2017

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to settin

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to proces

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR co

The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP

Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted

Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and da

The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, result

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted

A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted

The "http-client" egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed v

The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTP_PROXY environment variable, which w

eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserServ

eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allow

D-Link DGS-1100 devices with Rev.B firmware 1.01.018 have a hardcoded SSL private key, which allows man-in-the-middle at

An issue was discovered in Linux Containers (LXC) before 2016-02-22. When executing a program via lxc-attach, the nonpri

An issue was discovered in Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4, and 4.2.x before 4.2.1. Spring Sec

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may be able to modify th

An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of

An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library

An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TI

An exploitable heap overflow vulnerability exists in the Compound Binary File Format (CBFF) parser functionality of Lexm

An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion function

When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will atte

When opening a Hangul Hcell Document (.cell) and processing a record that uses the CSSValFormat object, Hancom Office 20

When opening a Hangul Hcell Document (.cell) and processing a particular record within the Workbook stream, an index mis

When opening a Hangul Hcell Document (.cell) and processing a property record within the Workbook stream, Hancom Office

When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use

When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use

When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will atte

A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates

A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin. Specially crafted data sent via the

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent

An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted

An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data

Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT

An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timesta

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a spec

The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of

MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bit

The Parental Control panel in Genexis devices with DRGOS before 1.14.1 allows remote authenticated users to execute arbi

The ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the Linux kernel before 4.6.

The _prolog_error function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 h

The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure

sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute

Unrestricted file upload vulnerability in the fileUnzip->unzip method in Dotclear before 2.10.3 allows remote authentica

Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote att

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL po