2018

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory

A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory,

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially cr

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Servic

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from

stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__o

Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git r

A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arb

Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges.

A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters ma

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0

A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Manage

Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary co

Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user

Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an

Directory permissions in the Intel OpenVINO Toolkit for Windows before version 2018.1.265 may allow an authenticated use

Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated

e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php

Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to download any confidentia

An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable com

An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window runni

Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vul

Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vul

In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient valida

An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web re

An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web re

An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web re

An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web re

In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK may turn a read-only mem

In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections a

In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This results in the possibil

In FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the qsort algorithm has a deterministic recursion patt

A vulnerability has been identified in SCALANCE X300 (All versions < V4.0.0), SCALANCE X408 (All versions < V4.0.0), SCA

A vulnerability has been identified in SIEMENS TD Keypad Designer (All versions). A DLL hijacking vulnerability exists i

xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to C

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several data types used as RPC input variables

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several RPC server routines did not fully initi

LG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control. Attackers are able to download /u

SAP HANA (versions 1.0 and 2.0) Extended Application Services classic model OData parser does not sufficiently validate

The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server-side request forgery (

In certain cases, BEx Web Java Runtime Export Web Service in SAP NetWeaver BI 7.30, 7.31. 7.40, 7.41, 7.50, does not suf

Missing authorization check in SAP HCM Fiori "People Profile" (GBX01 HR version 6.0) for an authenticated user which may