2018

An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp-content/uploads/wp-securit

An attacker with physical access to a BrilliantTS FUZE card (MCU firmware 0.1.73, BLE firmware 0.7.4) can unlock the car

The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic f

IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting. This v

IBM QRadar 7.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID:

IBM QRadar 7.3 and 7.3.1 specifies permissions for a security-critical resource in a way that allows that resource to be

An information disclosure vulnerability in the Qualcomm IPA driver. Product: Android. Versions: Android kernel. Android

The __get_data_block function in fs/f2fs/data.c in the Linux kernel before 4.11 allows local users to cause a denial of

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1,

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1,

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. Th

In bta_pan_data_buf_ind_cback of bta_pan_act.cc there is a use after free that can result in an out of bounds read of me

A information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel.

A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Androi

A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1,

A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1,

A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1,

A denial of service vulnerability in the Android framework (package installer). Product: Android. Versions: 6.0, 6.0.1,

A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.

In sdp_server_handle_client_req of sdp_server.cc, there is an out of bounds read due to a missing bounds check. This cou

In M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop of pushing items into a

In getVSCoverage of CmapCoverage.cpp, there is a possible out of bounds read due to an incorrect bounds check. This coul

Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication

Open redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3.1 allows remote attack

Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7

Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAf

proberv.php in Yahei-PHP Proberv 0.4.7 has XSS via the funName parameter.

iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field.

iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field.

iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php.

JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/j

The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of

Brave Browser before 0.13.0 allows remote attackers to cause a denial of service (resource consumption) via a long alert

Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate prod

Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 allows an HTTP Respon

Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior o

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kern

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kern

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kern

AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be d

DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localh

OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to PI AF Client 2016, Versi

Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implem

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Images

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The is

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Find My iPhone"

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Files Widget" co

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud b

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "NVIDIA Grap

An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" compo