2018

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of

An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8. A spec

An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. A

An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8.

An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek Neur

The MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with a hardcoded password, w

This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the

An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in a dl/dl_sendsms.php request.

Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesyst

Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3

authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attackers

The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and conseque

CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPr

IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker to execute system comma

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Androi

A remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel

The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated

In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to

In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This cou

In wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check. This cou

In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitiali

In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper inp

In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a miss

In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds check

In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check

In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could le

In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This cou

FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass by ignoring the parent.location='login.html' JavaScr

FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin" header.

The upsql function in \Lib\Lib\Action\Admin\DataAction.class.php in Gxlcms QY v1.0.0713 allows remote attackers to execu