2018

Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly forma

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an aut

glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenti

GitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to SSRF in the Services and w

An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh (aka SMT), an Ethereu

A file uploading vulnerability exists in /include/helpers/upload.helper.php in DedeCMS V5.7 SP2, which can be utilized b

EasyCMS 1.3 has XSS via the s POST parameter (aka a search box value) in an index.php?s=/index/search/index.html request

concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.3

process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buf

An issue was discovered in WUZHI CMS 4.1.0. The "Extension Module -> System Announcement" feature has Stored XSS via an

An issue was discovered in WUZHI CMS 4.1.0. The content-management feature has Stored XSS via the title or content secti

An issue was discovered in the Users (aka Front-end user management) plugin 1.4.5 for October CMS. XSS exists in the nam

A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK Cookie Conse

An issue was discovered in phpLiteAdmin 1.9.5 through 1.9.7.1. Due to loose comparison with '==' instead of '===' in cla

An issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary files in the KTextEditor's

In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER rec

The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and

Buffer overflow in MedCoreD.sys in AhnLab V3 Internet Security 8.0.7.5 (Build 1373) allows local users to gain privilege

An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially c

An exploitable heap-based buffer overflow vulnerability exists in the read_legacy_biff function of FreeXL 1.0.3. A speci

An exploitable heap based buffer overflow vulnerability exists in the 'read_biff_next_record function' of FreeXL 1.0.3.

An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v

An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite versi

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation sui

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation sui

An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite ver

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suit

An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite ver

An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite ver

An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite ve

An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite ver

An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite ve

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP requ

A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. A specially

An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+an

An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+an

An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+androi

An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2

An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A

An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11.

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Ca

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Ca

A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9. A specially crafted JPE

A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images. A specially crafte

A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A

A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0

An exploitable dll hijacking vulnerability exists in the poaService.exe service component of the Dell Precision Optimize

A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted G

A double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF

An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A speci