2017

On the Broadcom Wi-Fi HardMAC SoC with fbt firmware, a stack buffer overflow occurs when handling an 802.11r (FT) authen

An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execut

An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execut

An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access

An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local ma

An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access

An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execut

An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to execu

In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrar

The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock a

Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote a

The msm_ipc_router_close function in net/ipc_router/ipc_router_socket.c in the ipc_router component for the Linux kernel

Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows

ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic l

A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``dj

Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the u

file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitra

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow

Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physic

Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proxi

Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier for physically proximate attac

Riverbed RiOS through 9.6.0 deletes the secure vault with the rm program (not shred or srm), which makes it easier for p

A missing authorization check in the fscrypt_process_policy function in fs/crypto/policy.c in the ext4 and f2fs filesyst

In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition 5.x through 5.2.17, OS Command Injection can occ

In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur i

D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability. This enables an attacke

An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The e

Privilege escalation in IntelHAXM.sys driver in the Intel Hardware Accelerated Execution Manager before version 6.0.6 al

The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default

udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an

The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stac

NixOS 17.03 before 17.03.887 has a world-writable Docker socket, which allows local users to gain privileges by executin

Multiple SQL injection vulnerabilities in account/signup.php and account/signup2.php in WebsiteBaker 2.10.0 and earlier

The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version SY0059 may allow may allow an atta

The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version KY0045 may allow may allow an atta

The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attac

The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitiv

BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packet

The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attac

Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/ind

During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs.

lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows

The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control

Cougar-LG stores sensitive information under the web root with insufficient access control, which allows remote attacker

mrlg-lib.php in mrlg4php before 1.0.8 allows remote attackers to execute arbitrary shell code.

Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.

Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations.

Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and ea

OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to condu