multiple

日期	标题	类别	作者
2017-05-09	Oracle GoldenGate 12.1.2.0.0 – Remote Code Execution	remote	Silent Signal
2017-05-02	Dahua Generation 2/3 – Backdoor Access	remote	bashis
2017-05-01	MySQL < 5.6.35 / < 5.7.17 - Integer Overflow	dos	Rodrigo Marcos
2017-04-30	Emby MediaServer 3.2.5 – Directory Traversal	webapps	LiquidWorm
2017-04-30	Emby MediaServer 3.2.5 – Password Reset	webapps	LiquidWorm
2017-04-30	Emby MediaServer 3.2.5 – SQL Injection	webapps	LiquidWorm
2017-04-25	OpenText Documentum Content Server – dm_bp_transition.ebs docbase Method Arbitrary Code Execution	webapps	Andrey B. Panfilov
2017-04-25	Oracle VirtualBox Guest Additions 5.1.18 – Unprivileged Windows User-Mode Guest Code Double-Free	dos	Google Security Research
2017-04-25	Apple Safari – Array concat Memory Corruption	dos	Google Security Research
2017-04-25	HPE OpenCall Media Platform (OCMP) 4.3.2 – Cross-Site Scripting / Remote File Inclusion	webapps	Paolo Stagno
2017-04-20	Apple WebKit / Safari 10.0.2(12602.3.12.0.1) – ‘PrototypeMap::createEmptyStructure’ Universal Cross-Site Scripting	webapps	Google Security Research
2017-04-20	Oracle VM VirtualBox – ‘virtio-net’ Guest-to-Host Out-of-Bounds Write	dos	Google Security Research
2017-04-20	Oracle VM VirtualBox – Environment and ioctl Unprivileged Host User to Host Kernel Privilege Escalation	dos	Google Security Research
2017-04-20	Oracle VM VirtualBox – Guest-to-Host Privilege Escalation via Broken Length Handling in slirp Copy	local	Google Security Research
2017-04-20	Apple WebKit / Safari 10.0.2(12602.3.12.0.1) – ‘operationSpreadGeneric’ Universal Cross-Site Scripting	webapps	Google Security Research
2017-04-14	Mozilla Firefox – Address Bar Spoofing	local	649
2017-04-13	agorum core Pro 7.8.1.4-251 – Persistent Cross-Site Scripting	webapps	SySS GmbH
2017-04-13	agorum core Pro 7.8.1.4-251 – Cross-Site Request Forgery	webapps	SySS GmbH
2017-04-11	Xen – Broken Check in ‘memory_exchange()’ Permits PV Guest Breakout	local	Google Security Research
2017-04-11	Apple WebKit – ‘JSC::SymbolTableEntry::isWatchable’ Heap Buffer Overflow	dos	Google Security Research
2017-04-11	Apple WebKit – ‘Document::adoptNode’ Use-After-Free	dos	Google Security Research
2017-04-11	Apple WebKit – ‘JSC::B3::Procedure::resetReachability’ Use-After-Free	dos	Google Security Research
2017-04-11	Apple WebKit / Safari 10.0.3 (12602.4.8) – Universal Cross-Site Scripting via a Focus Event and a Link Element	webapps	Google Security Research
2017-04-11	Apple WebKit / Safari 10.0.3 (12602.4.8) – Synchronous Page Load Universal Cross-Site Scripting	webapps	Google Security Research