multiple

日期	标题	类别	作者
2018-03-05	Suricata < 4.0.4 - IDS Detection Bypass	dos	Positive Technologies
2018-03-02	antMan < 0.9.1a - Authentication Bypass	webapps	Joshua Bowser
2018-02-28	Apple iOS 11.2.5 / watchOS 4.2.2 / tvOS 11.2.5 – ‘bluetoothd’ Memory Corruption	dos	Zimperium zLabs Team
2018-02-27	Chrome V8 – ‘TranslatedState::MaterializeCapturedObjectAt’ Type Confusion	dos	Google Security Research
2018-02-27	Chrome V8 – ‘PropertyArray’ Integer Overflow	dos	Google Security Research
2018-02-27	Transmission – Integer Overflows Parsing Torrent Files	dos	Google Security Research
2018-02-21	Wavpack 5.1.0 – Denial of Service	dos	r4xis
2018-02-20	μTorrent (uTorrent) Classic/Web – JSON-RPC Remote Code Execution / Information Disclosure	remote	Google Security Research
2018-02-20	MagniComp SysInfo – mcsiwrapper Privilege Escalation (Metasploit)	local	Metasploit
2018-02-16	Oracle Primavera P6 Enterprise Project Portfolio Management – HTTP Response Splitting	webapps	Marios Nicolaides
2018-02-16	JBoss Remoting 6.14.18 – Denial of Service	dos	Frank Spierings
2018-02-15	Chrome V8 – ‘Runtime_RegExpReplace’ Integer Overflow	dos	Google Security Research
2018-02-15	Pdfium – Out-of-Bounds Read with Shading Pattern Backed by Pattern Colorspace	dos	Google Security Research
2018-02-15	Pdfium – Pattern Shading Integer Overflows	dos	Google Security Research
2018-02-07	Asterisk 13.17.2 – ‘chan_skinny’ Remote Memory Corruption	dos	Juan Sacco
2018-02-06	Marked2 – Local File Disclosure	local	Corben Leo
2018-02-05	HPE iLO 4 < 2.53 - Add New Administrator User	remote	skelsec
2018-02-05	Claymore Dual GPU Miner 10.5 – Format String	dos	res1n
2018-02-02	Oracle Hospitality Simphony (MICROS) 2.7 < 2.9 - Directory Traversal	webapps	Dmitry Chastuhin
2018-02-01	BMC Server Automation RSCD Agent – NSH Remote Command Execution (Metasploit)	remote	Metasploit
2018-02-01	WebKit – ‘WebCore::FrameView::clientToLayoutViewportPoint’ Use-After-Free	dos	Google Security Research
2018-02-01	WebKit – ‘detachWrapper’ Use-After-Free	dos	Google Security Research
2018-01-29	Oracle WebLogic – wls-wsat Component Deserialization Remote Code Execution (Metasploit)	remote	Metasploit
2018-01-28	Nexpose < 6.4.66 - Cross-Site Request Forgery	webapps	Shwetabh Vishnoi