2017

HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute ar

The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote by

Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack.

An Improper Authentication issue was discovered in JanTek JTC-200, all versions. The improper authentication could provi

The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Wind

A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or

A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated n

An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote un

Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction wi

/bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own se

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php (aka the search private area).

The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote attackers to execute a

SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execut

Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update"

Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote atta

Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal r

Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 25

Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a cra

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or e

A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute o

The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary fil

nw.js before 0.11.5 can simulate user input events in a normal frame, which allows remote attackers to have unspecified

Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to e

The Lenovo Service Framework Android application executes some system commands without proper sanitization of external i

SQL Injection exists in zorovavi/blog through 2017-10-17 via the id parameter to recept.php.

A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-base

In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.

The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior

SQL injection vulnerability in the login form in GSI WiNPAT Portal 3.2.0.1001 through 3.6.1.0 allows remote attackers to

The net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP header keys, which allow

The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remot

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Perform

In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 H

The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow

pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate pa

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unes

An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before

An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before

An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before

An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before

An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "f

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "f

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "f

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "f

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "f

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "f