2018

Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU par

Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the usernam

There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric f

SAJ Solar Inverter allows remote attackers to obtain potentially sensitive information via a direct request for the inve

NuCom WR644GACV devices before STA006 allow an attacker to download the configuration file without credentials. By downl

A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.

Pivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX packages that lacks securit

Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web app

Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow w

IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal.

Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley L30ERMS safety devices v30 and earli

The mintToken function of a smart contract implementation for BitAsean (BAS), a tradable Ethereum ERC20 token, has no pe

The mintToken function of a smart contract implementation for GOAL Bonanza (GOAL), a tradable Ethereum ERC20 token, has

The mintToken function of a smart contract implementation for Fujinto (NTO), a tradable Ethereum ERC20 token, has no per

The mintToken function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, has no

The mintToken function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token

The mintToken function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, has no

The mintToken function of a smart contract implementation for PolyAI (AI), a tradable Ethereum ERC20 token, has no perio

The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap t

The sell function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, allows a po

The sell function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, allows a pot

The sell function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token, all

The sell function of a smart contract implementation for SwftCoin (SWFTC), a tradable Ethereum ERC20 token, allows a pot

The buy function of a smart contract implementation for Gold Reward (GRX), an Ethereum ERC20 token, allows a potential t

The approveAndCallcode function of a smart contract implementation for Block 18 (18T), an tradable Ethereum ERC20 token,

The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20

The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from r

An issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace/trace_events_filter.c cou

DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.

DIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).

GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that alre

finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) o

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger exce

A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cpl

The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or us

The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Contro

mao10cms 6 allows XSS via the article page.

mao10cms 6 allows XSS via the m=bbs&a=index page.

TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote attackers to cause a denial of service (re

Stack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticat

TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary c

Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domain

phpLDAPadmin 1.2.2 allows LDAP injection via a crafted server_id parameter in a cmd.php?cmd=login_form request, or a cra

tinyexr 0.9.5 has a segmentation fault in the wav2Decode function.

tinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h.

Out-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Deni

In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persisten

Portainer before 1.18.0 supports unauthenticated requests to the websocket endpoint with an unvalidated id query paramet

ruby-ffi version 1.9.23 and earlier has a DLL loading issue which can be hijacked on Windows OS, when a Symbol is used a