2016

IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensiti

IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensiti

SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbit

Multiple unspecified vulnerabilities in IBM BigFix Remote Control before 9.1.3 allow remote attackers to obtain sensitiv

IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmiss

The broker application in IBM BigFix Remote Control before 9.1.3 allows remote attackers to cause a denial of service vi

Cross-site scripting (XSS) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to inject arb

Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators t

IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks via unspecified vectors.

IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive cleartext information by sniffing the

A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrativ

Administrative Server in Micro Focus Host Access Management and Security Server (MSS) and Reflection for the Web (RWeb)

The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations, which allows l

The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel before 4.7.5 does not initialize a cer

The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated f

The hash_accept function in crypto/algif_hash.c in the Linux kernel before 4.3.6 allows local users to cause a denial of

The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attac

The x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows loc

crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on a

IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading erro

IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which make

Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0

Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 does not destroy a Session

Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote attackers to

Cross-site scripting (XSS) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 bef

The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafte

Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect atta

The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sens

An information disclosure vulnerability in kernel components, including the process-grouping subsystem and the networkin

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Poi

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Poi

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Poi

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Poi

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Poi

A denial of service vulnerability in Mediaserver in Android before 2016-11-05 could enable an attacker to use a speciall

An information disclosure vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malic

A denial of service vulnerability in the Input Manager Service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x be

A denial of service vulnerability in Proxy Auto Config in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1

An information disclosure vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could

An elevation of privilege vulnerability in the Bluetooth component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.

An elevation of privilege vulnerability in the Account Manager Service in Android 7.0 before 2016-11-01 could enable a l

An elevation of privilege vulnerability in the AOSP Launcher in Android 7.0 before 2016-11-01 could allow a local malici

An elevation of privilege vulnerability in the Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x bef

A remote denial of service vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could

A remote denial of service vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could

An information disclosure vulnerability in the download manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x b

An information disclosure vulnerability in Conscrypt and BoringSSL in Android 6.x before 2016-11-01 and 7.0 before 2016-

An elevation of privilege in the System UI in Android 7.0 before 2016-11-01 could enable a local malicious user to bypas

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Poi