CVE-2018-2410

SAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs, which results in a Cross-Site Scripting XSS vulnerability...

tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser

The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktapifprint...

tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser

The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4print...

tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser

The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqpprint...

tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...

tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser

The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions...

tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser

The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6print...

tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintisreachsubtlv...

tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...

tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser

The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintts...

tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions...

tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...

tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...

tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser

The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handlemlppp...

tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser

The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprint...

tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser

The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2print...

GitLab Cross-Site Scripting Vulnerability (CNVD-2018-08692)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A cross-site scripting vulnerability exists in GitLab CE and EE versions 9.2 through 10.4. The...

SecurEnvoy SecurMail Insecure Direct Object Reference Vulnerability

SecurEnvoy SecurMail allows you to send email securely. An insecure direct object reference vulnerability exists in SecurEnvoy SecurMail before 9.2.501. A remote authenticated user can exploit this vulnerability to read arbitrary email messages via the option1 parameter in the reply action of...

GLPI Remote Code Execution Vulnerability

GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A security vulnerability exists in GLPI 9.2.1 and earlier versions. A...

CVE-2017-5811

A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...