2017

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's sy

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to disclose information due to how strings are validated

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails whic

IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the

The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did no

A vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to view sensiti

A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content

A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allo

IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details a

Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting room manager to remove the primary managers privileges.

IBM Sametime Meeting Server 8.5.2 and 9.0 may send replies that contain emails of people that should not be in these mes

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting. IBM X-

IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID numbers and join me

IBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by guessing the meeting room id.

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive informati

XML external entity (XXE) vulnerability in bkr/server/jobs.py in Beaker before 20.1 allows remote authenticated users to

The admin pages for power types and key types in Beaker before 20.1 do not have any access controls, which allows remote

A vulnerability in the dynamic access control list (ACL) feature of Cisco IOS XE Software running on Cisco Catalyst 4000

Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to obtain information to further compromise the u

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to leave a mal

Microsoft Edge in Microsoft Windows Version 1703 allows an attacker to obtain information to further compromise the user

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a use

Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to trick a user by redirecting the user to a spec

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Window

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a use

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's sy

The Entity Registration module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to obtain sensitive event regis

Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication befor

In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access.

IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed t

The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp i

When a cluster is operating in secure mode, a user with read privileges for specific data regions can use the gfsh comma

GitHub Branch Source provides a list of applicable credential IDs to allow users configuring a job to select the one the

Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for reposito

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit swimlanes of a private project of anoth

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of ano

In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of a

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit a category of a private project of anot

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of anothe

In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of anoth

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another us

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of

In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project o

In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project

In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of

In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another u