2017

Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have a memory corruption vulnera

An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, w

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerabilit

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerabi

A remote code execution vulnerability exists in Internet Explorer in the way that the JScript and VBScript engines rende

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerabilit

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window

Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted

An elevation of privilege vulnerability exists in Windows 10 when the Windows kernel-mode driver fails to properly handl

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10 or Windows Serv

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to prope

An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In

An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to prope

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10, Windows 8.1, W

Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system t

An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.

An elevation of privilege vulnerability exists in Windows 7, Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 200

The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 S

Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remot

A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handlin

In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file. This was a

In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file

Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11

Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator.

SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaS

Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to ex

setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by

The allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstac

The fix_lookup_id function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands a

The allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering

The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial

SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and 3

In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user

Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows

SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to execute arbitrary commands.

Remote code execution in Lenovo Updates (not Lenovo System Update) allows man-in-the-middle attackers to execute arbitra

Privilege escalation in Lenovo Customer Care Software Development Kit (CCSDK) versions earlier than 2.0.16.3 allows loca

Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synoph

Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell m

dde-daemon, the daemon process of DDE (Deepin Desktop Environment) 15.0 through 15.3, runs with root privileges and hard

dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereferenc

Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embed

NetApp Clustered Data ONTAP 8.1 through 9.1P1, when NFS or SMB is enabled, allows remote attackers to cause a denial of

The X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified im

botan before 1.11.22 improperly validates certificate paths, which allows remote attackers to cause a denial of service

botan 1.11.x before 1.11.22 makes it easier for remote attackers to decrypt TLS ciphertext data via a padding-oracle att

In ImageMagick 7.0.4-9, an infinite loop can occur because of a floating-point rounding error in some of the color algor

crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling i

Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asteris