2017

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packe

ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecifie

NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service

NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent auth

The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-o

The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it

The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote atta

IBM Security Access Manager for Web could allow an unauthenticated user to gain access to sensitive information by enter

IBM AppScan Source could reveal some sensitive information through the browsing of testlinks on the server.

IBM Maximo Asset Management could disclose sensitive information from a stack trace after submitting incorrect login ont

The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information t

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 can be deployed with active debugging code that can disclose sensitive info

IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This infor

IBM InfoSphere Information Server stores sensitive information in URL parameters. This may lead to information disclosur

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensitive information to unauthorized users. The information can

A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepowe

A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) coul

OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (

The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via

An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing

The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this t

The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates

An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. When a specific URL

An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU

An issue was discovered in INTERSCHALT Maritime Systems VDR G4e Versions 5.220 and prior. External input is used to cons

An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1

An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life (EoL) and no longer

An issue was discovered in Becton, Dickinson and Company (BD) Alaris 8015 Point of Care (PC) unit, Version 9.5 and prior

IBM Cognos Disclosure Management 10.2 could allow a malicious attacker to execute commands as a lower privileged user th

An issue was discovered in certain Apple products. iOS before 10.2 is affected. watchOS before 3.1.1 is affected. The is

F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive at

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosur

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosur

A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager (IDM) coul

Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified

Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/aut

IBM QRadar 7.2 discloses sensitive information to unauthorized users. The information can be used to mount further attac

IBM QRadar Incident Forensics 7.2 allows for Cross-Origin Resource Sharing (CORS), which is a mechanism that allows web

Man-in-the-middle (MitM) attack vulnerability in non-Mac OS agents in McAfee (now Intel Security) Agent (MA) 4.8.0 patch

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email addres

Active Directory Federation Services in Microsoft Windows 10 1607, Windows Server 2008 SP2 and R2 SP1, Windows Server 20

The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and

An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress. A user is able

Wonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the application with an array fo

Pluck CMS 4.7.2 allows remote attackers to obtain sensitive information by (1) changing "PHPSESSID" to an array; (2) add

GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) plugins/anonymou

qdPM 8.3 allows remote attackers to obtain sensitive information via invalid ID value to index.php/users/info/id/[ID], w

TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote

An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to