CVE-2018-9981

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-9981

CVE-2018-9981 affects Foxit Reader 9.0.0.29935. The flaw is in U3D file parsing due to an uninitialized pointer, allowing remote code execution in the current process after user interaction (malicious page or file). Exploitation details are described across multiple sources linked to Foxit/ZDI; n...

CVE-2018-5431

CVE-2018-5431 affects TIBCO JasperReports Server family: JasperReports Server (up to 6.2.4; 6.3.0; 6.3.2; 6.3.3; 6.4.0; 6.4.2), JasperReports Server Community Edition (up to 6.4.2), JasperReports Server for ActiveMatrix BPM (up to 6.4.2), TIBCO Jaspersoft for AWS with Multi-Tenancy (up to 6.4.2),...

Automated Logic WebCTRL 6.5 - Unrestricted File Upload / Remote Code Execution

!/usr/bin/env python -- coding: utf8 -- Automated Logic WebCTRL 6.5 Unrestricted File Upload Remote Code Execution Vendor: Automated Logic Corporation Product web page: http://www.automatedlogic.com Affected version: ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior ALC WebCTRL, SiteScan Web 6.1 and...

CVE-2015-5431

Summary (CVE-2015-5431) : The HP Matrix Operating Environment (HP MOE) is affected before version 7.5.0. The security bulletin HPSBMU03409 describes multiple vulnerabilities across MOE components (SIM, SMH, VCA, VCRM, Insight Orchestration, VCEM SDK) that could allow a remote attacker to obtain s...

CVE-2013-5431

CVE-2013-5431 describes an open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) and TFIMBG . Affected TFIM versions: 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, 6.2.2 before IF 8; TFIMBG: 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, 6.2.2 before IF 8. The flaw allows a...

Oracle Server Suspicious Command Detection

Binary data 5431.prm...

CVE-2007-5431

The CVE-2007-5431 entry affects Stride 1.0’s MyFTPUploader module, specifically the include/imageupload.js component. The root cause is that sensitive FTP login credentials are present in the source code, which could allow remote attackers to gain unauthorized access to the FTP server used by the...

CVE-2007-5431

include/imageupload.js in the MyFTPUploader module in Stride 1.0 contains sensitive information including FTP login credentials, which might allow remote attackers to gain unauthorized access to the FTP server being used by the module by viewing the source code...

CVE-2006-5431

CVE-2006-5431 describes a PHP remote file inclusion flaw in gorum/dbproperty.php of PHPOutsourcing Zorum 3.5 and earlier, allowing an attacker to place a URL in the appDirName parameter to execute arbitrary PHP code. The vulnerability affects the app’s handling of the appDirName input and can lea...