2017

The printDirect function in lib/printer.js in the node-printer module 0.0.1 and earlier for Node.js allows remote attack

SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote

osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly v

SQL Injection exists in E-Sic 1.0 via the f parameter to esiclivre/restrito/inc/buscacep.php (aka the zip code search sc

An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via '=''or' values for the username and password

The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS befor

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS befor

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS befor

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "f

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "f

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "f

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "f

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "f

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "f

An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before

An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before

An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before

An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before

An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unes

pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate pa

The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 H

In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcompone

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcompone

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcompone

Vulnerability in the Oracle Hospitality Cruise AffairWhere component of Oracle Hospitality Applications (subcomponent: A

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Perform

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Th

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions t

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Gantt Server). Suppo

Vulnerability in the Oracle Global Order Promising component of Oracle E-Business Suite (subcomponent: Reschedule Sales

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that

A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote

The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remot

The net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP header keys, which allow

SQL injection vulnerability in the login form in GSI WiNPAT Portal 3.2.0.1001 through 3.6.1.0 allows remote attackers to

The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior

In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.

A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-base

SQL Injection exists in zorovavi/blog through 2017-10-17 via the id parameter to recept.php.

The Lenovo Service Framework Android application executes some system commands without proper sanitization of external i

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to e

Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct dire

Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.

nw.js before 0.11.5 can simulate user input events in a normal frame, which allows remote attackers to have unspecified

The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary fil

A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute o