2018

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Bluetooth"

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Graphics Dr

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Intel Graph

The kdump implementation is missing the host key verification in the kdump and mkdumprd OpenSSH integration of kdump pri

BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service (stack consumption and daemon

A out-of-bounds read information disclosure vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local

A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attac

A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attac

A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attac

Unverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM) before 6.2-23739 allow

IBM Security Identity Manager Virtual Appliance 7.0 processes patches, image backups and other updates without sufficien

A vulnerability in pam_modules of SUSE Linux Enterprise allows attackers to log into accounts that should have been disa

Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json

Twonky Server before 8.5.1 has XSS via a modified "language" parameter in the Language section.

Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen.

xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by

A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-s

A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-s

A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remot

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduc

A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could al

A vulnerability in the web framework of the Cisco Unified Communications Manager (Unified CM) software could allow an au

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic

A vulnerability in the certificate management subsystem of Cisco AnyConnect Network Access Manager and of Cisco AnyConne

A vulnerability in the VPN configuration management of Cisco FireSIGHT System Software could allow an unauthenticated, r

A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Cisco Wide Area

A vulnerability in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and

content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page.

IBM Robotic Process Automation with Automation Anywhere 10.0 is vulnerable to cross-site request forgery which could all

protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.

bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template

crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of f

lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaults

serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is

connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of

simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.

glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to

node-srv node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malici

angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilenam

serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and a

st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 (redirect) t

elding is a simple web server. elding is vulnerable to a directory traversal issue, allowing an attacker to access the f

dasafio is a web server. dasafio is vulnerable to a directory traversal issue, giving an attacker access to the filesyst

The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o fo

The HTTP client module superagent is vulnerable to ZIP bomb attacks. In a ZIP bomb attack, the HTTP server replies with

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is kno

easyquick is a simple web server. easyquick is vulnerable to a directory traversal issue, giving an attacker access to t

Buffer over -read can occur while processing a FILS authentication frame in all Android releases from CAF (Android for M

Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101

Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101