2018

In Schneider Electric U.motion Builder software versions prior to v1.3.4, this exploit occurs when the submitted data of

Schneider Electric SoMachine Basic prior to v1.6 SP1 suffers from an XML External Entity (XXE) vulnerability using the D

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authentic

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sendin

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer

In Schneider Electric Wiser for KNX V2.1.0 and prior, homeLYnk V2.0.1 and prior; and spaceLYnk V2.1.0 and prior, weak an

In Schneider Electric Evlink Charging Station versions prior to v3.2.0-12_v1, the Web Interface has an issue that may al

The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Ele

The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. Syst

The vulnerability exists within processing of localize.php in Schneider Electric U.motion Builder software versions prio

The vulnerability exists within processing of nfcserver.php in Schneider Electric U.motion Builder software versions pri

The vulnerability exists within processing of applets which are exposed on the web service in Schneider Electric U.motio

The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions pr

The vulnerability exists within processing of sendmail.php in Schneider Electric U.motion Builder software versions prio

The vulnerability exists within processing of xmlserver.php in Schneider Electric U.motion Builder software versions pri

The vulnerability exists within processing of loadtemplate.php in Schneider Electric U.motion Builder software versions

The vulnerability exists within processing of editobject.php in Schneider Electric U.motion Builder software versions pr

The vulnerability exists within processing of track_getdata.php in Schneider Electric U.motion Builder software versions

The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software ve

The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to v

The vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. Th

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with a

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted storag

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with n

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with n

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with n

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with n

In Puppet Discovery prior to 1.2.0, when running Discovery against Windows hosts, WinRM connections can fall back to usi

KioskSimpleService.exe in RedSwimmer KioskSimple 1.4.7.0 suffers from a privilege escalation vulnerability in the WCF en

ModSecurity 3.0.0 has XSS via an onerror attribute of an IMG element. NOTE: a third party has disputed this issue becaus

An XSS issue was discovered in InvoicePlane 1.5.10 via the "Quote PDF Password(Optional)" field.

An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not properly validate secs_per

An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.4. A denial of service (out-of-bounds memory a

An issue was discovered in fs/f2fs/inode.c in the Linux kernel through 4.17.3. A denial of service (slab out-of-bounds r

An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. There is an out-of-bounds read or a divid

An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service (out-of-bounds memory a

An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory

An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a cor

An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference a

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An atta

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of t

The mintToken function of a smart contract implementation for Reimburse Token (REIM), an Ethereum token, has an integer

The mintToken function of a smart contract implementation for sumocoin (SUMO), an Ethereum token, has an integer overflo

The mintToken function of a smart contract implementation for YiTongCoin (YTC), an Ethereum token, has an integer overfl

The mintToken function of a smart contract implementation for Universal Coin (UCOIN), an Ethereum token, has an integer

The mintToken function of a smart contract implementation for Futures Pease (FP), an Ethereum token, has an integer over

The mintToken function of a smart contract implementation for Coinstar (CSTR), an Ethereum token, has an integer overflo

The mintToken function of a smart contract implementation for IADOWR Coin (IAD), an Ethereum token, has an integer overf

The mintToken function of a smart contract implementation for FreeCoin (FREE), an Ethereum token, has an integer overflo

The mintToken function of a smart contract implementation for Good Time Coin (GTY), an Ethereum token, has an integer ov