2018

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive

PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL gene

An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ p

mPDF through 7.1.6, if deployed as a web application that accepts arbitrary HTML, allows SSRF, as demonstrated by a '<im

MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword abt_type parameter.

MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword langset parameter.

The Central Administration server (emsca) component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Ent

The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezv

The Schema repository server (tibschemad) component of TIBCO Software Inc.'s TIBCO Messaging - Apache Kafka Distribution

The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer

The administrative daemon (tibdgadmind) of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpa

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resou

An administrator with workflow definition entitlements can use DTD to perform malicious operations, including but not li

A malicious user with enough administration entitlements can inject html-like elements containing JavaScript statements

A Path Traversal in Knightjs versions <= 0.0.1 allows an attacker to read content of arbitrary files on a remote server.

A stored xss in tianma-static module versions <=1.0.4 allows an attacker to execute arbitrary javascript.

A path traversal in takeapeek module versions <=0.2.2 allows an attacker to list directory and files.

A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.

In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds che

When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including

In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lead

In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead

In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privile

In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses

In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead

In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could lea

In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. Thi

In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This

In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could

In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This

In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local

In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead

When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. Thi

In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead

In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could

In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of p

In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. Thi

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could

In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no

In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input vali

In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could le

In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could le

In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could le

In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds che

In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead

In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remo

In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This

IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Ratio