2018

frames-compiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to

marionette-socket-host is a marionette-js-runner host for sending actions over a socket. marionette-socket-host download

node-air-sdk is an AIR SDK for nodejs. node-air-sdk downloads binary resources over HTTP, which leaves it vulnerable to

resourcehacker is a Node wrapper of Resource Hacker (windows executable resource editor). resourcehacker downloads binar

grunt-images is a grunt plugin for processing images. grunt-images downloads binary resources over HTTP, which leaves it

slimerjs-edge is a npm wrapper for installing the bleeding edge version of slimerjs. slimerjs-edge downloads binary reso

jstestdriver is a wrapper for Google's jstestdriver. jstestdriver downloads binary resources over HTTP, which leaves it

cmake installs the cmake x86 linux binaries. cmake downloads binary resources over HTTP, which leaves it vulnerable to M

node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

node-thulac is a node binding for thulac. node-thulac downloads binary resources over HTTP, which leaves it vulnerable t

redis-srvr is a npm wrapper for redis-server. redis-srvr downloads binary resources over HTTP, which leaves it vulnerabl

js-given is a JavaScript frontend to jgiven. js-given downloads binary resources over HTTP, which leaves it vulnerable t

haxe-dev is a cross-platform toolkit. haxe-dev downloads binary resources over HTTP, which leaves it vulnerable to MITM

grunt-ccompiler is a Closure Compiler Grunt Plugin. grunt-ccompiler downloads binary resources over HTTP, which leaves i

An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKit

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKit

Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise ve

Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in

Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior ma

A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF220 web interface without knowing the PIN

soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) o

wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unaut

In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if us

In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on

In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Wher

In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of

In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due

An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sas

An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sas

An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::op

An issue was discovered in LibSass <3.5.3. A NULL pointer dereference was found in the function Sass::Expand::operator w

An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::

An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sas

An issue was discovered on Canon LBP6650, LBP3370, LBP3460, and LBP7750C devices. It is possible to bypass the Administr

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vu

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might a

The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which

Default and unremovable support credentials allow attackers to gain total super user control of an IoT device through a

Default and unremovable support credentials (user:nwk password:nwk2) allow attackers to gain total super user control of

Default and unremovable support credentials (user:lutron password:integration) allow attackers to gain total super user

An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability in the rich text editor that can add an I

An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an article via /index.php?ca

Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature.

Yosoro 1.0.4 has stored XSS.

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 6 of 6).

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 5 of 6).

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 4 of 6).