2017

The pstm_exptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid free a

Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via

The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via unspecifi

Memory Corruption Vulnerability in Foxit PDF Toolkit v1.3 allows an attacker to cause Denial of Service and Remote Code

A reflected cross-site scripting vulnerability in the BlackBerry WatchDox Server components Appliance-X, version 1.8.1 a

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to

An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 thro

A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to

An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before

Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled wi

An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The two package names involved in the exfiltr

An issue was discovered on BLU Advance 5.0 and BLU R1 HD devices with Shanghai Adups software. The com.adups.fota.sysope

An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sys

An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sys

An issue was discovered on LG devices using the MTK chipset with L(5.0/5.1), M(6.0/6.0.1), and N(7.0) software, and RCA

The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a

The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges

The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a s

Open redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 allows remote attacker

Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downl

Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware

Cross-site scripting (XSS) vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmwa

Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remot

Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allow

Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect user

The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol a

The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithre

Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or cha

Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload an e

Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload 'php

An elevation of privilege vulnerability in the kernel sound subsystem could enable a local malicious application to exec

An elevation of privilege vulnerability in the kernel performance subsystem could enable a local malicious application t

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post

An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious a

An information disclosure vulnerability in visualizer/EffectVisualizer.cpp in libeffects in Mediaserver could enable a l

An elevation of privilege vulnerability in Contacts could enable a local malicious application to silently create contac

A denial of service vulnerability in Telephony could enable a remote attacker to cause a device hang or reboot. This iss

A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted fil

A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to u

A denial of service vulnerability in decoder/ihevcd_decode.c in libhevc in Mediaserver could enable a remote attacker to

A denial of service vulnerability in Tremolo/dpen.s in Mediaserver could enable a remote attacker to use a specially cra

A denial of service vulnerability in core networking could enable a remote attacker to use specially crafted network pac

An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read dat

An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary c

An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbit

An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary c

An elevation of privilege vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable