2017

yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git commands in setting permi

In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.

dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mai

In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a

Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP sc

Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors invo

Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT

Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, R

Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to

There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of se

There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. A Crafted i

There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted inp

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input wi

There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will

There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted in

There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which causes

GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that i

Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attac

Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is

soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow wit

On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the

When the device is configured to perform account lockout with a defined period of time, any unauthenticated user attempt

An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate privileges and run arbi

A buffer overflow vulnerability in Junos OS CLI may allow a local authenticated user with read only privileges and acces

A specific device configuration can result in a commit failure condition. When this occurs, a user is logged in without

Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is sta

The re-key admin monitor was introduced in Jenkins 1.498 and re-encrypted all secrets in JENKINS_HOME with a new key. It

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code exec

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets.

Linux foundation ONOS 1.9.0 is vulnerable to a DoS.

Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration

Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function

Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function.

Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary c

Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravity_value resulting potentially leading to modificati

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to au

The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and te

CSRF in Bitly oauth2_proxy 2.1 during authentication flow

TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature resu

MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape m

The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, whi

Multiple Cross-site scripting (XSS) vulnerabilities in rpc.php in OpenMediaVault release 2.1 in Access Rights Management

kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS

kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure

kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution

xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting

EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root

Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in

Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data pars