2017

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Sett

Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth"

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth"

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth"

WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ

WP_Admin_UI in the Crony Cronjob Manager plugin before 0.4.7 for WordPress has CSRF via the name parameter in an action=

Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter

Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows remote authenticated users to hi

Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.

Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.

The Periodic Backup Plugin did not perform any permission checks, allowing any user with Overall/Read access to change i

Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authe

A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions. An attacker could perform actions wit

Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a rem

A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configurat

Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Inter

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcompone

A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-si

Cross-Site Request Forgery (CSRF) in the Basic Settings screen on Vonage (Grandstream) HT802 devices allows attackers to

A backdoor vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. A specific

An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1

Datto Windows Agent allows unauthenticated remote command execution via a modified command in conjunction with CVE-2017-

The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. An aut

The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input v

IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access

Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSR

The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported ve

Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator.

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC). The supported version

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th

The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure

The ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the Linux kernel before 4.6.

When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will atte

When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use

When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use

When opening a Hangul Hcell Document (.cell) and processing a property record within the Workbook stream, Hancom Office

When opening a Hangul Hcell Document (.cell) and processing a particular record within the Workbook stream, an index mis

When opening a Hangul Hcell Document (.cell) and processing a record that uses the CSSValFormat object, Hancom Office 20

When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will atte

An exploitable heap overflow vulnerability exists in the Compound Binary File Format (CBFF) parser functionality of Lexm

An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library

Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitabl

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitabl