2017

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private proj

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of

In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private pr

In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of

In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private

RSA Archer GRC Platform prior to 6.2.0.5 is affected by a privilege escalation vulnerability. A low privileged RSA Arche

Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Window

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's sy

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arb

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design ga

sharenfs 0.6.4, when built with commits bcdd594 and 7d08880 from the zfs repository, provides world readable access to t

A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePre

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Of

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcin

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supporte

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Support

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). S

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue in

An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace informatio

IBM RSA DM contains unspecified vulnerability in CLM Applications with potential for information leakage. IBM X-Force ID

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) generates an error message in error logs that includes sen

Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Ma

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.

Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for A

Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowe

Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remot

Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for

Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correc

Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.

Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any u

Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking pol

A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unaut

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users rec

Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to profile pictures being a

NetApp OnCommand Unified Manager for 7-mode (core package) versions prior to 5.2.1 are susceptible to a clickjacking or

In Joomla! before 3.8.2, a logic bug in com_fields exposed read-only information about a site's custom fields to unautho

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an

Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain informat

Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain informat

Internet Explorer in Microsoft Microsoft Windows 7 SP1, Windows Server 2008 SP2, Windows 8.1 and Windows RT 8.1, Windows

The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be performed using "nmap -b"

A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote

SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefi

TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vector

In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participa

Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Ve

FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability. Due

IBM Jazz technology based products might divulge information that might be useful in helping attackers through error mes