2017

Cross-site scripting (XSS) vulnerability in Lutim before 0.8 might allow remote attackers to inject arbitrary web script

Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authe

Cross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary w

SWFTools 2013-04-09-1007 on Windows has a "Data from Faulting Address controls Branch Selection starting at image0000000

STDU Viewer version 1.6.375 might allow user-assisted attackers to execute code via a crafted file. One threat model is

IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could allow an authenticated attacker to access report data that should be

IBM Jazz Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to e

IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows

IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows

IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows

IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows

IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack trace

IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to

IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. IBM X-For

IBM Rational Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users

IBM Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed

IBM Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed

IBM Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr

IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality al

IBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra

Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hype

The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS user

There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymi

Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary we

An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page.

A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker

A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker

A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express

A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary co

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges t

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker

A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote atta

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker

A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticat

A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated,

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated

A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a c

A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unaut

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Networ

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Networ

A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database inte

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat

A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated,

Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 does not use a constant-time compari

Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0.184.3.127