2018

The mintToken function of a smart contract implementation for MultiGames (MLT), an Ethereum token, has an integer overfl

The mintToken function of a smart contract implementation for etktokens (ETK), an Ethereum token, has an integer overflo

The mintToken function of a smart contract implementation for bankcoin (BNK), an Ethereum token, has an integer overflow

The mintToken function of a smart contract implementation for AssetToken, an Ethereum token, has an integer overflow tha

The mintToken function of a smart contract implementation for CryptonitexCoin, an Ethereum token, has an integer overflo

The mintToken function of a smart contract implementation for bonusToken (BNS), an Ethereum token, has an integer overfl

The mintToken function of a smart contract implementation for GEMCHAIN (GEM), an Ethereum token, has an integer overflow

In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c.

The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an

An issue was discovered in BEdita before 3.7.0. A cross-site scripting (XSS) attack occurs via a crafted pages/showObjec

The mintToken, buy, and sell functions of a smart contract implementation for LEF, an Ethereum token, have an integer ov

The mintToken function of a smart contract implementation for JavaSwapTest (JST), an Ethereum token, has an integer over

The transfer and transferFrom functions of a smart contract implementation for Pandora (PDX), an Ethereum token, have an

A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial o

The Ultimate Member (aka ultimatemember) plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen.

TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATH_INFO to the /webpages/data URI.

Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows.

Spadeico is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to

SpadePreSale is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted token

Bitotal (TFUND) is a smart contract running on Ethereum. The mintTokens function has an integer overflow that allows min

SP8DE Token (SPX) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted

Etherty Token (ETY) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minte

SP8DE PreSale Token (DSPX) is a smart contract running on Ethereum. The mint function has an integer overflow that allow

MoxyOnePresale is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tok

ATLANT (ATL) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted token

GVToken Genesis Vision (GVT) is a smart contract running on Ethereum. The mint function has an integer overflow that all

onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to read arbitrary files via the i and f parameters

onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to delete arbitrary files via the Delete File(s) s

RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service (array out-of-bounds access and

The PAN-OS web interface administration page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.17 and earlier, PAN-OS 8.0.10 and

The PAN-OS session browser in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9 and earlier, and PAN-OS

The PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.8 and earli

The PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9 and earli

The URL filtering "continue page" hosted by PAN-OS 8.0.10 and earlier may allow an attacker to inject arbitrary JavaScri

Node.js third-party module query-mysql versions 0.0.0, 0.0.1, and 0.0.2 are vulnerable to an SQL injection vulnerability

The utilities function in all versions <= 1.0.0 of the merge-objects node module can be tricked into modifying the proto

The utilities function in all versions <= 1.0.0 of the merge-options node module can be tricked into modifying the proto

The utilities function in all versions <= 0.3.0 of the merge-recursive node module can be tricked into modifying the pro

The utilities function in all versions <= 0.5.0 of the deep-extend node module can be tricked into modifying the prototy

The utilities function in all versions < 1.0.1 of the deap node module can be tricked into modifying the prototype of Ob

There is a Stored XSS vulnerability in the glance node module versions <= 3.0.5. File name, which contains malicious HTM

The public node module versions <= 1.0.3 allows to embed HTML in file names, which (in certain conditions) might lead to

DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password chan

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass iss

Ubiquiti UCRM versions 2.3.0 to 2.7.7 allow an authenticated user to read arbitrary files in the local file system. Note

Ubiquiti UCRM versions 2.5.0 to 2.7.7 are vulnerable to Stored Cross-site Scripting. Due to the lack sanitization, it is

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite lo

/user/del.php in zzcms 8.3 allows SQL injection via the tablename parameter after leveraging use of the zzcms_ask table.

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5