2018

Untrusted search path vulnerability in the installer of Visual C++ Redistributable allows an attacker to gain privileges

Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows

Untrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to gain privileges via a T

Untrusted search path vulnerability in the installer of Visual Studio Community allows an attacker to gain privileges vi

Untrusted search path vulnerability in the installer of Skype for Windows allows an attacker to gain privileges via a Tr

Untrusted search path vulnerability in Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in

Untrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to gain privileges via a T

Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL i

IIJ SmartKey App for Android version 2.1.0 and earlier allows remote attackers to bypass authentication [effect_of_bypas

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attac

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attac

Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and ea

Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authen

SAJ Solar Inverter allows remote attackers to obtain potentially sensitive information via a direct request for the inve

A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web app

IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal.

Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley L30ERMS safety devices v30 and earli

The mintToken function of a smart contract implementation for BitAsean (BAS), a tradable Ethereum ERC20 token, has no pe

The mintToken function of a smart contract implementation for GOAL Bonanza (GOAL), a tradable Ethereum ERC20 token, has

The mintToken function of a smart contract implementation for Fujinto (NTO), a tradable Ethereum ERC20 token, has no per

The mintToken function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, has no

The mintToken function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token

The mintToken function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, has no

The mintToken function of a smart contract implementation for PolyAI (AI), a tradable Ethereum ERC20 token, has no perio

The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap t

The sell function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, allows a po

The sell function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, allows a pot

The sell function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token, all

The sell function of a smart contract implementation for SwftCoin (SWFTC), a tradable Ethereum ERC20 token, allows a pot

The buy function of a smart contract implementation for Gold Reward (GRX), an Ethereum ERC20 token, allows a potential t

The approveAndCallcode function of a smart contract implementation for Block 18 (18T), an tradable Ethereum ERC20 token,

The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger exce

A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cpl

TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote attackers to cause a denial of service (re

TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary c

tinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h.

Out-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Deni

In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persisten

ruby-ffi version 1.9.23 and earlier has a DLL loading issue which can be hijacked on Windows OS, when a Symbol is used a

The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Admi

SLiMS 8 Akasia 8.3.1 allows remote attackers to bypass the CSRF protection mechanism and obtain admin access by omitting

The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointer derefere

Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An at

Froxlor through 0.9.39.5 has Incorrect Access Control for tickets not owned by the current user.

CirCarLife Scada v4.2.4 allows unauthorized upgrades via requests to the html/upgrade.html and services/system/firmware.

Redatam7 (formerly Redatam WebServer) allows remote attackers to read arbitrary files via /redbin/rpwebutilities.exe/tex

An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute

Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log f