2018

Receipt of a specific MPLS packet may cause the routing protocol daemon (RPD) process to crash and restart or may lead t

Multiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have been identified in the

A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and < V2.1.6), SIMATIC S7-

A vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker with a high-privileged

A vulnerability has been identified in ROX II (All versions < V2.12.1). An attacker with network access to port 22/tcp a

A vulnerability has been identified in SIMATIC S7-1200 CPU family version 4 (All versions < V4.2.3). The web interface c

PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI.

XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_url parameter.

XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_type parameter.

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI.

Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter.

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocumente

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses

All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. Th

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console

When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP t

Permissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe before version 4.7.0.2

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious X

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesse

A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A security feature bypass vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to pr

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E

An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memor

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objec

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory,

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Window

A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, a

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code int

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Informati

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obje

An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Win

An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Win

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c