2018

A vulnerability in the implementation of Cisco Discovery Protocol functionality in Cisco IOS Software and Cisco IOS XE S

A vulnerability in the MACsec Key Agreement (MKA) using Extensible Authentication Protocol-Transport Layer Security (EAP

A vulnerability in the SM-1T3/E3 firmware on Cisco Second Generation Integrated Services Routers (ISR G2) and the Cisco

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow

A vulnerability in the Precision Time Protocol (PTP) subsystem of Cisco IOS Software could allow an unauthenticated, rem

A vulnerability in the IPsec driver code of multiple Cisco IOS XE Software platforms and the Cisco ASA 5500-X Series Ada

A vulnerability in the Cisco Discovery Protocol (CDP) module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could a

A vulnerability in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a

A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote atta

A vulnerability in the Cisco Network Plug and Play server component of Cisco Network Services Orchestrator (NSO) could a

A vulnerability in the Server Message Block Version 2 (SMBv2) and Version 3 (SMBv3) protocol implementation for the Cisc

A vulnerability in the web-based management interface of Cisco Cloud Services Platform 2100 could allow an authenticated

A vulnerability in the Sourcefire tunnel control channel protocol in Cisco Firepower System Software running on Cisco Fi

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an authenticated, remote

A vulnerability in the web-based management interface of Cisco Industrial Network Director could allow an unauthenticate

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthe

A vulnerability in the web interface of Cisco Data Center Network Manager could allow an authenticated application admin

A vulnerability in the web-based management interface of Cisco Meeting Server could allow an unauthenticated, remote att

A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to el

A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to el

A vulnerability in Cisco Webex Teams, formerly Cisco Spark, could allow an authenticated, remote attacker to view and mo

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remo

A vulnerability in the command-line interface (CLI) in the Cisco SD-WAN Solution could allow an authenticated, local att

A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacke

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could all

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could all

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless

A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local

A vulnerability in TCP connection management in Cisco Prime Access Registrar could allow an unauthenticated, remote atta

IBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attack

IBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of resources requested which cou

The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.

The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier

rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.

An unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to include arbitrary files, lea

Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions.

A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Aff

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other fir

On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 RunReboot commands without authentication

Multi-Tech FaxFinder before 5.1.6 has SQL Injection via a status/call_details?oid= URI, allowing an attacker to extract

An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs N

The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.

Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute a

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.2.

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version