2018

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a

IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to em

IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to em

IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to obtain sensitive information, caused by the fai

IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform

IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This

An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 c

The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an

All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerabilit

All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerabili

All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerabilit

Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows

IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via tra

Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests.

IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that c

An undisclosed vulnerability in Jazz common products exists with potential for information disclosure. IBM X-Force ID: 1

IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject m

IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject m

IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject m

IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Err

IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows

IBM Jazz based applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J

The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /

Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon in Synology SSL VPN Cli

The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at

mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.

The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start i

Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request.

Imperavi Redactor 3 in Angular Redactor 1.1.6, when HTML content mode is used, allows stored XSS, as demonstrated by an

In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" (which is supposed to overr

Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (d

Open-Xchange OX App Suite before 7.6.3-rev37, 7.8.x before 7.8.2-rev40, 7.8.3 before 7.8.3-rev48, and 7.8.4 before 7.8.4

Cross-site scripting (XSS) vulnerability in mail compose in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7

Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS.

The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passe

In CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if the attacker has one p

DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.

In BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018-10266.

uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to tr

An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seede

Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code e

An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta

An issue was discovered on Diqee Diqee360 devices. A firmware update process, integrated into the firmware, starts at bo

An issue was discovered on Dongguan Diqee Diqee360 devices. The affected vacuum cleaner suffers from an authenticated re

The condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a

Huawei smart phones Emily-AL00A with software 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00) have a Factory Reset Protection (F

The transfer, transferFrom, and mint functions of a smart contract implementation for PFGc, an Ethereum token, have an i

The transfer and transferFrom functions of a smart contract implementation for ChuCunLingAIGO (CCLAG), an Ethereum token

The transfer and transferFrom functions of a smart contract implementation for Bittelux (BTX), an Ethereum token, have a

The _sell function of a smart contract implementation for GROWCHAIN (GROW), an Ethereum token, has an integer overflow.