2018

In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux K

An issue was discovered on Momentum Axel 720P 5.1.8 devices. All processes run as root.

An issue was discovered on Momentum Axel 720P 5.1.8 devices. The root password can be obtained in cleartext by issuing t

An issue was discovered on Momentum Axel 720P 5.1.8 devices. Root access can be obtained via UART pins without any restr

An issue was discovered on Momentum Axel 720P 5.1.8 devices. Custom Firmware Upgrade is possible via an SD Card. With ph

An issue was discovered on Momentum Axel 720P 5.1.8 devices. There is Authenticated Custom Firmware Upgrade via DNS Hija

A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or

Little Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors() function without the kSecCSCheckAllAr

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_ch

Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. S

Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An att

Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Sec

Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.

ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db provisioning. When engi

routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which c

In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where

Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 al

An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the clien

An issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x before 15.4.1 and Cert

Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbi

The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links. If

A mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src" policy of "'strict-dyn

The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name t

The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard in

It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a use

If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home p

Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of

The web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both will display "chrome:"

In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by de

Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the "multipart/x-mixe

Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Thu

WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com

URLs using "javascript:" have the protocol removed when pasted into the addressbar to protect users from cross-site scri

If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission not

Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise p

A spoofing vulnerability can occur when a malicious site with an extremely long domain name is opened in an Android Cust

If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, this

The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a

Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-s

Low descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in the addressbar. When use

The reader view will display cross-origin content when CORS headers are set to prohibit the loading of cross-origin cont

The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta

If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to sc

If an existing cookie is changed to be "HttpOnly" while a document is open, the original value remains accessible throug

When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spoo

If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be rend

An audio capture session can started under an incorrect origin from the site making the capture request. Users are still

A Blob URL can violate origin attribute segregation, allowing it to be accessed from a private browsing tab and for data

The printing process can bypass local access protections to read files available through symlinks, bypassing local file

Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a