2018

When the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured with a wildcard IPSec tun

X509 certificate verification was not correctly implemented in the IP Intelligence Subscription and IP Intelligence feed

CMS Made Simple (CMSMS) through 2.2.7 allows physical path leakage via an invalid /index.php?page= value, a crafted URI

PHP Scripts Mall Student Profile Management System Script v2.0.6 has XSS via the Name field to list_student.php.

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.

PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action.

PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page.

Reflected XSS exists in PHP Scripts Mall Website Seller Script 2.0.3 via the Listings Search feature.

CRLF injection vulnerability in the web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and Ope

Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.0 and 8.5.1 allows remote attackers to inje

The hi3660_stub_clk_probe function in drivers/clk/hisilicon/clk-hi3660-stub.c in the Linux kernel before 4.16 allows loc

joyplus-cms 1.6.0 has XSS in manager/admin_vod.php via the keyword parameter.

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x9538

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x9538

The jDownloads extension before 3.2.59 for Joomla! has XSS.

pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd servi

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occ

Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitize_ur

Cacti before 1.1.37 has XSS because the get_current_page function in lib/functions.php relies on $_SERVER['PHP_SELF'] in

CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replay

Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary we

IBM DOORS Next Generation (DNG/RRC) 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This

Cross-site scripting (XSS) vulnerability in the new_Twitter_sign_button function in nextend-Twitter-connect.php in the N

rhnreg_ks in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Gluster Storage 2.1 and Enterprise Linux (RH

A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to r

A denial of service vulnerability exists in the way that Windows handles objects in memory, aka "Microsoft Graphics Comp

An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, ak

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Interne

An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka

An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Interne

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in I

An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Interne

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validat

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Window

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validat