2017

Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows

Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization.

In KeePassX before 0.4.4, a cleartext copy of password data is created upon a cancel of an XML export action. This allow

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script.

CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.d

OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser c

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root.

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection.

OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay.

OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning.

OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK.

OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay.

OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning.

OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext under /private/var/mobile/Containers/Data

Atlassian JIRA Server before 7.1.9 has CSRF in auditing/settings.

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code.

AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via v

AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi.

Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 allows remote attackers to execute arbitrary administrati

Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 and 7/8 before 2.21.21.21 allows directory traversal.

Facebook Proxygen before 2015-11-09 mismanages HTTPMessage.request state, which allows remote attackers to conduct hijac

The SPDY/2 codec in Facebook Proxygen before 2015-11-09 allows remote attackers to conduct hijacking attacks and bypass

Liebert MultiLink Automated Shutdown v4.2.4 allows local users to gain privileges by replacing the LiebertM executable f

Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter.

Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to gain privileges via manual entry of a

iBaby M6 allows remote attackers to obtain sensitive information, related to the ibabycloud.com service.

Philips In.Sight B120/37 allows remote attackers to obtain sensitive information via a direct request, related to yoics.

TRENDnet WiFi Baby Cam TV-IP743SIC has a password of admin for the backdoor root account.

Vision Critical before 2014-05-30 allows attackers to read arbitrary files via unspecified vectors, as demonstrated by i

aacplusenc.c in HE-AAC+ Codec (aka libaacplus) 2.0.2 has an assertion failure, which might allow remote attackers to cau

au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a left-shift undefined behavior issue, which might allow remote

au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a signed integer overflow, which might allow remote attackers t

LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (applicatio

LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote a

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which m

LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might all

tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and appli

tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue

LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might all

The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allo

A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System (IGSS) Software, Version 1

An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830

An elevation of privilege vulnerability in the Qualcomm CP access driver could enable a local malicious application to e

An elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local malicious application to ex

An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application t

An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application t

An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execu

An elevation of privilege vulnerability in the DTS sound driver could enable a local malicious application to execute ar

An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to exec

An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application