2018

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web pa

qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to

qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to

qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows atta

An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerabilit

An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. Weak permissions

The Shein Group Ltd. "SHEIN - Fashion Shopping" app -- aka shein fashion-shopping/id878577184 -- for iOS does not verify

"Shpock Boot Sale & Classifieds" app before 3.17.0 -- aka shpock-boot-sale-classifieds/id557153158 -- for iOS does not v

In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user to construct a URL pointin

In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different l

Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an article posted by an administ

ClipperCMS 1.3.3 has stored XSS via the Full Name field of (1) Security -> Manager Users or (2) Security -> Web Users.

Pivotal Operations Manager, versions 2.1 prior to 2.1.6 and 2.0 prior to 2.0.15 and 1.12 prior to 1.12.22, contains a st

Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote disclosure of informat

Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with har

QFX5200 and QFX10002 devices that have been shipped with Junos OS 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15

A Denial of Service vulnerability exists in the Juniper Networks Junos OS JDHCPD daemon which allows an attacker to core

Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP

While experiencing a broadcast storm, placing the fxp0 interface into promiscuous mode via the 'monitor traffic interfac

After Junos OS device reboot or upgrade, the stateless firewall filter configuration may not take effect. This issue can

When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authent

Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows

Cross-site scripting (XSS) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote

Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devic

Open redirect vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to redire

Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attack

It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '

A reflected XSS issue was discovered in the registration form in Rocket.Chat before 0.66. When one creates an account, t

An XSS issue was discovered in packages/rocketchat-mentions/Mentions.js in Rocket.Chat before 0.65. The real name of a u

A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certif

A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Feder

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape, aka "Windows Eleva

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Servi

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "

A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "Word

A command injection vulnerability exists in the Microsoft Wireless Display Adapter (MWDA) when the Microsoft Wireless Di

An information disclosure vulnerability exists in Windows Mail Client when a message is opened, aka "Windows Mail Client

A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofi

A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code int

A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UN

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of

Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x /