2017

CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execut

Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer.

Use-after-free vulnerability in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via

Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified v

Zimbra Collaboration before 8.7.0 allows remote attackers to conduct deserialization attacks via unspecified vectors, ak

libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafte

Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have

SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQ

SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary

A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prio

A Directory Traversal vulnerability in FileReceiveServlet in the Brocade Network Advisor versions released prior to and

Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via

The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via unspecifi

An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before

The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a

Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downl

Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remot

The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol a

Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload an e

Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload 'php

Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead

Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervi

Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking

Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may

Improper input validation in Access Control APIs. Access control API may return memory range checking incorrectly. Produ

Unauthenticated messages processed by the UE. Certain NAS messages are processed when no EPS security context exists in

system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging c

In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized objec

The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive inf

The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a ke

Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocatio

The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments

eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the a

Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.

An issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1. The

Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple com

An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multipl

An exploitable out-of-bounds write exists in the Bzip2 parsing of the Lexmark Perspective Document Filters conversion fu

An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize" function functionality of Rub

Type confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different type of object than String

Type confusion exists in two methods of Ruby's WIN32OLE class, ole_invoke and ole_query_interface. Attacker passing diff

An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS serv

A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete co

Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Sub

scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3,

The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial

The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers

PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup processing, which allows remo

Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before 5.6.27 and 7.x before

Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.