2018

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security F

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validat

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Window

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Window

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validat

A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses speci

An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

A security feature bypass vulnerability exists when Active Directory incorrectly applies Network Isolation settings, aka

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, ak

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially

A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially

A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially

H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can

iScripts SupportDesk v4.3 has XSS via the admin/inteligentsearchresult.php txtinteligentsearch parameter.

iScripts SupportDesk v4.3 has XSS via the staff/inteligentsearchresult.php txtinteligentsearch parameter.

iScripts eSwap v2.4 has SQL injection via the "registration_settings.php" ddlFree parameter in the Admin Panel.

iScripts eSwap v2.4 has XSS via the "registration_settings.php" txtDate parameter in the Admin Panel.

iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel.

zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function. A local

CMS Made Simple (aka CMSMS) 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter.

CMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1_version parameter.

CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/moduleinterface.php.

CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/siteprefs.php.

CMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1_name parameter, related to m

JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juniper available through github. T

A Junos device with VPLS routing-instances configured on one or more interfaces may be susceptible to an mbuf leak when

If all 64 digits of the connectivity association name (CKN) key or all 32 digits of the connectivity association key (CA

Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon (rpd) crash

A vulnerability in Junos OS SNMP MIB-II subagent daemon (mib2d) may allow a remote network based attacker to cause the m

On SRX Series devices during compilation of IDP policies, an attacker sending specially crafted packets may be able to b

A vulnerability in the Network Address Translation - Protocol Translation (NAT-PT) feature of Junos OS on SRX series dev

Receipt of a specially crafted Connectionless Network Protocol (CLNP) datagram destined to an interface of a Junos OS de

OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The flaw is due to lack of s

joyplus-cms 1.6.0 allows remote attackers to obtain sensitive information via a direct request to the install/ or log/ U

The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the val

CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request

CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP reque

The Near Field Communication (NFC) module in Mate 9 Huawei mobile phones with the versions before MHA-L29B 8.0.0.366(C56