2017

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Of

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcin

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supporte

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Support

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). S

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue in

An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace informatio

IBM RSA DM contains unspecified vulnerability in CLM Applications with potential for information leakage. IBM X-Force ID

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) generates an error message in error logs that includes sen

Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Ma

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.

Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for A

Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowe

Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remot

Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for

Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correc

Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.

Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any u

Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking pol

A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unaut

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users rec

Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to profile pictures being a

NetApp OnCommand Unified Manager for 7-mode (core package) versions prior to 5.2.1 are susceptible to a clickjacking or

In Joomla! before 3.8.2, a logic bug in com_fields exposed read-only information about a site's custom fields to unautho

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an

Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain informat

Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain informat

Internet Explorer in Microsoft Microsoft Windows 7 SP1, Windows Server 2008 SP2, Windows 8.1 and Windows RT 8.1, Windows

The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be performed using "nmap -b"

A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote

SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefi

TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vector

In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participa

Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Ve

FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability. Due

IBM Jazz technology based products might divulge information that might be useful in helping attackers through error mes

IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID:

An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to

IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a shared memory leak by MQ applications using dy

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacke

IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-

A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format (WRF) files could allow an attacker t

A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting infor

IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that

IBM Sterling B2B Integrator Standard Edition 5.2 allows a user to view sensitive information that belongs to another use

IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks again

Techno - Portfolio Management Panel through 2017-11-16 does not check authorization for panel/portfolio.php?action=delet

Techno - Portfolio Management Panel through 2017-11-16 allows full path disclosure via an invalid s parameter to panel/s

IBM Security Guardium 10.0 discloses sensitive information to unauthorized users. The information can be used to mount f