2017

An open redirect vulnerability is present in Piwigo 2.9 and probably prior versions, allowing remote attackers to redire

The application Piwigo is affected by a SQL injection vulnerability in version 2.9.0 and possibly prior. This vulnerabil

In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be chec

Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Adm

Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wi

In curl before 7.54.1 on Windows and DOS, libcurl's default protocol function, which is the logic that allows an applica

An information disclosure vulnerability in the kernel ION subsystem could enable a local malicious application to access

An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application t

An information disclosure vulnerability in libziparchive could enable a local malicious application to access data outsi

An information disclosure vulnerability in Bluetooth component could enable a local malicious application to access data

An elevation of privilege vulnerability in Bluetooth could enable a local malicious application to access data outside o

A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to caus

A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to caus

A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted f

A remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use a specially crafted fi

A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to caus

An information disclosure vulnerability in Bluetooth component could enable a local malicious application to access data

Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60

In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to

In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are no

In all Android releases from CAF using the Linux kernel, a memory structure in a camera driver is not properly protected

In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters.

In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed.

In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot.

In all Android releases from CAF using the Linux kernel, libtomcrypt was updated.

In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwr

In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS.

In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications.

In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications.

In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled.

The vmw_gb_surface_define_ioctl function (accessible via DRM_IOCTL_VMW_GB_SURFACE_CREATE) in drivers/gpu/drm/vmwgfx/vmwg

IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to em

IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to em

IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to em

IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to em

IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error cond

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript

The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.

A vulnerability in the web interface of Cisco Elastic Services Controllers could allow an authenticated, remote attacker

A vulnerability in the file system of Cisco Elastic Services Controllers could allow an authenticated, local attacker to

A vulnerability in the ConfD server in Cisco Ultra Services Platform could allow an authenticated, local attacker to vie

A vulnerability in the Virtual Network Function Manager's (VNFM) logging function of Cisco Ultra Services Platform could

A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local

A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to

A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarO

A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacke

A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user inform

A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remo

Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated

A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Ser