2017

tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.

The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a deni

IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE)

IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows us

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr

D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devi

D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devi

Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary c

ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitra

It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when p

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET

IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager to bring down MQ channels using

IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager and queue, to deny service to ot

Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network. This data c

IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling.

OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a craf

OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and re

The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks

The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to w

Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table.

Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software inte

Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software inte

Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10

The installPackage function in the installerHelper subcomponent in Libmacgpg in GPG Suite before 2015.06 allows local us

The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerabili

The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerabili

The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabi

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthentica

A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an auth

A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, rem

A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager (IDM) coul

A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, rem

A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, rem

An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) cou

A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a

An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server (CMS), formerly Acano Co

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacke

A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attac

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote atta

A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an un

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an un

A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Se

A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remot

Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physic

An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Datab

An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospik