2017

A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4

A elevation of privilege vulnerability in the Android libraries (libminikin). Product: Android. Versions: 5.0.2, 5.1.1,

A remote code execution vulnerability in the Android libraries (libgdx). Product: Android. Versions: 7.1.1, 7.1.2, 8.0.

A elevation of privilege vulnerability in the Android framework (windowmanager). Product: Android. Versions: 4.4.4, 5.0.

The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1 allows local users to ga

Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest O

The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator i

The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive m

Vulnerability in Easy Joomla Backup v3.2.4. The software creates a copy of the backup in the web root with an easily gue

Server-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station before 6.7.4-3433 and 6.3-

Directory traversal vulnerability in synphotoio in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote a

Multiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allow remote attackers t

XXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml file that is mishandled d

Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to insufficient sanitization of

XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless cre

A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Rout

A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Rout

A vulnerability in the CLI command-parsing code of Cisco Meeting Server could allow an authenticated, local attacker to

A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authen

A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenti

A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthent

A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker t

A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthentica

A vulnerability in the HTTP remote procedure call (RPC) service of set-top box (STB) receivers manufactured by Cisco for

A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an

A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacke

A vulnerability in the web functionality of the Cisco Prime LAN Management Solution could allow an authenticated, remote

A vulnerability in the ability for guest users to join meetings via a hyperlink with Cisco Meeting Server could allow an

A vulnerability in the ROM Monitor (ROMMON) code of Cisco IR800 Integrated Services Router Software could allow an unaut

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker

A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticate

A vulnerability in the malware detection functionality within Advanced Malware Protection (AMP) of Cisco AsyncOS Softwar

A vulnerability in the General Packet Radio Service (GPRS) Tunneling Protocol ingress packet handler of Cisco ASR 5500 S

A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to

A vulnerability in the dynamic access control list (ACL) feature of Cisco IOS XE Software running on Cisco Catalyst 4000

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduc

A vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS and Cisco IOS XE Software could

qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db.

Cross-site scripting (XSS) vulnerability in Centreon 2.6.1 (fixed in Centreon 18.10.0 and Centreon web 2.8.27).

Cross-site scripting (XSS) vulnerability in anchor-cms before 0.9-dev.

SQL injection vulnerability in Sefrengo before 1.6.5 beta2.

SQL injection vulnerability in Concrete5 5.7.3.1.

Multiple cross-site scripting (XSS) vulnerabilities in Concrete5 5.7.3.1.

Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.

Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN

SQL injection vulnerability in Pragyan CMS 3.0.

Cross-site request forgery (CSRF) vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75.

Directory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests before 1.6.1.

strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code

SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5.