2018

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NTPD). The supported version

Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security F

SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in e

An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted

In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement is run using HPL/SQL extension to Hive, a compromised/mali

In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs (xpath/xpath_string/xpath_boolean/xpath_number/xp

An exposure of sensitive information vulnerability exists in Jenkins Reverse Proxy Auth Plugin 1.5 and older in ReverseP

An information disclosure vulnerability in the Qualcomm SPMI driver. Product: Android. Versions: Android kernel. Android

An information disclosure vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Androi

An information disclosure vulnerability in the Qualcomm USB driver. Product: Android. Versions: Android kernel. Android

Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) bef

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves alarm and timer handl

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles"

Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows r

IBM Business Process Manager 8.6 could allow an authenticated user with special privileges to reveal sensitive informati

The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information.

The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection.

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumerat

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or confi

The Administration and Reporting tool in IBM Rational License Key Server (RLKS) before 8.1.4.9 iFix 04 allows local user

Addresses denial of service attack to eDirectory versions prior to 9.1.

Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1

IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before

The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restricti

Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Window

Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microso

Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Window

A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager (NAM) 4.3 and 4.4.

A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Identity Server component.

SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R

IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial

Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V2

Huawei ViewPoint 8660 V100R008C03 have a memory leak vulnerability. The software does not release allocated memory prope

Huawei video applications HiCinema with software of 8.0.3.308; 8.0.4.300 have a permission control vulnerability. Due to

Huawei eNSP software with software of versions earlier than V100R002C00B510 has a buffer overflow vulnerability. Due to

NFC (Near Field Communication) module in Huawei mobile phones with software LON-AL00BC00 has an information leak vulnera

Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability. It needs to verif

A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could all

A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could all

In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks w

MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to c

Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150

Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C1

NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes

The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password,

In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in passwor

The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to g

When registering and activating a new system with Red Hat Satellite 6 if the new systems hostname is then reset to the h