2017

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 mishandles states_equal comparisons between the pointer data ty

Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low ver

Huawei Honor 8 smartphone with software versions earlier than FRD-L04C567B389 and earlier than FRD-L14C567B389 have a pe

The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current ta

IBM Security Guardium 10.0 does not renew a session variable after a successful authentication which could lead to sessi

IBM Security Guardium 10.0 stores potentially sensitive information in log files that could be read by a local user. IBM

Prior to 4.4.1.10, the Norton Family Android App can be susceptible to an Information Disclosure issue. Information disc

IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could disclose sensitive information to a local attacker due to im

Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill valu

IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing th

IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to informati

IBM Atlas eDiscovery Process Management 6.0.3 could allow an authenticated attacker to obtain sensitive information when

IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which th

The recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds wi

In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 bef

The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit the

The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the

HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier be

Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, ve

Mate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability. An attacker tricks a user into instal

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permission

Prior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate spoofing vulnerability, wh

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, th

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, no

Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to by

Microsoft Graphics Component in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, a

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 170

ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows

Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 a

In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability

In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulnera

In BlackBerry QNX Software Development Platform (SDP) 6.6.0, the default configuration of the QNX SDP system did not in

In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure vulnerability in the default conf

An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS b

An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "Messages" compon

An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "Siri" component.

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Dictionary

Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information di

Inappropriate implementation in image-burner in Google Chrome OS prior to 59.0.3071.92 allowed a local attacker to read

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux,

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive informat

A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in gluste

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could disclose sensitive information to a local use

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Location Framework

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Phone" component.

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Directory Uti

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Application F

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Screen Lock"

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Of

Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcompone