2017

An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not pr

XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a c

The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.00

An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.

Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, a

The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which a

The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allo

The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cac

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cac

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cac

Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilde

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint

When processing a record type of 0x3c from a Workbook stream from an Excel file (.xls), JustSystems Ichitaro Office trus

When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how m

dwarf_form.c in libdwarf 20160115 allows remote attackers to cause a denial of service (crash) via a crafted elf file.

The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attack

Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service

The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentati

Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault

Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmenta

Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and c

Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and c

Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by lever

Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified

Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows

Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attac

IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of se

IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buf

The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a cert

An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() fu

An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. Th

An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been id

An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read().

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal usin

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9. Out of Bounds read and w

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read."

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9. Invalid Write and Intege

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9. Integer Overflow."

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9. Out of Bounds Reads."

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "3 of 9. Buffer Overflow in versi

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "2 of 9. Infinite Loop / DoS in t

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9. Null Pointer Deref / cal

The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (

Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript before ecc

Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.

In versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a mali

Multiple cross-site scripting (XSS) vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web sc

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via