2017

In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables "nr_cmds" and

In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing t

A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel th

In all Qualcomm products with Android releases from CAF using the Linux kernel, an output buffer is accessed in one thre

In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can r

In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a

In all Qualcomm products with Android releases from CAF using the Linux kernel, the length of the MAC address is not che

In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function,

In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL_

In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buffe

In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe

In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in c_sh

The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of servi

The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem,

Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web scrip

Multiple cross-site scripting (XSS) vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web

Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated

An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or i

An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or i

In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapp

Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_

In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffer

In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp, leading to an invalid

In sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error, leading to a crash when writi

In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp.

A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an aut

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c.

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders

A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell acce

A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacke

A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwa

A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a

A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticated

A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated,

A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance

A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality f

In the ldap.v2 (aka go-ldap) package through 2.5.0 for Go, an attacker may be able to login with an empty password. This

Portus 2.2.0 has XSS via the Team field, related to typeahead.

The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Deleg

Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web scrip

Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potentia

An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If a login attempt is made in the XML-RPC interface

An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0. When a failed login attempt is made to the login en

iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries. A new (default) feature wa