2018

SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including sc

SAP MaxDB ODBC driver (all versions before 7.9.09.07) allows an attacker to inject code that can be executed by the appl

Under certain conditions, the SAP Identity Management 8.0 (pass of type ToASCII) allows an attacker to access informatio

SAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an untrusted source.

SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7.11, 7.30, 7.31, 7.40, 7

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka

An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information D

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle

An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Micros

A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly hand

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Window

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Win

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Win

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Window

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

A spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library improperly validates certi

A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka

An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, aka

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Win

A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device

An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and wri

The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers

Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Note in Synology Note Station before 2.5.1-0844 allows remo

Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote

Severalnines ClusterControl before 1.6.0-4699 allows XSS.

Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to

In FreeBSD before 11.1-STABLE(r332066) and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to user

In FreeBSD before 11.1-STABLE(r332303), 11.1-RELEASE-p10, 10.4-STABLE(r332321), and 10.4-RELEASE-p9, due to insufficient

The Bitpie application through 3.2.4 for Android and iOS uses cleartext storage for digital currency initial keys, which

A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts i

A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts i

Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-

hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that lea

python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1 is vulnerable to an information disclosure. Software using

A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/

An exposure of sensitive information vulnerability exists in Jenkins Email Extension Plugin 2.61 and older in src/main/r

A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that a

An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java tha

A session fixaction vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java

RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is aff

An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_

ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.

ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c.