2017

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL hand

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video drive

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video drive

In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing cert

In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free funct

In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overw

In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may impr

In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug int

In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if

In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists

In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwri

lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPr

classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash

classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete ac

Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack

In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images be

In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secu

Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privilege

Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists i

OpenFire XMPP Server before 3.10 accepts self-signed certificates, which allows remote attackers to perform unspecified

ASUS DSL-N10S V2.1.16_APAC devices allow CSRF.

ASUS DSL-N10S V2.1.16_APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege a

ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 devices do not have any protection against a CSRF attack.

Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 all

Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gain

Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users t

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference

The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11

The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11

The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp contain

The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which al

Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remo

Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pik

Directory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. phpGrid before 7.2.5 allows remote attacker

Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an at

Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via

UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a

Untrusted search path vulnerability in TDB CA TypeA use software Version 5.2 and earlier, distributed until 10 August 20

Untrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program (program released on 20

Untrusted search path vulnerability in Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program (program rel

Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program release

The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based buffer over-read.

The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with e

The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 mishandles large MNG images, leading to an invalid me

ext/standard/var_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a heap use after free whi

A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, rem

A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application P

A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attack