2018

youke365 v1.1.5 has SQL injection via admin/login.html, as demonstrated by username=admin&pass=123456&code=9823&act=logi

The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking.

IBM Security Key Lifecycle Manager 2.7 and 3.0 could allow an unauthenticated user to restart the SKLM server due to mis

IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0 could allow an authenticated user to obtain highly sensitive informatio

IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time d

IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as p

IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary

Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine co

An issue was discovered in dialog.php in tecrail Responsive FileManager 9.8.1. A reflected XSS vulnerability allows remo

An issue was discovered in dialog.php in tecrail Responsive FileManager 9.8.1. Attackers can access the file manager int

Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthentic

Intelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID that is received via a network broadcast.

Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle at

tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed i

tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of file

Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote at

Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attacker

Intelbras NPLUG 1.0.0.14 wireless repeater devices have a critical vulnerability that allows an attacker to authenticate

In version from 3.5.Beta1 to 3.5.3 of Eclipse Vert.x, the OpenAPI XML type validator creates XML parsers without taking

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that sho

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http reques

The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may

Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before version 4.2 may allow an u

Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before fi

Improper password hashing in firmware in Intel Server Board (S7200AP,S7200APR) and Intel Compute Module (HNS7200AP, HNS7

Insufficient session validation in the webserver component of the Intel Rapid Web Server 3 may allow an unauthenticated

Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a pri

Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5

Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.

A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the mana

A Denial of Service vulnerability in J-Web service may allow a remote unauthenticated user to cause Denial of Service wh

A denial of service vulnerability in the telnetd service on Junos OS allows remote unauthenticated users to cause high C

An improper input validation weakness in the device control daemon process (dcd) of Juniper Networks Junos OS allows an

A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authentic

Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash (vmcore), causing the device

On MX Series and M120/M320 platforms configured in a Broadband Edge (BBE) environment, subscribers logging in with DHCP

If a duplicate MAC address is learned by two different interfaces on an MX Series device, the MAC address learning funct

Receipt of a specially crafted DHCPv6 message destined to a Junos OS device configured as a DHCP server in a Broadband E

On QFX5000 Series and EX4600 switches, a high rate of Ethernet pause frames or an ARP packet storm received on the manag

An authentication bypass vulnerability in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allo

If RSH service is enabled on Junos OS and if the PAM authentication is disabled, a remote unauthenticated attacker can o

A Denial of Service vulnerability in the SIP application layer gateway (ALG) component of Junos OS based platforms allow

An error handling vulnerability in Routing Protocols Daemon (RPD) of Juniper Networks Junos OS allows an attacker to cau

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to cause the Junos OS kernel to

A vulnerability in the Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support can allow a network b

A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow auth

A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the steal

Receipt of a specific Draft-Rosen MVPN control packet may cause the routing protocol daemon (RPD) process to crash and r

An insecure SSHD configuration in Juniper Device Manager (JDM) and host OS on Juniper NFX Series devices may allow remot