2017

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) c

lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrd

An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8.

An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8.

An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Spe

An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.

An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1

An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1

An exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL certificates for specific

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SS

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SS

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially c

An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Di

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6

An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6

An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoos

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6

An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinar

An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.

An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A

An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1.

An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. S

An exploitable vulnerability exists in the servers update functionality of Circle with Disney running firmware 2.0.1. Sp

An exploitable vulnerability exists in the torlist update functionality of Circle with Disney running firmware 2.0.1. Sp

An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted net

An exploitable vulnerability exists in the firmware update functionality of Circle with Disney. Specially crafted networ

An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Speci

An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same n

An exploitable vulnerability exists in the WiFi Channel parsing of Circle with Disney running firmware 2.0.1. A speciall

An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure. A specially crafted packet c

A backdoor vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. A specific

An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware

An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server bef

Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a

The Gentoo net-misc/vde package before version 2.3.2-r4 may allow members of the "qemu" group to gain root privileges by

Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, whi

Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby a

In Vectura Perfect Privacy VPN Manager v1.10.10 and v1.10.11, when resetting the network data via the software client, w

In Bludit v1.5.2 and v2.0.1, an XSS vulnerability is located in the new page, new category, and edit post function body

In TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item` parameters of the `Add/Cre

An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administrator user

An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execut

An Improper Input Validation issue was discovered in ABB FOX515T release 1.0. An improper input validation vulnerability

An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13

A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The applicati

An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote a

The kvm_vm_ioctl_check_extension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local

Multiple potential reflected XSS issues exist in NetIQ iManager versions before 2.7.7 Patch 10 HF2 and 3.0.3.2.

In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently su

The read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to