2018

In Go Doc Dot Org (gddo) through 2018-06-27, an attacker could use specially crafted <go-import> tags in packages being

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty

Time-of-check to time-of-use (TOCTOU) race condition in org.onosproject.acl (aka the access control application) in ONOS

Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. Wh

In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /logi

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_prof

In FFmpeg 4.0.1, a missing check for failure of a call to init_get_bits8() in the avpriv_ac3_parse_header function in li

In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independen

In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header functio

In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the ha

Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page.

ruby-grape ruby gem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter.

`memjs` versions <= 1.1.0 allocates and stores buffers on typed input, resulting in DoS and uninitialized memory usage.

Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server.

In Nextcloud Contacts before 2.1.2, a missing sanitization of search results for an autocomplete field could lead to a s

In Nextcloud Calendar before 1.5.8 and 1.6.1, a missing sanitization of search results for an autocomplete field could l

Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowi

Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint. Missing chec

rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not valida

This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in

In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, rel

libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRI

An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user's web portal login cre

Cross-site scripting (XSS) vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remo

Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing t

In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash

Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote a

The sell function of a smart contract implementation for GSI, an Ethereum token, has an integer overflow in which "amoun

The sell function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin), an Ethereum token, has

The sell function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterToken), an Ethereum token, ha

The sell function of a smart contract implementation for DestiNeed (DSN), an Ethereum token, has an integer overflow in

The sell function of a smart contract implementation for RiptideCoin (RIPT), an Ethereum token, has an integer overflow

The sell function of a smart contract implementation for Crowdnext (CNX), an Ethereum token, has an integer overflow in

The sell function of a smart contract implementation for MoneyChainNet (MCN), an Ethereum token, has an integer overflow

The sell function of a smart contract implementation for YLCToken, an Ethereum token, has an integer overflow in which "

The sell function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow in which "amo

The sell function of a smart contract implementation for Virtual Energy Units (VEU) (Contract Name: VEU_TokenERC20), an

The sell function of a smart contract implementation for R Time Token v3 (RS) (Contract Name: RTokenMain), an Ethereum t

The sell function of a smart contract implementation for ObjectToken (OBJ), an Ethereum token, has an integer overflow i

The sell function of a smart contract implementation for Extreme Coin (XT) (Contract Name: ExtremeToken), an Ethereum to

The sell function of a smart contract implementation for MAVCash, an Ethereum token, has an integer overflow in which "a

The sell function of a smart contract implementation for YourCoin (ICO) (Contract Name: ETH033), an Ethereum token, has

The sell function of a smart contract implementation for ICO Dollar (ICOD), an Ethereum token, has an integer overflow i

The sell function of a smart contract implementation for CoinToken, an Ethereum token, has an integer overflow in which

The sell function of a smart contract implementation for GreenMed (GRMD), an Ethereum token, has an integer overflow in

The sell function of a smart contract implementation for Sample Token (STK) (Contract Name: cashBackMintable), an Ethere

The sell function of a smart contract implementation for GMile, an Ethereum token, has an integer overflow in which "amo

The sell function of a smart contract implementation for TravelCoin (TRV), an Ethereum token, has an integer overflow in

The sell function of a smart contract implementation for EthereumLegit, an Ethereum token, has an integer overflow in wh