2018

Zenario v7.1 - v7.6 has SQL injection via the `Name` input field of organizer.php or admin_boxes.ajax.php in the `Catego

In Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or pos

In Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or pos

In Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or pos

sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon cra

keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local

An exploitable NULL pointer dereference vulnerability exists in the tinysvcmdns library version 2017-11-05. A specially

An exploitable overly permissive cross-domain (CORS) whitelist vulnerability exists in JSON-RPC of Parity Ethereum clien

An exploitable information leak/denial of service vulnerability exists in the libevm (Ethereum Virtual Machine) `create2

An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC. Specially crafted JSO

An exploitable improper authorization vulnerability exists in miner_stop API of cpp-ethereum's JSON-RPC (commit 4e101574

An exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp-ethereum's JSON-RPC (commit 4

An exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum's JSON-RPC (commit 4e10

An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e10157

An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit

An exploitable improper authorization vulnerability exists in admin_addPeer API of cpp-ethereum's JSON-RPC (commit 4e101

A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to pe

An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) versions 9.7 a

A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 an

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is

Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit mem

Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open.

The OpenID Single Sign-On authentication functionality in OXID eShop before 4.5.0 allows remote attackers to impersonate

jQuery 3.0.0-rc.1 is vulnerable to Denial of Service (DoS) due to removing a logic that lowercased attribute names. Any

A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of bloc

An Uncontrolled Search Path Element issue was discovered in Moxa SoftNVR-IA Live Viewer, Version 3.30.3122 and prior ver

In Libav through 12.2, there is an invalid memcpy in the av_packet_ref function of libavcodec/avpacket.c. Remote attacke

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access the remote suppor

A vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to e

A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a re

A vulnerability in the web management GUI of the Cisco D9800 Network Transport Receiver could allow an authenticated, re

A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Securit

A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote

A vulnerability in the network-operator user role implementation for Cisco NX-OS System Software could allow an authenti

A vulnerability in management interface access control list (ACL) configuration of Cisco NX-OS System Software could all

A vulnerability in the Policy and Charging Rules Function (PCRF) of the Cisco Policy Suite (CPS) could allow an unauthen

A vulnerability in the application server of the Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticate

Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security). The supported versi

Vulnerability in the Oracle Financial Services Funds Transfer Pricing component of Oracle Financial Services Application

Vulnerability in the Oracle Financial Services Market Risk Measurement and Management component of Oracle Financial Serv

Vulnerability in the Oracle Financial Services Market Risk component of Oracle Financial Services Applications (subcompo

Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations component of Oracle Financial Servic

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Serv

Vulnerability in the Oracle Financial Services Asset Liability Management component of Oracle Financial Services Applica

Vulnerability in the Oracle Financial Services Price Creation and Discovery component of Oracle Financial Services Appli

Vulnerability in the Oracle Financial Services Liquidity Risk Management component of Oracle Financial Services Applicat

Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Appli

Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: Security Framework). Support

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versio