2018

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, local attacke

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attack

A vulnerability in the web interface of Cisco MATE Live could allow an unauthenticated, remote attacker to view and down

A vulnerability in the web-based management interface of Cisco MATE Collector could allow an unauthenticated, remote att

A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthen

A vulnerability in the peer-to-peer message processing functionality of Cisco Packet Data Network Gateway could allow an

A vulnerability in the device manager web interface of Cisco Industrial Ethernet Switches could allow an unauthenticated

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attack

A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer (SSL) VPN portal

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attack

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attack

A vulnerability in the WebVPN web-based management interface of Cisco Adaptive Security Appliance could allow an unauthe

A vulnerability in the UDP broadcast forwarding function of Cisco IOS XR Software could allow an unauthenticated, adjace

Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance (ASA)

A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation

A vulnerability in the role-based resource checking functionality of the Cisco Unified Computing System (UCS) Director c

A vulnerability in the file type detection mechanism of the Cisco Advanced Malware Protection (AMP) for Endpoints macOS

A vulnerability in the Secure Sockets Layer (SSL) packet reassembly functionality of the detection engine in Cisco Firep

A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Ci

A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense (FTD) Software for Cis

A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication f

A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance (ASA) could allow an una

A vulnerability in the Secure Sockets Layer (SSL) Virtual Private Network (VPN) Client Certificate Authentication featur

A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow

An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with asso

An exploitable use of an uninitialized pointer vulnerability exists in the JavaScript engine in Foxit PDF Reader version

POSCMS 3.2.18 allows remote attackers to execute arbitrary PHP code via the diy\dayrui\controllers\admin\Syscontroller.p

POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.

Cross-site scripting (XSS) vulnerability in the Enhanced Image (aka image2) plugin for CKEditor (in versions 4.5.10 thro

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455.

Huawei AR1200 V200R006C10SPC300, AR160 V200R006C10SPC300, AR200 V200R006C10SPC300, AR2200 V200R006C10SPC300, AR3200 V200

The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105(C00), 8.0.0.1

phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_ope

Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP chann

A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (I

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS

Electronic Numbers to URI Mapping (ENUM) module in some Huawei products DP300 V500R002C00, RP200 V600R006C00, TE30 V100R

Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager version

A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted H

A remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware version 1.10.22 by sending a

A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending

A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending

Open-AudIT before 2.2 has CSV Injection.

MiniCMS v1.10 has XSS via the mc-admin/conf.php site_link parameter.

thinkphp 3.1.3 has SQL Injection via the index.php s parameter.

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via /index.php/admin/tag/add.htm

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/

An issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a Column via /admincp.php?ap

An issue was discovered in WUZHI CMS V4.1.0. There is a persistent XSS vulnerability that can steal the administrator co