2017

IBM Atlas eDiscovery Process Management 6.0.3 could allow an authenticated attacker to obtain sensitive information when

IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that

IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which th

IBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access to restricted data and f

IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction between multiple actors and allows those actors to negotiat

Sangoma NetBorder / Vega Session Controller before 2.3.12-80-GA allows remote attackers to execute arbitrary commands vi

ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job.

The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error a

Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site

Cross-site scripting (XSS) vulnerability in MistServer before 2.13 allows remote attackers to inject arbitrary web scrip

A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a h

The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subsc

net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback

The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON

net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for

An issue was discovered in the software on Vaultek Gun Safe VT20i products. There is no encryption of the session betwee

An issue was discovered in the software on Vaultek Gun Safe VT20i products, aka BlueSteal. An attacker can remotely unlo

The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu) 0.6.1 doe

A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions < 8.12. This vulnerabi

NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorr

NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to improper usage

NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to a race conditi

GNU Libextractor 1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application cras

In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet conta

Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed envi

An information disclosure vulnerability in the NVIDIA libwilhelm. Product: Android. Versions: Android kernel. Android ID

An elevation of privilege vulnerability in the kernel edl. Product: Android. Versions: Android kernel. Android ID A-6310

An elevation of privilege vulnerability in the MediaTek system server. Product: Android. Versions: Android kernel. Andro

An elevation of privilege vulnerability in the MediaTek bluetooth driver. Product: Android. Versions: Android kernel. An

An elevation of privilege vulnerability in the MediaTek performance service. Product: Android. Versions: Android kernel.

An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: Android kernel. Andr

An information disclosure vulnerability in the kernel camera server. Product: Android. Versions: Android kernel. Android

An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android I

An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Android kernel. Android I

An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. And

An elevation of privilege vulnerability in the kernel file system. Product: Android. Versions: Android kernel. Android I

An information disclosure vulnerability in the kernel binder driver. Product: Android. Versions: Android kernel. Android

An elevation of privilege vulnerability in the kernel mtp usb driver. Product: Android. Versions: Android kernel. Androi

An elevation of privilege vulnerability in the kernel binder. Product: Android. Versions: Android kernel. Android ID A-6

An elevation of privilege vulnerability in the Broadcom wireless driver. Product: Android. Versions: Android kernel. And

A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 7.0, 7.1.1, 7.1.2,

An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1.

An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1.

An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1.

An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0,

An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 5.1

An elevation of privilege vulnerability in the Android media framework (libaudioservice). Product: Android. Versions: 8.

An information disclosure vulnerability in the Android media framework (libmedia drm). Product: Android. Versions: 5.1.1

A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1,

An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.