2017

In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference. T

In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack b

In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this

If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet

During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handsh

The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deser

A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCo

Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including

Product: Apache Cordova Android 5.2.2 and earlier. The application calls methods of the Log class. Messages passed to th

In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual se

In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a

Adobe Experience Manager Forms versions 6.2, 6.1, 6.0 have an information disclosure vulnerability resulting from abuse

Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/app_config/controller/backuper.php via director

wolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key.

ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network

acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp

In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the contro

A potential security vulnerability has been identified with HP Integrated Lights-Out 4 (iLO 4) firmware version 2.11 and

The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, and WebSa

An issue was discovered on OnePlus devices such as the 3T. The OnePlus OTA Updater pushes the signed-OTA image over HTTP

A vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption

A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Mic

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet

A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render wh

A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling ob

A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling object

A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling object

A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when

A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when

A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when

A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle object

A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render wh

A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security

A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render wh

H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service (DoS) vi

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary fi

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server

In FlightGear before 2017.2.1, the FGCommand interface allows overwriting any file the user has write access to, but not

Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to

In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthor

The sized_string_cmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service (

The Apache Qpid Broker for Java can be configured to use different so called AuthenticationProviders to handle user auth

OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control

A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could a

A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points runn

A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, re

A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that co

Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation. Since valid ether type and IP protocol num