2017

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Window

The Microsoft Windows embedded OpenType (EOT) font engine in Windows 7 SP1, Windows Server 2008 SP2 and 2008 R2 SP1, and

Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2,

Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allow

Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain informat

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that a

A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to disp

installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has XS

Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrar

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authentica

Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to

Cross-site scripting (XSS) vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 (fixed in 3.13.7) allow

IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caus

Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a null pointer de-reference issue, which can

Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a denial of service (DoS) attack, which is a

tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname

A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exist

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application cr

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an

In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted o

A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.

The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-commo

Cross-site scripting (XSS) vulnerability in Octopus Deploy 3.7.0-3.17.13 (fixed in 3.17.14) allows remote authenticated

Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject

An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "UIKit" component

An issue was discovered in certain Apple products. iOS before 11.1 is affected. tvOS before 11.1 is affected. watchOS be

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" com

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" com

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" com

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" com

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Fonts" comp

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "QuickTime"

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Quick Look"

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFString" c

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "HelpViewer"

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" com

An out-of-bounds read issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involv

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" com

An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS b

An issue was discovered in certain Apple products. Safari before 11.0.1 is affected. The issue involves the "Safari" com

An issue was discovered in certain Apple products. Safari before 11.0.1 is affected. The issue involves the "Safari" com

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "APFS" compo

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" com

In CMS Made Simple 2.2.3.1, in modules/New/action.addcategory.php, stored XSS is possible via the m1_name parameter to a

In CMS Made Simple 2.2.3.1, the is_file_acceptable function in modules/FileManager/action.upload.php only blocks file ex

The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-p

Cacti 1.1.27 has reflected XSS via the PATH_INFO to host.php.

In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter.

In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markd

The installer in MyBB before 1.8.13 has XSS.