2017

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly ha

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly ha

IrfanView 4.44 - 32bit with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspe

Various resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers to inject arbitrary HTML

The administration user deletion resource in Atlassian Fisheye and Crucible before version 4.4.2 allows remote attackers

RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deseri

In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c.

In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample

In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary

In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with acce

arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse gu

Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginni

Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via s

Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject

ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26 has a use-after-free issue when the height or width is zero, re

Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to

The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.

Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags

Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject JavaScript to gain ad

Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administra

In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private

In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of

In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private pr

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private proj

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another u

In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of

In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project

In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project o

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another us

In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of anoth

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of anothe

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit a category of a private project of anot

In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of a

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of ano

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit swimlanes of a private project of anoth

include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.

A persistent (stored) XSS vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticate

Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions

Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH version

Insecure platform configuration in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versi

Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC

Zyxel NBG6716 V1.00(AAKG.9)C0 devices allow command injection in the ozkerz component because beginIndex and endIndex ar

_bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in G

A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the exe

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain

The dotCMS 4.1.1 application is vulnerable to Stored Cross-Site Scripting (XSS) affecting a vanity-urls Title field, a c