2017

Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by lever

Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "2 of 9. Infinite Loop / DoS in t

The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (

Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.

In versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a mali

Multiple cross-site scripting (XSS) vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web sc

IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows us

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET

IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager to bring down MQ channels using

IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager and queue, to deny service to ot

Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network. This data c

IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling.

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks

Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table.

Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software inte

Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software inte

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthentica

A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an auth

A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, rem

A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager (IDM) coul

A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, rem

An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) cou

A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacke

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote atta

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an un

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an un

A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Se

A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remot

The System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement cryptography, which mak

FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service (application crash) via a malf

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosur

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosur

Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in

gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows

F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive at

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" compon

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "Contacts" comp

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS

An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Help Viewer

An issue was discovered in certain Apple products. Safari before 10.0.3 is affected. The issue involves the "Safari" com

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. watchOS before 3.1.3 is affected. The

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "WebKit" componen