2017

CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code v

arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref.

Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denial

Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain pr

The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt bloc

A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.

In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c whe

Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authenticati

Multiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader before 1.4.2-084 on Windo

Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 thr

The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows rem

In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data,

mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working direct

Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service

Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3.

Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI comman

dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.

In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 a

Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading vulnerability. These types of iss

A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise S

A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) i

Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers t

In Youngzsoft CCFile (aka CC File Transfer) 3.6, by sending a crafted HTTP request, it is possible for a malicious user

The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection v

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash ch

Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring that the public x and y coordinates are on

In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, whi

The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and seg

The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment c

Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denia

Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a cr

There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cpp

There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of

There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open paren

There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU P

There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GN

There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU

There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP be

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in E

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can le

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lea

In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from usersp

In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-termin

In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions ear

Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows loc

In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from users

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver pote

In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly requ