Cerberus FTP Server Remote Buffer Overflow Vulnerability (CNVD-2017-08299)

Cerberus FTP Server is an FTP service program. A buffer overflow vulnerability exists in Cerberus FTP Server, which can be exploited by a remote attacker to conduct a buffer overflow attack on the application, which can be used to execute arbitrary code in the application context...

Microsoft Windows OLE Elevation of Privilege Vulnerability

Microsoft Windows is the popular computer operating system. Microsoft Windows suffers from an implementation elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code in an application context...

APNGDis Buffer Overflow Vulnerability

APNGDis is a set of applications that deconstructs APNG files into a series of PNG frames. APNGDis suffers from a buffer overflow vulnerability. An attacker could exploit this vulnerability to execute arbitrary code within the context of the application, and a failed attack could result in a deni...

Tiki Wiki CMS Arbitrary File Disclosure Vulnerability

Tiki Wiki CMS Groupware is a suite of open source content management and portal applications from the Tiki software community that can be used to create web applications, portals, corporate intranets, extranets, and more. An arbitrary file disclosure vulnerability exists in Tiki Wiki CMS version...

gtk-vnc integer overflow vulnerability

GTK-VNC is a for GTK VNC viewer widget. An integer overflow vulnerability exists in gtk-vnc. An attacker can exploit the vulnerability to execute arbitrary code within the context of an application. A failed exploit attempt could result in a denial of service condition...

wongminbin CMS Directory Traversal Vulnerability

wongminbin CMS is a set of maven-based springmvc spring + mybatis development of content management system . A directory traversal vulnerability exists in wongminbin CMS, which can be exploited to read arbitrary files in an overriding application context by sending a request with the directory...

OTRS JavaScript Code Injection Vulnerability

OTRS Open Technology Real Service is an open source help desk and IT service management solution. A security vulnerability exists in OTRS. The vulnerability allows attackers to insert and execute arbitrary JavaScript code in the context of the affected application...

GNU Bash Local Command Execution Vulnerability

GNU Bash is a shell command language interpreter written by American software developer Brian J. Fox for the GNU Project, which runs on Unix-like operating systems the default shell for Linux systems and is capable of reading from, and executing commands from, a standard input device or file, as...

Dropbear SSH Format String Vulnerability

Dropbear is a relatively small SSH server and client. Dropbear SSH suffers from a format string vulnerability that allows an attacker to execute arbitrary code within the context of the application...

TYPO3 Frontend User Registration Remote Command Execution Vulnerability

TYPO3 is a free and open source content management system. A remote command execution vulnerability exists in TYPO3 Frontend User Registration. A remote attacker could exploit the vulnerability to execute arbitrary code within the context of the application. A successful attack would corrupt the...

Foxit Reader and PhantomPDF Remote Command Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. A remote command execution vulnerability exists in Foxit Reader and PhantomPDF that could be exploited to allow an attacker to execute arbitrary...

ownCloud Desktop Client Local Command Injection Vulnerability

The ownCloud Desktop Client is a desktop client for connecting to OwnCloud servers. The ownCloud Desktop Client local command injection vulnerability allows an attacker to exploit the vulnerability to execute arbitrary script code in the context of an affected application...

ownCloud Arbitrary File Read Vulnerability

OwnCloud is a free and open source personal cloud storage solution from German company OwnCloud. The solution offers file management, music storage, calendars and more. A security vulnerability exists in ownCloud. A remote attacker can exploit the vulnerability to read arbitrary files in the...

Kaspersky Internet Security for Mac Memory Corruption Vulnerability

Kaspersky Internet Security is a suite of security software that combines antivirus and firewall features. Kaspersky Internet Security for Mac suffers from a memory corruption vulnerability that could be exploited by an attacker to execute arbitrary code in the context of an application...

Apple QuickTime Memory Corruption Vulnerability (CNVD-2015-04260)

Apple QuickTime is a popular multimedia player. A vulnerability in Apple QuickTime's handling of special movie files allows remote attackers to construct malicious files that can be tricked into being parsed by an application, which can execute arbitrary code in the application context...

SQL Buddy 'page' Parameter Directory Traversal Vulnerability

SQL Buddy is a nice lightweight ajax database management tool. A directory traversal vulnerability exists in SQL Buddy. A remote attacker can exploit this vulnerability by sending a specially crafted request with the directory traversal character '...' A remote attacker can exploit this...

Telerik Analytics Monitor Library Search Path Vulnerability

Telerik Analytics Monitor Library is a library for third-party application analytics services to collect information about applications. A search path vulnerability in Telerik Analytics Monitor Library allows local attackers to exploit the vulnerability to execute in the context of an application...

SYNCK GRAPHICA Download Log CGI Directory Traversal Vulnerability

A directory traversal vulnerability in the SYNCK GRAPHICA Download Log CGI allows remote attackers to overwrite arbitrary files in an application context using a directory traversal sequence with a specially crafted request '... /' to overwrite arbitrary files in the context of an application...

Adobe Flash Player Double Release Remote Code Execution Vulnerability

Adobe Flash Player is a widely used, proprietary multimedia program player. A security vulnerability exists in Adobe Flash Player that could be exploited by remote attackers to execute arbitrary code within the context of an affected application or to launch a denial-of-service attack...

IBM Tivoli Monitoring Remote Command Execution Vulnerability

IBM Tivoli Monitoring is used to provide monitoring features of basic system resources to detect system bottlenecks and potential problems. A remote command execution vulnerability exists in IBM Tivoli Monitoring, which can be exploited by an attacker to execute arbitrary commands in the context ...