2018

Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (

Under certain conditions a malicious user may retrieve information on SAP Internet Graphic Server (IGS), 7.20, 7.20EXT,

Under certain conditions an unauthenticated malicious user can prevent legitimate users from accessing the SAP Internet

Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML Exter

Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML Exter

Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (

Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (

Under certain conditions a malicious user can inject log files of SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.4

Stored cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.

A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to ob

Under certain conditions a malicious user provoking an out of bounds buffer overflow can prevent legitimate users from a

Under certain conditions a malicious user provoking a divide by zero crash can prevent legitimate users from accessing t

Under certain conditions a malicious user provoking a Null Pointer dereference can prevent legitimate users from accessi

Reflected cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.

A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to st

SAP ERP Financials Information System (SAP_APPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAP_FIN 6.17, 6.18, 7.00, 7.20

In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evalu

In SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data about deployed applications

In SAP HANA Extended Application Services, 1.0, some general server statistics and status information could be retrieved

In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space

In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space

In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space

Under certain circumstances, a specific endpoint of the Controller's API could be misused by unauthenticated users to ex

A plain keystore password is written to a system log file in SAP HANA Extended Application Services, 1.0, which could en

The SAML 2.0 service provider of SAP Netweaver AS Java Web Application, 7.50, does not sufficiently encode user controll

Server Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad,

Under certain conditions SAP HANA, 1.00, 2.00, allows an unauthenticated attacker to access information which would othe

SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode

A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8.0. To exploit this vul

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/in

An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An at

systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local

In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual compon

A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root privi

IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line se

IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain S

IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL i

When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as

A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer derefe

An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref tables in QPDF.cc.

An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the Pl_Buffer::write fun

An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iterate_rc4 in Q

An issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter::enqueueObject() function in l

An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly le

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral

In CCN-lite 2, the function ccnl_prefix_to_str_detailed can cause a buffer overflow, when writing a prefix to the buffer

PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term.

ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows

ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a