2018

A vulnerability in the web framework code of Cisco Prime License Manager (PLM) could allow an unauthenticated, remote at

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascrip

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By

Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger

Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use uns

In FreeBSD before 11.2-STABLE(r340268) and 11.2-RELEASE-p5, due to incorrectly accounting for padding on 64-bit platform

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar

Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6

Improper Authorization vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QT

NULL Pointer Dereference vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829,

Command Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2

Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile

Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon Mo

Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile

Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile,

In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incor

While loading a service image, an untrusted pointer dereference can occur in Snapdragon Mobile in versions SD 835, SDA66

When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, S

SMMU secure camera logic allows secure camera controllers to access HLOS memory during session in Snapdragon Automobile,

Failure condition is not handled properly and the correct error code is not returned. It could cause unintended SUI beha

Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ f

Missing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 410/12

Restrictions related to the modem (sim lock, sim kill) can be bypassed by manipulating the system to issue a deactivatio

Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobi

Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600.

Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict

Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is buil

Samba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of

Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the proce

Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configu

A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAM

cgi_handle_request in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has unauthenticated reflected XSS via the

server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.

ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id.

Buffer Overflow vulnerability in NAS devices. QTS allows attackers to run arbitrary code. This issue affects: QNAP Syste

There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently

There is an information leakage vulnerability on several Huawei products. Due to insufficient communication protection f

There is a smart SMS verification code vulnerability in some Huawei smart phones. An attacker should trick a user to acc

There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in

There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-mid

There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote att

There is an information leak vulnerability in some Huawei smartphones. An attacker may do some specific configuration in

System command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows attackers to execute system commands via the "

User enumeration in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to list all system users via the "m

Cross-site scripting in Text Editor in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "fi

Cross-site scripting in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "

System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands v

Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript when view

Incorrect access control on ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to elevate user permissions.