2017

Apps on Huawei Ascend P6 mobile phones with software EDGE-U00 V100R001C17B508SP01 and earlier versions before V100R001C1

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "iBooks" com

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" comp

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Accounts" compon

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves mishandling of deleti

An issue was discovered in certain Apple products. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windo

The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensiti

Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sanitised when

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters. This may lead to informatio

Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, w

Cloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x before 5.3.3 uses global rea

The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authe

The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected al

An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an attacker to perform a JSON Hijacking At

Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012

Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 a

Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote

lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated atta

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP He

The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x bef

Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created betwee

The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times

IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of se

An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "IOAudioFami

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WiFi" componen

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Clipboard" compo

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" c

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Media Player" co

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOKit" comp

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOAccelerat

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOSurface"

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The is

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The is

An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS

An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 52

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Ver

An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and pri

IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of

A vulnerability has been identified in tasks, backend object generated for handling any action performed by the applicat

A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. An authenticated domain admi

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

EMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS#12 Timing Attack Vulnerability. A possible timing attack could

IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized use

IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design in

IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain v