2018

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that may allow an attacker to force-pair

An issue was discovered on Eaton UPS 9PX 8000 SP devices. The administration panel is vulnerable to a CSRF attack on the

* Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated i

An uncontrolled search path element (DLL Hijacking) vulnerability has been identified in Fuji Electric Energy Savings Es

An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. A

An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. T

A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, loca

Spark's Apache Maven-based build includes a convenience script, 'build/mvn', that downloads and runs a zinc server to sp

All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and r

Splunk Enterprise 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light

Splunkd in Splunk Enterprise 6.2.x before 6.2.14 6.3.x before 6.3.11, and 6.4.x before 6.4.8; and Splunk Light before 6.

An issue was discovered in Daniel Gultsch Conversations 2.3.4. It is possible to spoof a custom message to an existing o

A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is pred

A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is pred

An incorrect access control vulnerability in the FTP configuration of WiFiRanger devices with firmware version 7.0.8rc3

An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before

A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x be

Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to

Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path

An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/in

A remote code execution vulnerability exists in the Yammer desktop application due to the loading of arbitrary content,

Stegdetect through 2018-05-26 has an out-of-bounds write in f5_compress in the f5.c file.

Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable sit

A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer

A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer

A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer

A ctl_set KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (

A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer

While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to

XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdra

Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small

While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Sn

Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Sna

Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, S

Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdra

Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobi

While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size o

When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can

Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdrag

In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting i

Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory cor

Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile i

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c d

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c d

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer over-read in internalPrintf in miniz/lupn

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attac

In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt

LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3

IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized administration operations wh

ServersCheck Monitoring Software before 14.3.4 allows SQL Injection by an authenticated user.