2018

If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer overflow in __wlan_hdd_cfg80211_add_key() may occur when copyin

In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur in Android releases from CAF using the li

Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android fo

In the KGSL driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android

While processing the HTT_T2H_MSG_TYPE_MGMT_TX_COMPL_IND message, a buffer overflow can potentially occur in Android rele

In wlan_hdd_cfg80211_set_privacy_ibss() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS

In the ADSP RPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD And

While processing fragments, when the fragment count becomes very large, an integer overflow leading to a buffer overflow

A buffer over-read can occur during a fast initial link setup (FILS) connection in Android releases from CAF using the l

In the FastRPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Andr

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From f

In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in ver

Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure

In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security p

Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android

Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in

IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform

An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 c

The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an

All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerabilit

All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerabili

All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerabilit

Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon in Synology SSL VPN Cli

The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at

The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start i

Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request.

In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" (which is supposed to overr

Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (d

DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.

In BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018-10266.

An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seede

An issue was discovered on Diqee Diqee360 devices. A firmware update process, integrated into the firmware, starts at bo

An issue was discovered on Dongguan Diqee Diqee360 devices. The affected vacuum cleaner suffers from an authenticated re

The transfer, transferFrom, and mint functions of a smart contract implementation for PFGc, an Ethereum token, have an i

The transfer and transferFrom functions of a smart contract implementation for ChuCunLingAIGO (CCLAG), an Ethereum token

The transfer and transferFrom functions of a smart contract implementation for Bittelux (BTX), an Ethereum token, have a

The _sell function of a smart contract implementation for GROWCHAIN (GROW), an Ethereum token, has an integer overflow.

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function

In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independen

In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the ha

Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server.

Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint. Missing chec

rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not valida

An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user's web portal login cre

Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing t

The sell function of a smart contract implementation for GSI, an Ethereum token, has an integer overflow in which "amoun

The sell function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin), an Ethereum token, has

The sell function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterToken), an Ethereum token, ha

The sell function of a smart contract implementation for DestiNeed (DSN), an Ethereum token, has an integer overflow in

The sell function of a smart contract implementation for RiptideCoin (RIPT), an Ethereum token, has an integer overflow