2017

Input.cc in Bernard Parisse Giac 1.2.3.57 does not validate strings before launching the program specified by the BROWSE

guiclient/guiclient.cpp in xTuple PostBooks 4.7.0 does not validate strings before launching the program specified by th

library/www_browser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the program specified by the BROWS

Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSE

uiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER e

tools/url_handler.pl in TIN 2.4.1 does not validate strings before launching the program specified by the BROWSER enviro

batteriesConfig.mlp in OCaml Batteries Included (aka ocaml-batteries) 2.6 does not validate strings before launching the

swt/motif/browser.c in White_dune (aka whitedune) 0.30.10 does not validate strings before launching the program specifi

libsylph/utils.c in Sylpheed through 3.6 does not validate strings before launching the program specified by the BROWSER

scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV) 1.19.0 does not validate strings before launching the prog

etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environm

boxes.c in nip2 8.4.0 does not validate strings before launching the program specified by the BROWSER environment variab

TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment va

KildClient 3.1.0 does not validate strings before launching the program specified by the BROWSER environment variable, w

In Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated user with client/loan/cent

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \\.\PSMEMDriver DeviceIoControl request.

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \\.\PSMEMDriver DeviceIoControl request.

An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow

In Octopus Deploy before 4.1.3, the machine update process doesn't check that the user has access to all environments. T

IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-

MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthenticated remote attacker to cause a denial of service by conne

Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.

Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.

Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the bac

Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.

MikroTik v6.40.5 devices allow remote attackers to cause a denial of service via a flood of ICMP packets.

The tibbr user profiles components of tibbr Community, and tibbr Enterprise expose a weakness in an improperly sandboxed

The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may

Cross-Site Request Forgery vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vuln

Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability

wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange i

BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic

An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) or

An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gai

An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gai

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests a

Microsoft Office 2016 Click-to-Run (C2R) allows a remote code execution vulnerability due to the way files are handled i

Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way

ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to

ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore sc

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain t

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Se

ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code i

ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code i

ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to h

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Se

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execut