2018

The searchrequest-xml resource in Atlassian Jira before version 7.6.1 allows remote attackers to inject arbitrary HTML o

The Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote attackers who can convince a Jir

An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of

An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradl

An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Microl

An exploitable denial of service vulnerability exists in the program download functionality of Allen Bradley Micrologix

An exploitable denial of service vulnerability exists in the Ethernet functionality of the Allen Bradley Micrologix 1400

PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the ter_from or tag parameter to results.php.

An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8. A spec

An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. A

An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8.

An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in N

An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek Neur

An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A ser

An elevation of privilege vulnerability in the Qualcomm QCE driver. Product: Android. Versions: Android kernel. Android

An information disclosure vulnerability in the Qualcomm audio driver. Product: Android. Versions: Android Kernel. Androi

An elevation of privilege vulnerability in the NVIDIA firmware processing code. Product: Android. Versions: Android kern

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions: Android kernel. Android ID

In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when

Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\Sophos\Sophos Anti-Vir

Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKE

The MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with a hardcoded password, w

Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker

The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.

The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism i

Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coinciden

GitLab Community and Enterprise Editions version 9.2 up to 10.4 are vulnerable to XSS because a lack of input validation

GitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a lack of input validation

Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaS

In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement is run using HPL/SQL extension to Hive, a compromised/mali

In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs (xpath/xpath_string/xpath_boolean/xpath_number/xp

This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the

Zammad GmbH Zammad version 2.3.0 and earlier contains a Improper Neutralization of Script-Related HTML Tags in a Web Pag

A cross-site request forgery vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorP

An improper authorization vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorPara

A man in the middle vulnerability exists in Jenkins vSphere Plugin 2.16 and older in VSphere.java that disables SSL/TLS

An exposure of sensitive information vulnerability exists in Jenkins Reverse Proxy Auth Plugin 1.5 and older in ReverseP