2017

Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files

The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to cause a

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which a

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload

Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID pa

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name coll

The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.

Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecifie

Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.

In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds

Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication.

WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.

WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.

A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through N

Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW40

The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on Novi

Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metach

An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Ent

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action.

components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because sh

Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.

A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.

In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_da

In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are n

In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow v

In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel mem

In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not prop

In all Qualcomm products with Android releases from CAF using the Linux kernel, when downloading a file, an excessive am

In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists whe

In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable i

In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerabili

In all Qualcomm products with Android releases from CAF using the Linux kernel, a use-after-free vulnerability exists in

In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable i

In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not suf

In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementR

In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementR

In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is

In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists

In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offse

In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello r

In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occ

In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occ

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists

In all Qualcomm products with Android releases from CAF using the Linux kernel, the Secure File System can become corrup

In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not pro

In all Qualcomm products with Android releases from CAF using the Linux kernel, a potential compiler optimization of mem

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists i