13315 matches found
Adobe Animate Multiple RCE Vulnerabilities (APSB20-61) - Windows
Adobe Animate is prone to multiple RCE vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...
Adobe Media Encoder RCE Vulnerability (APSB20-64) - Windows
Adobe Media Encoder is prone to RCE vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Adobe Photoshop CC RCE Vulnerability (APSB20-63) - Windows
Adobe Photoshop CC is prone to RCE vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-14882 — Unauthenticated RCE in Console component of Oracle WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...
WordPress SuperStoreFinder 6.1 CSRF / Shell Upload
Exploit Title : SuperStoreFinder Wordpress Plugins CSRF File Upload Wordpress Plugins Affected : Super Store Finder | Super Interactive Maps | Super Logo Showcase Exploit Type : Cross Site Request Forgery Plugin URI: http://www.superstorefinder.net/ Version : All versions from 6.1 and below , sho...
CVE-2020-7177
A wmiconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
CVE-2020-7181
A smsrulesdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
CVE-2020-7157
A selviewnavcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
CVE-2020-7194
The CVE-2020-7194 entry concerns a vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) where the perfAddorModDeviceMonitor.xhtml endpoint parses the beanName parameter insecurely, allowing an expression language injection that can lead to remote code execution. The iss...
CVE-2020-7191
HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected by a devSoftSel expression language injection leading to remote code execution. The root cause is improper handling/validation of the beanName parameter in the devSoftSel.xhtml endpoint, allowing an attacker to execute...
CVE-2020-7187
CVE-2020-7187 describes a remote code execution in HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The flaw is a reportpage index expression language injection in the index.xhtml handling of overTopForm:actionInput, where unsanitized input can be rendered with SYSTEM-level p...
CVE-2020-7185
A tvxlanlegend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
CVE-2020-7178
The CVE-2020-7178 case concerns Hewlett Packard Enterprise Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). The issue is a mediaForAction expression language injection that enables remote code execution. Exploitation is possible remotely; some sources indicate authentication is req...
CVE-2020-7176
The CVE-2020-7176 entry affects Hewlett Packard Enterprise’s Intelligent Management Center (iMC) prior to version 7.3 (E0705P07). A viewTaskResultDetailFact expression language injection in the viewTaskResultDetailFact.xhtml endpoint enables remote code execution. The underlying flaw is improper ...
CVE-2020-7172
CVE-2020-7172 concerns HPE Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). A templateSelect expression language injection in iMC enables remote code execution. The flaw arises from handling the beanName parameter in templateSelect.xhtml, allowing an attacker to execute code in t...
CVE-2020-7168
CVE-2020-7168 is a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). The issue arises from a flaw in the selectUserGroup.xhtml endpoint, where the beanName parameter is improperly validated, allowing an attacker to in...
CVE-2020-7163
CVE-2020-7163 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). The vulnerability is a navigationTo expression language injection in the navigationTo.xhtml endpoint, allowing remote code execution. The root cause is improper handling/validation o...
CVE-2020-7161
CVE-2020-7161 affects Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). Multiple connected sources corroborate a reportTaskSelect expression language injection in iMC that enables remote code execution. The Red Hat, CNVD, NVD and ZDI entries describe the...