2017

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Came

An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Ca

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Ca

An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 In

GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an

install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the database_username

In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service (s

The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to caus

The wav_open_read function in frontend/input.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to c

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that cou

Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability i

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character c

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF parsing

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF process

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the bitmap repr

Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability i

Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability i

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF imaging

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz rep

Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploita

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising m

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID c

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal comp

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal r

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Text

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating th

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when se

The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which al

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party mod

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules ou

In Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a non-administrative user

In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in th

If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsC

WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypa

The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. This bearer token, i

The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary.

The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2

The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use

The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-bas

The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where

The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N

An issue was discovered in the size of the default stack guard page on PAX Linux (originally from GRSecurity but shipped

libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting th

NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attacke

A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitra