2018

cmake installs the cmake x86 linux binaries. cmake downloads binary resources over HTTP, which leaves it vulnerable to M

node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

node-thulac is a node binding for thulac. node-thulac downloads binary resources over HTTP, which leaves it vulnerable t

redis-srvr is a npm wrapper for redis-server. redis-srvr downloads binary resources over HTTP, which leaves it vulnerabl

js-given is a JavaScript frontend to jgiven. js-given downloads binary resources over HTTP, which leaves it vulnerable t

haxe-dev is a cross-platform toolkit. haxe-dev downloads binary resources over HTTP, which leaves it vulnerable to MITM

grunt-ccompiler is a Closure Compiler Grunt Plugin. grunt-ccompiler downloads binary resources over HTTP, which leaves i

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKit

Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise ve

Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in

soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) o

In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if us

In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on

In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of

An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sas

An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sas

An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::op

An issue was discovered in LibSass <3.5.3. A NULL pointer dereference was found in the function Sass::Expand::operator w

An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::

An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sas

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vu

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might a

The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which

An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an article via /index.php?ca

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 6 of 6).

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 5 of 6).

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 4 of 6).

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 3 of 6).

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 2 of 6).

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 1 of 6).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 46 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 45 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 44 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 43 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 42 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 41 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 40 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 32 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 31 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 30 of 46).

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 29 of 46).