2018

The mintToken function of a smart contract implementation for VSCToken, an Ethereum token, has an integer overflow that

The mintToken function of a smart contract implementation for FansChainToken, an Ethereum token, has an integer overflow

The mintToken function of a smart contract implementation for ohni_2 (OHNI), an Ethereum token, has an integer overflow

The mint function of a smart contract implementation for CloutToken, an Ethereum token, has an integer overflow that all

The mintToken function of a smart contract implementation for BeyondCashToken, an Ethereum token, has an integer overflo

The mintToken function of a smart contract implementation for BuyerToken, an Ethereum token, has an integer overflow tha

The mintToken function of a smart contract implementation for IcoContract, an Ethereum token, has an integer overflow th

The mintToken function of a smart contract implementation for Cavecoin, an Ethereum token, has an integer overflow that

The mintToken function of a smart contract implementation for EpiphanyCoin, an Ethereum token, has an integer overflow t

The mintToken function of a smart contract implementation for Crystals, an Ethereum token, has an integer overflow that

The mintToken function of a smart contract implementation for PaulyCoin, an Ethereum token, has an integer overflow that

The mintToken function of a smart contract implementation for t_swap, an Ethereum token, has an integer overflow that al

The mintToken function of a smart contract implementation for T-Swap-Token (T-S-T), an Ethereum token, has an integer ov

The mintToken function of a smart contract implementation for MoonToken, an Ethereum token, has an integer overflow that

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arb

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arb

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arb

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arb

An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/admin_manage

An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/admin_mana

The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.c

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.

Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG ele

admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag.

TCExam before 14.1.2 has XSS via an ff_ or xl_ field.

Fast C++ CSV Parser (aka fast-cpp-csv-parser) before 2018-07-06 has a heap-based buffer over-read in io::trim_chars in c

Google gperftools 2.7 has a memory leak in malloc_extension.cc, related to MallocExtension::Register and InitModule. NOT

An issue has been found in libsndfile 1.0.28. There is a memory leak in psf_allocate in common.c, as demonstrated by snd

script.php in Jirafeau before 3.4.1 is affected by two stored Cross-Site Scripting (XSS) vulnerabilities. These are stor

An issue was discovered in Jirafeau before 3.4.1. The file "search by name" form is affected by one Cross-Site Scripting

The administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on search functionalities: search_

TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to var

Unauthenticated access to the cloud-based service maintained by TrackR Bravo is allowed for querying or sending GPS data

The Trackr device ID is constructed of a manufacturer identifier of four zeroes followed by the BLE MAC address in rever

The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.

Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that lead

A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Andro

An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condit

While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel (Android for MSM

While processing a debug log event from firmware in all Android releases from CAF using the Linux kernel (Android for MS

While processing a WMI_APFIND event in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS

In __wlan_hdd_cfg80211_vendor_scan() in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox O

Due to a race condition in the MDSS MDP driver in all Android releases from CAF using the Linux kernel (Android for MSM,

In the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD A

While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel (Android for MSM,

A race condition exists in a driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS

A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH)

In a firmware memory dump feature in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS f

An integer overflow to buffer overflow vulnerability exists in the ADSPRPC heap manager in all Android releases(Android

In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux