2018

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primi

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handlin

In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial

The irda_setsockopt function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel b

Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux

Mate10 Pro Huawei smart phones with the versions before 8.1.0.326(C00) have a FRP bypass vulnerability. During the mobil

P10 Huawei smartphones with the versions before Victoria-AL00AC00B217 have an information leak vulnerability due to the

In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-

Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148(C432) have a Factory Reset Protection (FRP) b

In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while

A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this flaw

A flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated attacker could use this flaw

A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to

A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this flaw

A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use

It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use t

It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node

It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash whi

An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via

A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attacke

It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc

It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attribu

AttacheCase ver.3.3.0.0 and earlier allows an arbitrary script execution via unspecified vectors.

AttacheCase ver.2.8.4.0 and earlier allows an arbitrary script execution via unspecified vectors.

Cross-site scripting vulnerability in Movable Type versions prior to Ver. 6.3.1 allows remote attackers to inject arbitr

A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter environment variables via unsp

Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an atta

Directory traversal vulnerability in Explzh v.7.58 and earlier allows an attacker to read arbitrary files via unspecifie

The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required

An issue was discovered in baigo CMS v2.1.1. There is an index.php?m=article&c=request CSRF that can cause publication o

CraftedWeb through 2013-09-24 has reflected XSS via the p parameter.

OneThink 1.1.141212 allows CSRF for adding a page via admin.php?s=/Channel/add.html, adding a blog via admin.php?s=/Arti

Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.ph

Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.

An issue was discovered in SeaCMS through 6.61. adm1n/admin_database.php allows remote attackers to delete arbitrary fil

An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admin_topic_vod.p

An issue was discovered in SeaCMS 6.61. adm1n/admin_reslib.php has SSRF via the url parameter.

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexterna

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.

BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login.

admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account.

GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf

In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.

Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to suppl

Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c in OpenS

A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenS

A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in OpenSC before 0.19.0-r

A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0

A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs1