2017

IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory ins

IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool tha

IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows us

IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows use

IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be

IBM Rational Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to emb

An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user.

The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which

Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Buil

The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data

A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it ea

Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authenticat

IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and AES GCM, uses rando

An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to acces

An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access

An information disclosure vulnerability in the Filesystem could enable a local malicious application to access data outs

An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside

An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to

An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on

An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass opera

An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating syst

An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating

An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating

An information disclosure vulnerability in the Qualcomm Secure Execution Environment Communicator could enable a local m

NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volu

Cross-site request forgery (CSRF) vulnerability in NetApp Snap Creator Framework before 4.3.0P1 allows remote attackers

The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by another

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting. This vulnerability allows us

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information abou

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by

IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restriction

chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIO

bsnmpd, as used in FreeBSD 9.3, 10.1, and 10.2, uses world-readable permissions on the snmpd.config file, which allows l

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of

Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an ope

OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (

Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attacke

Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers

XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction param

XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events/events date parameter.

XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter.

The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 d

The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxatt

Off-by-one error in the pipe_advance function in lib/iov_iter.c in the Linux kernel before 4.9.5 allows local users to o

The klsi_105_get_line_state function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitia

The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXO

The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block

The smbhash function in fs/cifs/smbencrypt.c in the Linux kernel 4.9.x before 4.9.1 interacts incorrectly with the CONFI

include/linux/init_task.h in the Linux kernel before 2.6.35 does not prevent signals with a process group ID of zero fro