2018

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service

GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or po

The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic:

wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image.

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service

LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/devi

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.

An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service.

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured req

Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.

A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function

An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator passw

An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init

user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superu

BigTree CMS 4.2.23 allows remote authenticated users, if possessing privileges to set hooks, to execute arbitrary code v

Cross-site request forgery (CSRF) vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.384_32738 allows

Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.384_32738 allows remote attackers to cause a de

ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allow remote attackers to cause a denial of service via a

In Bro through 2.5.5, there is a DoS in IRC protocol names command parsing in analyzer/protocol/irc/IRC.cc.

When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught

A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to execute arbitrary code t

HiScout GRC Suite before 3.1.5 allows Unrestricted Upload of Files with Dangerous Types.

An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized

An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized

An issue was discovered in mgetty before 1.2.1. In contrib/next-login/login.c, the command-line parameter username is pa

An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a stack-based buffer overflow can be triggered via a

An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function do_activate() does not properly sanit

Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstra

On BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and 13.1.0-13.1.0.3, APMD may core when processing SAML Assertio

On F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the alert server by using a

In Lizard (formerly LZ5) 2.0, use of an invalid memory address was discovered in LZ5_compress_continue in lz5_compress.c

A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "W

A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messa

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCont

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCont

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obje

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory,

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft brow

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory,

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Window

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka "Windows S

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (A

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from

A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word P