2017

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "3 of 9. Buffer Overflow in versi

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9. Out of Bounds Reads."

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9. Integer Overflow."

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9. Invalid Write and Intege

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read."

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9. Out of Bounds read and w

An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal usin

An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read().

An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been id

An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. Th

An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() fu

The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a cert

Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary

An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus.

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malforme

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an obj

An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed

An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to

An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A sp

gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to

Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.

Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0a

Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attacke

Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted

Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows

The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circums

The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel before 4.10.1 has incorrect expectation

IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and

IBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can be obtained by a local u

The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of

An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command exec

All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is

Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible

Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possib

Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it i

Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (app

Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (app

Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string

The ReadVIFFImage function in coders/viff.c in ImageMagick before 7.0.1-0 allows remote attackers to cause a denial of s

The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph n

Integer truncation error in the amap_alloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code

Integer overflow in the amap_alloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with ke

An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute a

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute a

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute a

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute a

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute a

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute a

An information disclosure vulnerability in the Qualcomm bootloader could help to enable a local malicious application to