2017

Information disclosure vulnerability in Netatmo Indoor Module firmware 100 and earlier.

kgb-bot 1.33-2 allows remote attackers to cause a denial of service (crash).

Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38.

Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5.

Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackers to inje

Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact vi

FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via s

Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multili

Cross-site scripting (XSS) vulnerability in MantisBT 1.2.13 and later before 1.2.20.

Directory traversal vulnerability in ES File Explorer 3.2.4.1.

HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30.

The httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allows remote attackers to execute arbitrary code.

Buffer overflow in xymon 4.3.17-1.

Improper Authentication vulnerability in the "LDAP / SSO Authentication" (ig_ldap_sso_auth) extension 2.0.0 for TYPO3.

Directory traversal vulnerability in unshield 1.0-1.

Directory traversal vulnerability in ppmd 10.1-5.

Multiple directory traversal vulnerabilities in ha 0.999p+dfsg-5.

Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.2.

Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by modifying th

libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference).

wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-

Stack-based buffer overflow in IBM V5R4, and IBM i Access for Windows 6.1 and 7.1.

Cross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x before 8.0.1,

Multiple SQL injection vulnerabilities in SmartCMS v.2.

Multiple cross-site scripting (XSS) vulnerabilities in SmartCMS v.2.

Cross-site scripting (XSS) vulnerability in BMC Footprints Service Core 11.5.

Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code.

Emacs 24.4 allows remote attackers to bypass security restrictions.

Cross-site scripting (XSS) vulnerability in vBulletin 3.5.4, 3.6.0, 3.6.7, 3.8.7, 4.2.2, 5.0.5, and 5.1.3.

Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.

Cross-site request forgery (CSRF) vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1.0.7 and earlier, and 6

Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 an

Multiple cross-site scripting (XSS) vulnerabilities in Cit-e-Net Cit-e-Access 6.

Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key.

Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015.

Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.

Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; Supp

Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 t

Cross-site scripting (XSS) vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40.

Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3.

The 'vp3_decode_frame' function in FFmpeg 1.1.4 moves threads check out of header packet type check.

Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service.

The setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binuti

In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a

Privilege escalation in Replibit Backup Manager earlier than version 2017.08.04 allows attackers to gain root privileges

The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause

Directory traversal vulnerability in viewer_script.jsp in Riverbed OPNET App Response Xpert (ARX) version 9.6.1 allows r

In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted.

In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, w