2018

Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged u

An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preferenc

A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary acce

A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 a

An issue was discovered in Hola 1.79.859. An unprivileged user could modify or overwrite the executable with arbitrary c

Kingsoft WPS Office Free 10.2.0.5978 allows local users to gain privileges or cause a denial of service by impersonating

Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all t

Unquoted Windows search path vulnerability in the panda_url_filtering service in Panda Global Protection 17.0.1 allows l

BitDefender Total Security 2018 allows local users to gain privileges or cause a denial of service by impersonating all

Unquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike Network Monitor 5.4 allows

The Upload File functionality in upload.jspa in Aurea Jive Jive-n 9.0.2.1 On-Premises allows for an XML External Entity

The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using

The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using

Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0.0 before SP2 EP29, 6.0.4 before 6.0.

XML external entity (XXE) vulnerability in IBM InfoSphere Information Governance Catalog 11.3 before 11.3.1.2 and 11.5 b

IBM Security Guardium Database Activity Monitor 10 allows local users to obtain sensitive information by reading cached

IBM Security Guardium Database Activity Monitor 10 allows local users to have unspecified impact by leveraging administr

The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed befo

Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to

The IIS/ISAPI specific code in the Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 that normalised the requested path b

Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bind

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation

curl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly backport the fix for CVE-2015

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access

Red Hat Keycloak before version 2.5.1 has an implementation of HMAC verification for JWS tokens that uses a method that

JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000

Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of

Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion re

NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local informatio

NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local informatio

NVIDIA libnvomx contains a possible out of bounds write due to a missing bounds check which could lead to local escalati

NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local informatio

NVIDIA libnvomx contains a possible out of bounds write due to a improper input validation which could lead to local esc

In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovere

QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI.

QCMS version 3.0 has XSS via the webname parameter to the /backend/system.html URI.

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access v

TitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature.

The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which migh

The Gentoo net-im/jabberd2 package through 2.6.1 installs jabberd, jabberd2-c2s, jabberd2-router, jabberd2-s2s, and jabb

CMS Made Simple (CMSMS) 2.2.6 has XSS in admin/moduleinterface.php via the pagedata parameter.

CMS Made Simple (CMSMS) 2.2.6 has stored XSS in admin/moduleinterface.php via the metadata parameter.

In the Linux kernel before 4.15, fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for acce

Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to

The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to ca

LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified ot

The Djelibeybi configuration examples for use of NGINX in SUSE Portus 2.3, when applied to certain configurations involv

A SQL Injection vulnerability exists in Western Bridge Cobub Razor 0.8.0 via the channel_name or platform parameter in a

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channel_name parameter to /index.php?/ma

The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to ca