2017

In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these artic

Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: C Oracle SSL API). Sup

Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Application F

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive informat

Prior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate spoofing vulnerability, wh

In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 bef

The recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds wi

IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which th

IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to informati

IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing th

Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low ver

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent

Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3

Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack.

Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password wi

Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged

There is a stack-based buffer overflow on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). Crafted POS

FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series

Routes used to stop running Metasploit tasks (either particular ones or all tasks) allowed GET requests. Only POST reque

Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Performance). Suppo

HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier be

IBM Atlas eDiscovery Process Management 6.0.3 could allow an authenticated attacker to obtain sensitive information when

Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote

An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypte

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supporte

An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system

CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive inform

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). Suppo

Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 12.1.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versio

The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obta

IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) stores potentially sensitive information in log files that

IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attac

IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system.

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

A vulnerability has been identified in tasks, backend object generated for handling any action performed by the applicat

IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 52

An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS

An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The is

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOSurface"

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOAccelerat

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOKit" comp

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO

An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "IOAudioFami

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created betwee