2017

Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan hors

In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data

In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to ga

In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera d

In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, vari

In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store a

In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspeci

In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function msm_dba_register_client,

In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msm_isp_check_stream_cfg_cm

In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables "nr_cmds" and

In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing t

In all Qualcomm products with Android releases from CAF using the Linux kernel, an output buffer is accessed in one thre

In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function,

In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL_

In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buffe

In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe

The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of servi

The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/

Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated

An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or i

An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or i

In sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error, leading to a crash when writi

A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwa

A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a

A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance

A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality f

In the ldap.v2 (aka go-ldap) package through 2.5.0 for Go, an attacker may be able to login with an empty password. This

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potentia

An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If a login attempt is made in the XML-RPC interface

iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries. A new (default) feature wa

bareos-dir, bareos-fd, and bareos-sd in bareos-core in Bareos 16.2.6 and earlier create a PID file after dropping privil

The server daemons in Kannel 1.5.0 and earlier create a PID file after dropping privileges to a non-root account, which

Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0.

Use-after-free vulnerability in Open Litespeed before 1.3.10.

IBM Security SiteProtector System 3.0, 3.1, and 3.1.1 allows local users to gain privileges.

In Apache Struts 2.3.7 through 2.3.33 and 2.5 through 2.5.12, if an application allows entering a URL in a form field an

The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library

In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An a

The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data to secure

An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is p

Cross-site request forgery in the REST API in IPython 2 and 3.

FreeIPA might display user data improperly via vectors involving non-printable characters.

The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read ar

Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS might allow

There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesys

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain p