2017

In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one b

In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer.

The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read an

In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse

smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop w

game-music-emu before 0.6.1 mishandles unspecified integer values.

game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).

The Content-Encoding HTTP header feature in ws-xmlrpc 3.1.3 as used in Apache Archiva allows remote attackers to cause a

The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated users to cause a denial of

The spice-gtk widget allows remote authenticated users to obtain information from the host clipboard.

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own.

PostgreSQL PL/Java after 9.0 does not honor access controls on large objects.

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter th

The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin" administrator account, which

The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows r

Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a

MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an empty password and dele

Cross-site scripting (XSS) vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbi

Cross site scripting (XSS) vulnerability in pages.edit_form.php in flatCore 1.4.6 allows remote attackers to inject arbi

irc.cgi in CGI:IRC before 0.5.12 reflects user-supplied input from the R parameter without proper output encoding, aka X

The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired al

SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL com

Cross-site scripting (XSS) vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to inject arbi

The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors invo

CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for w

poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of

The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is conf

In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnera

In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exis

In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vuln

In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerabili

In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could

In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure Through Timing Discrepancy

In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could po

In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability cou

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerabilit

In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulnerability could potent

In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could pote

In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflo

In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could p

In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could pot

In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Co

In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist

In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability cou

In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerabi

In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerabili

In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.

In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerabili

In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially o