2017

VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the fa

In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to ca

In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_E

Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remot

AMD fglrx-driver before 15.9 allows local users to gain privileges via a symlink attack. NOTE: This vulnerability exist

AMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack.

An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, while creating

An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, it is possible

In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one b

In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer.

The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read an

In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse

PostgreSQL PL/Java after 9.0 does not honor access controls on large objects.

The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired al

SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL com

The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is conf

In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnera

In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exis

In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vuln

In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerabili

In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could

In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could po

In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability cou

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerabilit

In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could pote

In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflo

In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could p

In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could pot

In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Co

In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist

In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability cou

In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerabi

In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerabili

In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.

In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerabili

In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially o

In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerabili

BigTree CMS through 4.2.18 has CSRF related to the core\admin\modules\users\profile\update.php script (modify user infor

BigTree CMS through 4.2.18 allows remote authenticated users to conduct SQL injection attacks via a crafted tables objec

BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary code by uploading a crafted package co

libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption)

Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_proc

Openbravo Business Suite 3.0 is affected by SQL injection. This vulnerability could allow remote authenticated attackers

Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b30

CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_

Elastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as functionality. This bug

In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with ins

A directory traversal vulnerability exists in core\admin\ajax\developer\extensions\file-browser.php in BigTree CMS throu