2018

When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputSt

IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to

Hi Security Virus Cleaner - Antivirus, Booster, 3.7.1.1329, 2017-09-13, Android application accepts all SSL certificates

A vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could allow an authenticated,

A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Smal

A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Smal

A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker

A vulnerability in the web-based management interface of the Cisco Registered Envelope Service could allow an authentica

ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key Exchange (IKE) handshake imple

The IKEv1 implementation in Clavister cOS Core before 11.00.11, 11.20.xx before 11.20.06, and 12.00.xx before 12.00.09 a

An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the f

A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the follo

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofi

A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content, aka "Microsoft Edge Spoofing V

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninit

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Ex

A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests, aka "Microsoft

An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Window

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Window

A security feature bypass vulnerability exists when Active Directory Federation Services (AD FS) improperly handles mult

An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscree

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code int

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code int

pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repos

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site request forgery which coul

The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Ques

The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confl

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure

In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter car

Multiple cross-site scripting (XSS) vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web

inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or threa

XS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS), version 1, advanced

Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to ac

SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attacker to execute craft

SAP BusinessObjects Financial Consolidation, versions 10.0, 10.1, does not sufficiently encode user-controlled inputs, r

Under certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNE

A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allo

A potential security vulnerability has been identified in HPE OfficeConnect 1810 Switch Series (HP 1810-24G - P.2.22 and

A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability

A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-5.0.0.0-22913(GA). The vulnerability

Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigat

VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1)

Medtronic MiniMed MMT devices when paired with a remote controller and having the “easy bolus” and “remote bolus” opti

Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext. A sufficiently