2017

A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting down

Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users t

An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's

A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interf

An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) if

A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF

A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driv

Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Specially c

A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver.

A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Viru

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may cause a denial-of-se

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the SCINI driver may allow a lo

Stack-based buffer overflow vulnerability in Netop Remote Control versions 11.53, 12.21 and prior. The affected module i

Installing a zero-permission Android application on certain Samsung Android devices with KK(4.4), L(5.0/5.1), and M(6.0)

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have a security by

A denial of service vulnerability in Telephony could enable a local malicious application to use a specially crafted fil

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a dev

A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted f

A denial of service vulnerability in libmedia and libstagefright in Mediaserver could enable an attacker to use a specia

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a dev

An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application

An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to acces

An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access

An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application

An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access

An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its pe

An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its pe

A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially cra

An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read dat

A denial of service vulnerability in Tremolo/dpen.s in Mediaserver could enable a remote attacker to use a specially cra

A denial of service vulnerability in decoder/ihevcd_decode.c in libhevc in Mediaserver could enable a remote attacker to

A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to u

A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted fil

An elevation of privilege vulnerability in Contacts could enable a local malicious application to silently create contac

An information disclosure vulnerability in visualizer/EffectVisualizer.cpp in libeffects in Mediaserver could enable a l

An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious a

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable

An issue was discovered on LG devices using the MTK chipset with L(5.0/5.1), M(6.0/6.0.1), and N(7.0) software, and RCA

An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem comma

The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a den

The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of servi

The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a deni

The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows

The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of ser

An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside

An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML docume

magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a cr