2017

In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releas

In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kern

In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux ke

In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android rel

In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android relea

In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux ke

In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF usi

In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Andr

In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in

A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check paddi

Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for whi

In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux k

A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM

admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user acc

INFOR EAM V11.0 Build 201410 has XSS via comment fields.

INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.

IBM QRadar 7.2 and 7.3 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-

IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID:

IBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to create an instance that gets

The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle

The YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app 5.3.7 through 5.4.2 for iOS does not verify X.509 certi

The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers, which allo

The Zipongo - Healthy Recipes and Grocery Deals app before 6.3 for iOS does not verify X.509 certificates from SSL serve

The Warner Bros. ellentube app 3.1.1 through 3.1.3 for iOS does not verify X.509 certificates from SSL servers, which al

The Radio Javan app 9.3.4 through 9.6.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in

The Life Before Us Yo app 2.5.8 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-mid

The MoboTap Dolphin Web Browser - Fast Private Internet Search app 9.23.0 through 9.23.2 for iOS does not verify X.509 c

The Quest Information Systems Indiana Voters app 1.1.24 for iOS does not verify X.509 certificates from SSL servers, whi

Buffer overflow in Larson VizEx Reader 9.7.5 allows attackers to cause a denial of service or possibly have unspecified

Buffer overflow in Halliburton LogView Pro 10.0.1 allows attackers to cause a denial of service or possibly have unspeci

fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs-flushing-befor

OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over

OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control

A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-d

An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw-demosaic-pack-GPL2 before

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application un

Libmenu-cache 1.0.2 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (menu una

In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the

In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.

In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link

In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Se

The Apache Qpid Broker for Java can be configured to use different so called AuthenticationProviders to handle user auth

Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected activ

Multiple cross-site request forgery (CSRF) vulnerabilities in Simple Invoices 2013.1.beta.8 allow remote attackers to hi

The sized_string_cmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service (

mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF.

The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allo

The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause