Lucene search
+L

987 matches found

BDU FSTEC
BDU FSTEC
added 2018/05/03 12:0 a.m.8 views

The vulnerability of the UploadFileOnUIServerServlet component in the HPE UCMDB database configuration units allows a attacker to execute arbitrary code.

The vulnerability of the UploadFileOnUIServerServlet component in the HPE UCMDB Universal Configuration Management Database is related to deficiencies in path name validation for restricted access directories. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code i...

10CVSS5.9AI score0.30312EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2018/05/02 7:29 a.m.6 views

CVE-2018-10647

SaferVPN 4.2.5 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "SaferVPN.Service" service. The "SaferVPN.Service" service executes "openvpn.exe" using OpenVPN config files located within the current user's %LOCALAPPDATA%\SaferVPN\OvpnConfig directory. An authenticated...

7.8CVSS5.9AI score0.00351EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/03/28 12:0 a.m.8 views

The vulnerability of the perfAccessMgrServlet component of the HPE Intelligent Management Center PLAT software platform allows a attacker to execute arbitrary code.

The vulnerability of the perfAccessMgrServlet component of the HPE Intelligent Management Center PLAT software is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the SYSTEM context remotely...

9CVSS5.9AI score0.02673EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/03/28 12:0 a.m.9 views

The vulnerability of the AccessMgrServlet component of the HPE Intelligent Management Center PLAT software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the AccessMgrServlet component of the HPE Intelligent Management Center PLAT software is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the SYSTEM context remotely...

9CVSS5.9AI score0.02131EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/03/28 12:0 a.m.6 views

The vulnerability of the TopoReqServlet component in the HPE Intelligent Management Center PLAT software platform allows a attacker to execute arbitrary code.

The vulnerability of the TopoReqServlet component in the HPE Intelligent Management Center PLAT software platform is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the SYSTEM context remotely...

9CVSS5.9AI score0.02131EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/03/16 12:0 a.m.9 views

The vulnerability of the WebDMServlet component in the HPE Intelligent Management Center PLAT software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the WebDMServlet component in the HPE Intelligent Management Center PLAT software platform is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the SYSTEM context remotely...

10CVSS5.9AI score0.38483EPSS
SaveExploits0References5
CNVD
CNVD
added 2018/02/09 12:0 a.m.5 views

Quest NetVault Backup Arbitrary Code Execution Vulnerability

Quest NetVault Backup is a scalable data backup and recovery solution for organizations with multiple IT environments. An arbitrary code execution vulnerability exists in nvwsworker.exe in Quest NetVault Backup 11.2.0.13. The vulnerability arises because when parsing the boundary header of a...

10CVSS8.1AI score0.66692EPSS
SaveExploits0References1
Prion
Prion
added 2018/02/08 6:29 p.m.19 views

Authentication flaw

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backup 11.2.0.13. The specific flaw exists within JSON RPC Request handling. By setting the checksession parameter to a specific value, it is possible to bypass authentication to...

10CVSS9.7AI score0.16039EPSS
SaveExploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2018/01/25 12:0 a.m.507 views

Hewlett Packard Enterprise Intelligent Management Center dbman Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within dbman.exe. The issue results from the lack of...

10CVSS9.4AI score0.08867EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/01/25 12:0 a.m.498 views

Hewlett Packard Enterprise Intelligent Management Center redirectviewer Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

9CVSS9AI score0.03502EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/01/16 12:0 a.m.83 views

(0Day) Quest NetVault Backup Process Manager Service Multipart Boundary Header Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within nvwsworker.exe. When parsing the boundary header of a multipart request, the...

10CVSS9.4AI score0.66692EPSS
SaveExploits0
Prion
Prion
added 2017/12/21 2:29 p.m.21 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

9.3CVSS8.8AI score0.03675EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2017/12/21 2:29 p.m.4 views

CVE-2017-17408

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

8.8CVSS6.2AI score0.06487EPSS
SaveExploits0References1
NVD
NVD
added 2017/12/21 2:29 p.m.20 views

CVE-2017-17408

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

9.3CVSS8.9AI score0.06487EPSS
SaveExploits0References1
Prion
Prion
added 2017/12/21 2:29 p.m.20 views

Integer overflow

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

9.3CVSS8.9AI score0.06487EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2017/12/21 2:29 p.m.4 views

CVE-2017-17410

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

8.8CVSS6.1AI score0.03675EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2017/12/21 2:29 p.m.2 views

CVE-2017-17409

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

9.3CVSS6.3AI score0.03855EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2017/12/21 2:29 p.m.15 views

CVE-2017-17410

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

9.3CVSS8.8AI score0.03675EPSS
SaveExploits0References1
Prion
Prion
added 2017/12/21 2:29 p.m.22 views

Integer overflow

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

9.3CVSS8.9AI score0.03855EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2017/12/21 2:0 p.m.21 views

CVE-2017-17409

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

8.9AI score0.03855EPSS
SaveExploits0References1
Rows per page
Query Builder