2018

A vulnerability in the web-based management interface of Cisco Videoscape AnyRes Live could allow an authenticated, remo

A vulnerability in the web-based management interface of Cisco Unified Computing System (UCS) Director could allow an un

A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could all

A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers c

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic

A vulnerability in certain CLI commands of Cisco Identity Services Engine (ISE) could allow an authenticated, local atta

A vulnerability in the credential reset functionality for Cisco Identity Services Engine (ISE) could allow an authentica

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic

A vulnerability in specific CLI commands for the Cisco Identity Services Engine could allow an authenticated, local atta

A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticate

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem communication channel through the Cisco 550X

A vulnerability in the web-based management interface of the (cloud based) Cisco Registered Envelope Service could allow

A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could all

A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 co

A vulnerability in the web-based management interface of Cisco Prime Data Center Network Manager could allow an unauthen

A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local atta

A vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attac

An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the

GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools/av_parsers.c, a different

In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks w

It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge b

CSRF exists on Polycom QDX 6000 devices.

Stored XSS exists on Polycom QDX 6000 devices.

inc/logger.php in the Giribaz File Manager plugin before 5.0.2 for WordPress logged activity related to the plugin in /w

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access

A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Co

An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/manage/chann

An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/install/inst

Open redirect vulnerability in the SO Connect SO WIFI hotspot web interface, prior to version 140, allows remote attacke

Cross-site scripting (XSS) vulnerability in Jease 2.11 allows remote authenticated users to inject arbitrary web script

Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of se

Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF toke

Github Electron version Electron 1.8.2-beta.4 and earlier contains a Command Injection vulnerability in Protocol Handler

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in o

NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command e

An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all ve

Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI.

The resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local users to cause a denial of

Cross Site Scripting (XSS) exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.clas

A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/create

The __munlock_pagevec function in mm/mlock.c in the Linux kernel before 4.11.4 allows local users to cause a denial of s

antsle antman before 0.9.1a allows remote attackers to bypass authentication via invalid characters in the username and

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands

Cross-site scripting (XSS) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remo

Cross-site request forgery (CSRF) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allo

Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading fi

Chrome OS before 53.0.2785.144 allows remote attackers to execute arbitrary commands at boot.

In Z-BlogPHP 1.5.1.1740, there is Web Site physical path leakage, as demonstrated by admin_footer.php or admin_footer.ph

In Z-BlogPHP 1.5.1.1740, cmd.php has XSS via the ZC_BLOG_SUBNAME parameter or ZC_UPLOAD_FILETYPE parameter. NOTE: the so