2018

A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code

An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of a

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regis

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Window

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Servi

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code int

An denial of service vulnerability exists when Windows NT WEBDAV Minirdr attempts to query a WEBDAV directory, aka "WEBD

An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly ha

An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideratio

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Wi

A security feature bypass vulnerability exists in Internet Explorer that allows for bypassing Mark of the Web Tagging (M

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E

A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Window

An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vuln

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

An information disclosure vulnerability exists when Edge improperly marks files, aka "Microsoft Edge Information Disclos

Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name or description field to the "Olap Schemas' Catalogue" catalogue

Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analytic

Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name field to the "Business Model's Catalogue" catalogue.

An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The LAContext class for Biometric (TouchID) val

The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be

Reflected Cross-site scripting (XSS) vulnerability in the web profiler in SensioLabs Symfony 3.3.6 allows remote attacke

An issue was discovered in VirusTotal. A maliciously crafted Universal/fat binary can evade third-party code signing che

An issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary can evade third-party co

An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fat binary can evade third-party code sign

An issue was discovered in Google Santa and molcodesignchecker. A maliciously crafted Universal/fat binary can evade thi

An issue was discovered in Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign, and procInfo. A maliciously craf

An issue was discovered in F-Secure XFENCE and Little Flocker. A maliciously crafted Universal/fat binary can evade thir

OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.

Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Se

NetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through 2.12.X000.0002 and SANtricity Storage Manager 11.30

procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's proc_pid_readdir() return

389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persisten

Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfe

ArticleCMS through 2017-02-19 has XSS via an "add an article" action.

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET L

An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multi

OPC Foundation Local Discovery Server (LDS) 1.03.370 required a security update to resolve multiple vulnerabilities that

The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double

When an Apache Geode server versions 1.0.0 to 1.4.0 is configured with a security manager, a user with DATA:WRITE privil

Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Servic

Node.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM. A bug introduced in 9.7.0 increases

All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service

All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of se

Norton App Lock prior to version 1.3.0.329 can be susceptible to a bypass exploit. In this type of circumstance, the exp

An issue was discovered on Momentum Axel 720P 5.1.8 devices. A password of EHLGVG is hard-coded for the root and admin a

There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM bina