2017

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymi

JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous

Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary we

An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup f

An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page.

An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use cre

A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker

A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker

A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express

A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary co

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges t

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker

A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote atta

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker

A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticat

A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated,

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated

A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a c

A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unaut

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Networ

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Networ

A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database inte

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat

A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated,

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not

An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by a

The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote a

The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.

Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain se

Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 does not use a constant-time compari

Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0.184.3.127

Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x befor

NetApp OnCommand System Manager before 9.0 allows remote attackers to obtain sensitive credentials via vectors related t

NetApp AltaVault 4.1 and earlier allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or caus

NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive informat

In ObjectPlanet Opinio before 7.6.4, there is XSS.

When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service (OOM) in ReadMAT

When GraphicsMagick 1.3.25 processes a DPX image (with metadata indicating a large width) in coders/dpx.c, a denial of s

On TP-Link NC250 devices with firmware through 1.2.1 build 170515, anyone can view video and audio without authenticatio

When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/

AeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates. An attacker can hijack an update via man-in-

AeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied is taken directly from

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4

Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's family

Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or