2017

A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could a

A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can

A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases fro

In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel d

In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page

If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application

In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.

In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases

In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releas

In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kern

In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux ke

In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android rel

In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android relea

In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux ke

In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF usi

In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Andr

In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in

A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check paddi

Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for whi

In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux k

A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM

INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.

Buffer overflow in Larson VizEx Reader 9.7.5 allows attackers to cause a denial of service or possibly have unspecified

Buffer overflow in Halliburton LogView Pro 10.0.1 allows attackers to cause a denial of service or possibly have unspeci

OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control

The Apache Qpid Broker for Java can be configured to use different so called AuthenticationProviders to handle user auth

Multiple cross-site request forgery (CSRF) vulnerabilities in Simple Invoices 2013.1.beta.8 allow remote attackers to hi

The sized_string_cmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service (

mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF.

The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allo

In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthor

In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel, prtd is assigned substream

In all Android releases from CAF using the Linux kernel, while processing a voice SVC request which is nonstandard by sp

In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_b

Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to

Directory traversal vulnerability in synophoto_dsm_user, a SUID program, as used in Synology Photo Station before 6.5.3-

In FlightGear before 2017.2.1, the FGCommand interface allows overwriting any file the user has write access to, but not

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9

Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4 and earlier allows rem

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary fi

Untrusted search path vulnerability in installers for The Public Certification Service for Individuals "The JPKI user's

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote att

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attacke

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attacke

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attacke

Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attacke

Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attacke

Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack