2018

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (A

A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export fil

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in m

A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in m

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka

An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which coul

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerabili

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in m

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in m

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation

An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU miniport driver handle

A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote C

A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft Pow

A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft

There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause

VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authori

Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is ex

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Losant Arduino MQTT

When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to t

The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori Client version 1.11.5 in

Locally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client

It is possible for a malware application installed on an Android device to send local push notifications with an empty m

SAP Disclosure Management 10.x allows an attacker to exploit through a specially crafted zip file provided by users: Whe

It is possible for a malicious application or malware to execute JavaScript in a SAP Fiori application. This can include

SAP Mobile Secure Android Application, Mobile-secure.apk Android client, before version 6.60.19942.0, allows an attacker

In some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, 75C to 75D, a trans

An attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA installation, SAP Basis, ve

Knowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an X

A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force

The GridServer Broker and GridServer Director components of TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager c

IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, 9.0.1 through 9.0.5, and 9.1.0.0 could allow a local

The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.s

Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating s