cause the routing protocol daemon (RPD) to hang or crash. When R

After Junos OS device reboot or upgrade, the stateless firewall filter configuration may not take effect. This issue can

When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authent

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated u

In Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to 30003/TCP listen for arbi

Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow a

Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows

Cross-site scripting (XSS) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote

In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft

An exploitable out-of-bounds write exists in the Microsoft Word document conversion functionality of the Antenna House O

An exploitable stack-based buffer overflow exists in the Microsoft Word document conversion functionality of the Antenna

In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft

In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft

An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Se

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable

VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arb

There is a time-based blind SQL injection vulnerability in the Access Manager component before 9.18.040 and 10.x before

Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devic

Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote

IBM WebSphere Cast Iron 6.3 allows remote attackers to bypass intended access restrictions via unspecified vectors. IBM

IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portle

Open redirect vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to redire

Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attack

IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to bypass the remote image filtering mec

Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of adm

Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that mig

A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious ter

It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '

A reflected XSS issue was discovered in the registration form in Rocket.Chat before 0.66. When one creates an account, t

An XSS issue was discovered in packages/rocketchat-mentions/Mentions.js in Rocket.Chat before 0.65. The real name of a u

A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certif

A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code

A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Feder

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithm