2018

mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file

Information disclosure in Netwave IP camera at //etc/RT2870STA.dat (via HTTP on port 8000) allows an unauthenticated att

The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings (AK-NPCIMB

The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input ele

The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP fe

A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously

An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as sign

An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-on

An issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password ("admin:password") is used in the And

An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. A hardcoded credential "supervisor:dange

D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which p

RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to

When users are configured to use startTLS with RBAC LDAP, at login time, the user's credentials are sent via plaintext t

IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow remote code execution when Advanced Access Control

An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ET

An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of vide

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm

An exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core's HTTP server of Samsun

An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 -

POSIM EVO 15.13 for Windows includes hardcoded database credentials for the "root" database user. "root" access to POSIM

Becton, Dickinson and Company (BD) Alaris Plus medical syringe pumps (models Alaris GS, Alaris GH, Alaris CC, and Alaris

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts

An exploitable buffer overflow vulnerability exists in the camera "create" feature of video-core's HTTP server of Samsun

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extract

An exploitable buffer overflow vulnerability exists in the camera "replace" feature of video-core's HTTP server of Samsu

Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Sam

An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-co

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extract

An exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013. The HTTP server allows

Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information includin

Stack-based Buffer Overflow vulnerability in libUPnPHndlr.so in Belkin Wemo Insight Smart Plug allows remote attackers t

apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload

An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework

phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.

Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWiz

Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibl

pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote() that can result in dequote() functi

Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in cJSON library that can r

zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be at

JabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in MsBibImporter XML Parser that can result in

Stroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser that can result in disclosure of

Eclipse RDF4j version < 2.4.0 Milestone 2 contains a XML External Entity (XXE) vulnerability in RDF4j XML parser parsing

YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered para

LatexDraw version <=4.0 contains a XML External Entity (XXE) vulnerability in SVG parsing functionality that can result

In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.

Certain LG devices based on Android 6.0 through 8.1 have incorrect access control for MLT application intents. The LG ID

Certain LG devices based on Android 6.0 through 8.1 have incorrect access control in the GNSS application. The LG ID is

Certain LG devices based on Android 6.0 through 8.1 have incorrect access control for SystemUI application intents. The

A Buffer Overflow exploited through web interface by remote attacker can cause remote code execution in Kraftway 24F2XG