2017

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a dev

A denial of service vulnerability in libmedia and libstagefright in Mediaserver could enable an attacker to use a specia

A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted f

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a dev

A denial of service vulnerability in Telephony could enable a local malicious application to use a specially crafted fil

An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable

An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable

Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have a security by

Adobe Flash Player versions 24.0.0.186 and earlier have a security bypass vulnerability related to handling TCP connecti

Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics p

Cross-site scripting (XSS) vulnerability in MantisBT Filter API in MantisBT versions before 1.2.19, and versions 2.0.0-b

eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remo

A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows

Installing a zero-permission Android application on certain Samsung Android devices with KK(4.4), L(5.0/5.1), and M(6.0)

Stack-based buffer overflow vulnerability in Netop Remote Control versions 11.53, 12.21 and prior. The affected module i

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the SCINI driver may allow a lo

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may cause a denial-of-se

A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information discl

A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Viru

A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver.

Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Specially c

A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driv

A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF

An exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT contact

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sen

An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the serv

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sen

A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT d

An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the serv

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sen

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sen

An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb

A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection al

An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec

Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.3 allows remote authenticated users to inject arbi

Authentication bypass vulnerability in Enterprise Security Manager (ESM) and License Manager (LM) in Intel Security McAf

Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php

Cross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes/media.php in WordPress

authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which mig

The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause a denial of service (prevention of clu

Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.6.9 for WordPress allows remote authenticate

Virtual servers in F5 BIG-IP systems 11.6.1 before 11.6.1 HF1 and 12.1.x before 12.1.2, when configured to parse RADIUS

Directory traversal vulnerability in scgi-bin/platform.cgi on NETGEAR FVS336Gv3, FVS318N, FVS318Gv2, and SRX5308 devices

Borg (aka BorgBackup) before 1.0.9 has a flaw in the way duplicate archive names were processed during manifest recovery

Borg (aka BorgBackup) before 1.0.9 has a flaw in the cryptographic protocol used to authenticate the manifest (list of a