2017

The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted length

A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving

fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the

In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap ove

ntopng before 3.0 allows HTTP Response Splitting.

A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance

Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format

A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Mana

The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products,

The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows re

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbi

Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php

/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read

'/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allow

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-

Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote at

ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with weak entropy. Successf

A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 th

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions t

EMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege escalation vulnerability th

Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates

Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL co

An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community string

An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed with

A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The client does not properly

An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A speciall

Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request. Exploitation requires authent

In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Came

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Came

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Ca

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Ca

In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service (s

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz rep

The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which al

In Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a non-administrative user

If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsC

The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary.

The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2

The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where

libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting th

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1

The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed wit

glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causin

The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficie

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged

IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a

In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticat