2018

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory,

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles a filtered response

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, aka

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Window

A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially cr

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Mi

An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to proper

A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Servic

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from

stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__o

dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters.

Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related i

Monstra CMS V3.0.4 has XSS when ones tries to register an account with a crafted password parameter to users/registratio

Monstra CMS V3.0.4 has an information leakage risk (e.g., PATH, DOCUMENT_ROOT, and SERVER_ADMIN) in libraries/Gelato/Err

Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git r

An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in /designer/add/styles

An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in apps/filemanager/upl

A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arb

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-pu

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-

Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges.

Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to pote

Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote

A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters ma

A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4

Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with

Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0

A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Manage

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.

Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary co

Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user

Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an u

Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an

A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potential

Directory permissions in the Intel OpenVINO Toolkit for Windows before version 2018.1.265 may allow an authenticated use

DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may al

Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potenti

Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to

Buffer overflow in input handling in Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to pot

Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated

Pulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users during Windows Logon, can al

Pluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is uploaded via pages->manage u

feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new.

razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component.