2017

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Safari Reader" c

An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "IOFireWireF

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the "Safari Login

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves mishandling of D

In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated clien

A Cross-Site Scripting (XSS) was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration o

A Cross-Site Scripting (XSS) was discovered in 'SocialNetwork v1.2.1'. The vulnerability exists due to insufficient filt

Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release_3.5.4'. The vulnerabilities exist due to insu

A Cross-Site Scripting (XSS) was discovered in 'wallacepos v1.4.1'. The vulnerability exists due to insufficient filtrat

TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php

citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php (model parameter).

The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr

IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulne

IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows u

IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users t

IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to e

Cross-site scripting (XSS) vulnerability in Nagios.

Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack.

Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack.

Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack.

Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack.

Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack.

A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remo

A cross-site scripting (XSS) vulnerability in the MantisBT Move Attachments page (move_attachments_page.php, part of adm

A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remo

There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7

The vmw_gb_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.7 d

In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports wa

A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account

ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file.

ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file.

ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted wpg file.

ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted wpg file.

ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file.

ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ps file.

The xwd file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and applica

The dpx file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and applica

ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafte

ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafte

The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors.

ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file.

ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafte

A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have acc

Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during I