2018

A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the m

Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in incorre

Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a con

The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing J

A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thun

A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potenti

Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T

Memory safety bugs were reported in Firefox 50.1. Some of these bugs showed evidence of memory corruption and we presume

Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory corr

HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will b

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption.

Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerabili

Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we pre

Memory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory corruption and we presu

An issue where WebExtensions can use the mozAddonManager API to elevate privilege due to privileged pages being allowed

An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.

An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issu

Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corrup

Memory safety bugs were reported in Firefox 49. Some of these bugs showed evidence of memory corruption and we presume t

A potentially exploitable use-after-free crash during actor destruction with service workers. This issue does not affect

The previous version of Puppet Enterprise 2018.1 is vulnerable to unsafe code execution when upgrading pe-razor-server.

The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows extern

The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class inst

The Java implementation of AMF3 deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external

The Java implementation of AMF3 deserializers used in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instan

tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.

The Enterprise Console in Cisco AppDynamics App iQ Platform before 4.4.3.10598 (HF4) allows SQL injection, aka the Secur

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Grand Centr

A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to

tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h.

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE

Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact_us.ph

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php.

Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in

The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes

A remote attacker can bypass the System Manager Mode on the Canon LBP6030w web interface without a PIN for /checkLogin.c

A remote attacker can bypass the Management Mode on the Canon LBP7110Cw web interface without a PIN for /checkLogin.cgi

DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede/file_manage_view.php?fmd

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthe

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthe

joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary SQL command execution issue in manager/index.php

Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrad

A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to acces

A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated

A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthe

A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenti

A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software co

https-proxy-agent before 2.1.1 passes auth option to the Buffer constructor without proper sanitization, resulting in Do

The static-eval module is intended to evaluate statically-analyzable expressions. In affected versions, untrusted user i