2017

gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to

The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by te

An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A sp

An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to

An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an obj

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malforme

An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus.

A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a

The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform

The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.00

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cac

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cac

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cac

Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilde

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint

When processing a record type of 0x3c from a Workbook stream from an Excel file (.xls), JustSystems Ichitaro Office trus

When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how m

Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows

Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attac

IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buf

The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a cert

An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() fu

An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. Th

An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been id

An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read().

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal usin

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9. Out of Bounds read and w

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read."

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9. Invalid Write and Intege

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9. Integer Overflow."

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9. Out of Bounds Reads."

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "3 of 9. Buffer Overflow in versi

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9. Null Pointer Deref / cal

Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript before ecc

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via

tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.

The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a deni

IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE)

D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devi

OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and re

The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal

Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10

The installPackage function in the installerHelper subcomponent in Libmacgpg in GPG Suite before 2015.06 allows local us

A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, rem

An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server (CMS), formerly Acano Co

A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attac

A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to

An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0