2018

joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary SQL command execution issue in manager/index.php

In Android before the 2018-06-05 security patch level, NVIDIA Tegra X1 TZ contains a possible out of bounds write due to

In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due

In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due

External Entity Attack vulnerability in the ePO extension in McAfee Common UI (CUI) 2.0.2 allows remote authenticated us

OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds direct

Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrad

IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on

IBM Robotic Process Automation with Automation Anywhere 10.0 is vulnerable to cross-site request forgery which could all

libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (applic

Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed aut

A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated

In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mecha

A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow an unauthenticated, re

A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authentic

A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to acces

A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated

A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthe

A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenti

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remot

A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 6800, 7800, and 8

A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software co

A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remo

A vulnerability in the CLI parser of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote atta

A vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker to access services runni

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco c

https-proxy-agent before 2.1.1 passes auth option to the Buffer constructor without proper sanitization, resulting in Do

protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.

sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.

bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template

resolve-path node module before 1.4.0 suffers from a Path Traversal vulnerability due to lack of validation of paths wit

public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a mal

mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a m

localhost-now node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a

626 node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious

crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of f

hekto node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a maliciou

general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which

defaults-deep node module before 0.2.4 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which

merge-deep node module before 3.0.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which al

lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaults

assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which a

mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which al

serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is

connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of

simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.

glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to

node-srv node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malici

angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilenam

serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and a