2018

crossenv was a malicious module published with the intent to hijack environment variables. It has been unpublished by np

noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by

nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished

nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished

nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by n

nodeffmpeg was a malicious module published with the intent to hijack environment variables. It has been unpublished by

ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by

opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by n

openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by

node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished b

node-opensl was a malicious module published with the intent to hijack environment variables. It has been unpublished by

babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by np

mssql-node was a malicious module published with the intent to hijack environment variables. It has been unpublished by

gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by np

nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by n

mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by np

In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow

A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA

A race condition in drm_atomic_nonblocking_commit() in the display driver can potentially lead to a Use After Free scena

dcc_curr_list is initialized with a default invalid value that is expected to be programmed by the user through a sysfs

Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android re

An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A sp

Stack-based buffer overflow can occur In the WLAN driver if the pmkid_count value is larger than the PMKIDCache size in

Type mismatch for ie_len can cause the WLAN driver to allocate less memory on the heap due to implicit casting leading t

While sending a probe request indication in lim_send_sme_probe_req_ind() in all Android releases from CAF (Android for M

Buffer over -read can occur while processing a FILS authentication frame in all Android releases from CAF (Android for M

A crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from CAF (Android for MSM,

In the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software versions prior to 41076000

Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101

Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101

Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers

An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket

In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an at

In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious

In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authen

Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f (latest release as o

IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection (XXE) attack wh

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive info

IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attac

IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive inform

libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.

Incorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager Version 13 before build 13

SGIN.CN xiangyun platform V9.4.10 has XSS via the login_url parameter to /login.php.

An issue was discovered in DisplayLink Core Software Cleaner Application 8.2.1956. When the drivers are updated to a new

Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not pro

XML external entity (XXE) vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote unauthenticated users to re

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write th

A persisted cross-site scripting vulnerability exists in Jenkins Groovy Postbuild Plugin 2.3.1 and older in various Jell