2017

In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVi

In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerabili

In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of an SCM call.

In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM.

In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of a DRM provisioning com

In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be use

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API.

The vmw_gb_surface_define_ioctl function (accessible via DRM_IOCTL_VMW_GB_SURFACE_CREATE) in drivers/gpu/drm/vmwgfx/vmwg

IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to em

IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to em

IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to em

IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to em

IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error cond

IBM Maximo Asset Management 7.5 and 7.6 could allow a remote authenticated attacker to execute arbitrary commands on the

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript

SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitra

SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitra

New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to esc

libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon re

Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords.

/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer (QCI) before 1.0 GA is created wor

The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.

Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges.

The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception an

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure tha

A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain crede

A vulnerability in the web interface of Cisco Elastic Services Controllers could allow an authenticated, remote attacker

A vulnerability in the file system of Cisco Elastic Services Controllers could allow an authenticated, local attacker to

A vulnerability in the ConfD server in Cisco Ultra Services Platform could allow an authenticated, local attacker to vie

A vulnerability in the Virtual Network Function Manager's (VNFM) logging function of Cisco Ultra Services Platform could

A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local

A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log i

A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to

A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarO

A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to

A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affe

A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with acc

A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with acc

A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with acce

A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affe

A vulnerability in the esc_listener.py script of Cisco Elastic Services Controllers could allow an authenticated, remote

A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to

A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, re

A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote

A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacke

A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauth

A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user inform

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could a

A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remo