2018

In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.

IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request.

An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated a

The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, cau

Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi

Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a c

Unsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code.

LTB (aka LDAP Tool Box) Self Service Password before 1.3 allows a change to a user password (without knowing the old pas

Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts.

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3),

A vulnerability has been identified in SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.

A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE

Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulne

Cross-site scripting (XSS) vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated user

Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users t

Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received

Due to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the versions before LON-AL

Huawei smart phones LYO-L21 with software LYO-L21C479B107, LYO-L21C479B107 have a privilege escalation vulnerability. An

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properl

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka

A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local

An elevation of privilege vulnerability exists when Microsoft Outlook does not validate attachment headers properly, aka

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory,

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E

A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

A remote code execution vulnerability exists when HTTP Protocol Stack (Http.sys) improperly handles objects in memory, a

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses speci

A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly ha

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code int

An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce priv

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valida

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code int

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code int

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code int

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regis

A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code int

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code int