2017

In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, whi

The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to c

The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and seg

The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment c

Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denia

The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils

Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a cr

There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cpp

There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of

There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open paren

There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU P

There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GN

There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU

There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP be

There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in i

There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that wil

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in E

The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.

An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If reloading the trust material

Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.

A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can le

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lea

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver func

In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from usersp

In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-termin

In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can

In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_da

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions ear

Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows loc

In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from users

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver pote

In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly requ

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL hand

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video drive

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video drive

In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing cert

In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free funct

In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overw

In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may impr

In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug int

In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if

In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists

In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced

In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwri

lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPr

Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-adm

classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash

classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete ac

Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to