CVE-2021-27472

CVE-2021-27472 affects Rockwell Automation FactoryTalk AssetCentre (v10.00 and earlier) with a SQL Injection in the RunSearch function of the SearchService, enabling remote unauthenticated arbitrary SQL execution. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE list) an...

CVE-2021-27462 Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre...

The vulnerability of the Azure Site Recovery recovery tool, related to improper code generation, allows a attacker to execute arbitrary code.

The vulnerability of the Azure Site Recovery disaster recovery tool is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Fireware operating systems in network security devices like WatchGuard Firebox and XTM arises from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the Fireware operating systems used in network security devices like WatchGuard Firebox and XTM lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Adobe Medium’s 3D modeling software lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to execute arbitrary code.

The vulnerability of Adobe Medium’s 3D modeling software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2022-16309 · Unknown · Zzzcms Zzzphp

Name of the Vulnerable Software and Affected Versions: ZZZCMS zzzphp version 2.1.0 Description: A remote command execution issue was discovered in ZZZCMS zzzphp, allowing for potential exploitation via the danger key function at zzz template.php. Recommendations: For ZZZCMS zzzphp version 2.1.0,...

VulnCheck KEV: CVE-2022-24934

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEYCURRENTUSER in the registry...

UBUNTU-CVE-2022-0415

Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6...

Exploit for Code Injection in Phpunit_Project Phpunit

PoC exploit for CVE-2017-9841, a remote code execution vulnerabi...

CVE-2022-25438

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...

ROS-20220318-02

The vulnerability of OpenSSL function BNmodsqrt is related to execution of a loop without sufficiently limiting the number of its executions. limit the number of times it can be executed. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

CVE-2021-39726

In cdParseMsg of cdcodec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

The vulnerability of the software platform for developing and managing online stores Magento Commerce arises from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the Magento Commerce software platform for developing and managing online stores exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the software platform for developing and managing online stores Magento Commerce arises from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the Magento Commerce software platform for developing and managing online stores exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microweber file upload vulnerability

Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A file upload vulnerability exists in versions of Microweber prior to 1.2.11. The vulnerability stems from the lack of val...

ABB OPC Server for AC 800M

1. EXECUTIVE SUMMARY CVSS v3 8.4 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: OPC Server for AC 800M Vulnerability: Execution with Unnecessary Privileges 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a low privileged authenticated...

Zenario CMS 代码问题漏洞

Zenario CMS is an open source application from Zenario. A file upload vulnerability exists in Zenario CMS version 9.0.54156, which stems from the application's lack of validation of uploaded files. An attacker could exploit the vulnerability to upload malicious files to remotely execute arbitrary...

Apple iOS和Apple iPadOS 缓冲区错误漏洞

Apple Safari and others are products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems. apple iOS is an operating system developed for mobile devices. tvOS is an operating system for smart TVs. iOS 15.4 and iPadOS prior to...

Apple Xcode 缓冲区错误漏洞

Apple Xcode is an integrated development environment provided by Apple, Inc. for developers to develop applications for Mac OS X and iOS. A remote attacker could use this vulnerability to cause an application to terminate unexpectedly or execute arbitrary code via a maliciously crafted file...

WordPress plugin WPCargo Track & Trace 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...