2017

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Fonts" comp

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" com

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" com

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" com

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" com

An issue was discovered in certain Apple products. iOS before 11.1 is affected. tvOS before 11.1 is affected. watchOS be

An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "UIKit" component

The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-commo

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application cr

tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname

Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to

Microsoft graphics in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to potentially read data t

Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows

Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft

Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial

AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vector

In SWFTools, an address access exception was found in swfdump swf_GetBits().

In SWFTools, a memcpy buffer overflow was found in swfc.

In SWFTools, a memory leak was found in wav2swf.

In SWFTools, a memcpy buffer overflow was found in gif2swf.

In SWFTools, a stack overflow was found in pdf2swf.

The tcmu-runner daemon in tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a local denial of service attack

In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not properly restrict a multiplication within a mallo

BOOK WALKER for Windows Ver.1.2.9 and earlier, BOOK WALKER for Mac Ver.1.2.5 and earlier allow an attacker to access loc

exiv2 0.26 contains a Stack out of bounds read in webp parser

Exiv2 0.26 contains a heap buffer overflow in tiff parser

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser

The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, w

By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that a

The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles no

SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with s

TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email applicati

HiGame with software earlier than 7.3.0 versions, SkyTone with software earlier than 8.1.1 versions have a DoS Vulnerabi

P9 Plus smartphones with software earlier than VIE-AL10C00B352 versions have an input validation vulnerability in the to

The vibrator service in P9 Plus smart phones with software versions earlier before VIE-AL10C00B386 has DoS vulnerability

Huawei Hilink APP Versions earlier before 5.0.25.306 has an information leak vulnerability. An attacker may trick a user

Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have

P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service (DoS) vulnerability.

HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. An attacker could exploit it to do

Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and version

Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143C

The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C

The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the v

Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B15

The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B1

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B1

The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability

The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions ear