2018

An issue was discovered in WeaselCMS v0.3.5. CSRF can create new pages via an index.php?b=pages&a=new URI.

An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings (such as the theme, title, and descrip

An issue has been found in dilawar sound through 2017-11-27. The end of openWavFile in wav-file.cc has Mismatched Memory

An issue has been found in PDF2JSON 0.69. XmlFontAccu::CSStyle in XmlFonts.cc has Mismatched Memory Management Routines

An issue has been found in PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc has Mismatched Memory Management Routi

An issue has been found in jpeg_encoder through 2015-11-27. It is a heap-based buffer overflow in the function readFromB

An issue has been found in jpeg_encoder through 2015-11-27. It is a SEGV in the function readFromBMP in jpeg_encoder.cpp

Harmonic NSG 9000 devices allow remote authenticated users to conduct directory traversal attacks, as demonstrated by "P

PHPCMS 9 allows remote attackers to cause a denial of service (resource consumption) via large font_size, height, and wi

An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x throug

OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the co

OCS Inventory 2.4.1 contains multiple SQL injections in the search engine. Authentication is needed in order to exploit

/contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the file para

Matera Banco 1.0.0 allows CSRF, as demonstrated by a /contingency/web/messageSend/messageSendHandler.jsp request.

A vulnerability in uniview EZPlayer 1.0.6 could allow an attacker to execute arbitrary code on a targeted system via vid

Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and ther

cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned

A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly filt

SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address (aka ip) to /admin/admin_ip.php (

report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via

Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printin

The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game,

The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow v

Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privil

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0

IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder could

IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability b

An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing

An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integ

An issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter p of index.php and anot

An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_

An exploitable permanent denial of service vulnerability exists in Insteon Hub running firmware version 1013. The firmwa

In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to autom

An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted X

An input validation flaw exists in ttembed. With a crafted input file, an attacker may be able to trigger a denial of se

PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the d

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic

Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version

The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions

IBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary com

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote

The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init'

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small

A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially

A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially

A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. A specially

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute