CWE-417

LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitra

The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forge

Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote a

Abuse of communication channels vulnerability in the server in McAfee Network Security Management (NSM) before 8.2.7.42.

The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it. T

Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart) via a malformed path

On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print job

Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon in Synology SSL VPN Cli

lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting

October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating

The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source

An issue was discovered in Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4, and 4.2.x before 4.2.1. Spring Sec

S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack of type-length-value (

In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 bef