2018

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory,

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

A remote code execution vulnerability exists when HTTP Protocol Stack (Http.sys) improperly handles objects in memory, a

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses speci

A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly ha

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "

An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce priv

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valida

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regis

A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code

A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code

An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of a

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regis

An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly ha

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E

An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vuln

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analytic

The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not

An issue was discovered in VirusTotal. A maliciously crafted Universal/fat binary can evade third-party code signing che

An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fat binary can evade third-party code sign

An issue was discovered in Google Santa and molcodesignchecker. A maliciously crafted Universal/fat binary can evade thi

An issue was discovered in Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign, and procInfo. A maliciously craf

An issue was discovered in F-Secure XFENCE and Little Flocker. A maliciously crafted Universal/fat binary can evade thir

Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfe

An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multi

The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double

When an Apache Geode server versions 1.0.0 to 1.4.0 is configured with a security manager, a user with DATA:WRITE privil

Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Servic

Node.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM. A bug introduced in 9.7.0 increases

All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service

All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of se

There is a heap out of bounds read in radare2 2.6.0 in java_switch_op() in libr/anal/p/anal_java.c via a crafted Java bi

There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted Java binary file.

m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.

An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.

An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.

A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attac

The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the g

The TIBCO Administrator server component of of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO