2017

An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary c

An elevation of privilege vulnerability in CameraBase could enable a local malicious application to execute arbitrary co

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file t

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file t

A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file t

An elevation of privilege vulnerability in the Qualcomm Seemp driver could enable a local malicious application to execu

An elevation of privilege vulnerability in the Qualcomm audio driver could enable a local malicious application to execu

Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended access restrictions via dir

Dataprobe iBootBar (with 2007-09-20 and possibly later beta firmware) allows remote attackers to bypass authentication,

Dataprobe iBootBar (with 2007-09-20 and possibly later released firmware) allows remote attackers to bypass authenticati

In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-ba

Memory Corruption Vulnerability in Foxit PDF Toolkit before 2.1 allows an attacker to cause Denial of Service & Remote C

ILIAS before 5.2.3 has XSS via SVG documents.

SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated

Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier

A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical acces

A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthentic

A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adj

A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation

A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generat

A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generat

A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software could allow an unauthen

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower

A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100

A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote att

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticat

A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets for Cisco Firepower System Softw

A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker

A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Soft

A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager

A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated,

A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could

A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers co

A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms c

A vulnerability in RADIUS Change of Authorization (CoA) request processing in the Cisco Wireless LAN Controller (WLC) co

inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field.

The Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify X.509 certificates from

Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (l

XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request.

PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a sa

Multiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to in

Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arb

DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials (such as the username of energetic and passw

Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection pass

Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-ke

Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8