2017

net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the

aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hi

Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This serv

In Earcms Ear Music through 4.1 build 20170710, remote authenticated users can execute arbitrary PHP code by changing th

Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with A

Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges o

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications (subcomponent: OPS Operati

Microsoft Win32k in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Win

Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of s

An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. The unc

In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check e

In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is ca

In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is c

When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for M

In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists i

In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free funct

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video drive

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video drive

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL hand

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver pote

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lea

Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denia

Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ub

An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Sec

syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root.

The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1 allows local users to ga

The Windows Kernel-Mode Drivers component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, W

Windows Shell in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server

Windows Error Reporting (WER) in Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows an attacker t

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain p

The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data to secure

IBM Security SiteProtector System 3.0, 3.1, and 3.1.1 allows local users to gain privileges.

In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store a

drivers/net/ethernet/msm/rndis_ipa.c in the Qualcomm networking driver in Android allows remote attackers to execute arb

Norton Remove & Reinstall can be susceptible to a DLL preloading vulnerability. These types of issues occur when an appl

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE

Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to e

The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race c

The Server Message Block 1.0 (SMBv1) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Window

Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server

The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se

The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Wi

The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Wi

Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (

The TEEOS module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users with root pe

In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently su

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Security). Supported versions th