2017

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file.

The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of se

libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation viol

contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a mali

An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can change the bootmode of th

The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain

Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience

CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted p

Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fra

An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap

The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code.

A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software co

An Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to

A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000

A Denial of Service vulnerability in the Telnet remote login functionality of Cisco NX-OS Software running on Cisco Nexu

A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an unauthenticate

An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nexu

A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated,

A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communic

A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Prov

A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allo

An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, rem

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attac

A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD) implementation of Cisco Ad

A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker

An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to

An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to hav

Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or p

TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote

LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted t

Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers

Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6)

Multiple cross-site scripting (XSS) vulnerabilities in qdPM 8.3 allow remote attackers to inject arbitrary web script or

qdPM 8.3 allows remote attackers to obtain sensitive information via invalid ID value to index.php/users/info/id/[ID], w

Information disclosure issue in qdPM 8.3 allows remote attackers to obtain sensitive information via a direct request to

coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors relate

Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via

distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have

GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) plugins/anonymou

GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<user

Pluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature.

Cross-site scripting (XSS) vulnerability in TinyMCE in Pluck CMS 4.7.2 allows remote authenticated users to inject arbit

Pluck CMS 4.7.2 allows remote attackers to obtain sensitive information by (1) changing "PHPSESSID" to an array; (2) add

PHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote attackers to execute arbitra

Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to include and execute arbitra

Cross-site scripting (XSS) vulnerability in Wonder CMS 2014 allows remote attackers to inject arbitrary web script or HT

Wonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the application with an array fo

Wonder CMS 2014 allows remote attackers to obtain sensitive information by viewing /files/password, which reveals the un

readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The

xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not bein