2017

Spiceworks Desktop before 2015-12-01 has XSS via an SNMP response.

Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrated by the name parameter to devi

elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote att

The check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-b

The check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (hea

The check_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based

elf_compress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a

The ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a deni

The handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-b

coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined b

The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divid

The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a deni

tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers

OpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting (XSS) attacks within the Admin UI, as de

OpenIDM through 4.0.0 and 4.5.0 is vulnerable to persistent cross-site scripting (XSS) attacks within the Admin UI, as d

In OpenIDM through 4.0.0 before 4.5.0, the info endpoint may leak sensitive information upon a request by the "anonymous

An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to acces

An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to acces

An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to acces

An information disclosure vulnerability in the factory reset process could enable a local malicious attacker to access d

An information disclosure vulnerability in libskia could enable a local malicious application to access data outside of

An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside

An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access

An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access

An information disclosure vulnerability in libavc in Mediaserver could enable a local malicious application to access da

A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted fi

A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted fi

A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted fi

A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted fi

A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a

An information disclosure vulnerability in libmedia in Mediaserver could enable a local malicious application to access

In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-ba

ILIAS before 5.2.3 has XSS via SVG documents.

Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier

A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical acces

A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthentic

A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adj

A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation

A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software could allow an unauthen

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower

A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote att

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticat

A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets for Cisco Firepower System Softw

A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker

A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Soft

A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager

A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated,

A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could

A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers co