2018

An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a pa

SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter,

Multiple SQL injections exist in SugarCRM Community Edition 6.5.26 and below via the track parameter to modules\Campaign

libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom heade

libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (ht

Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/veh

A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions < V4.10.111), Desigo PXC00-E.D V5.00 (All ve

Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive i

Unencrypted transmission of images in Tinder iOS app and Tinder Android app allows an attacker to extract private sensit

An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Multiple SQL injection vulnerabilities a

An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Remote clients can take advantage of a m

A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9

xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X s

xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to

xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X

xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X s

xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to caus

xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to caus

xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to c

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing ma

xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client

xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X c

xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious

The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the No

SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobile_preview.php or index.php.

SQL Injection exists in Easy Car Script 2014 via the s_order or s_row parameter to site_search.php.

SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company_id= request.

SQL Injection exists in the Tumder (An Arcade Games Platform) 2.1 component for Joomla! via the PATH_INFO to the categor

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field.

SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field.

SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&price_type=range&price= r

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listin

A malicious X-ProxyContextPath or X-Forwarded-Context header containing external resources or embedded code could cause

Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts fo

install.php in Minecraft Servers List Lite before commit c1cd164 and Premium Minecraft Servers List before 2.0.4 does no

SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL comman

Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise pr

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmwa

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Ente

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise M

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise M

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise M

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Ente

An issue was discovered in AsusWRT before 3.0.0.4.384_10007. The do_vpnupload_post function in router/httpd/web.c in vpn

An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, pro

Buffer Overflow in the FTP client in LabF nfsAxe 3.7 allows remote FTP servers to execute arbitrary code via a long repl

An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unau

Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attack

JBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows remote attackers to obtain a