4899 matches found
CVE-2019-8412
FeiFeiCms 4.0.181010 on Windows allows remote attackers to read or delete arbitrary files via index.php?s=Admin-Data-Down-id-..\ or index.php?s=Admin-Data-Del-id-..\ directory traversal...
Adobe Creative Cloud DLL Load Elevation of Privilege Vulnerability
Adobe Creative Cloud Desktop Application is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial...
The vulnerability of the Win32k component in Windows operating systems allows attackers to enhance their privileges and execute arbitrary code.
The vulnerability of the Win32k.sys component in Windows operating systems arises due to an overflow in memory buffers. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created application...
McAfee Total Protection (MTP) Security Restriction Bypass Vulnerability
McAfee Total Protection is a suite of antivirus software from the American company McAfee McAfee. A security vulnerability exists in the Windows client in McAfee MTP versions prior to 16.0.R18. This vulnerability can be exploited by a local attacker with specially crafted malware to bypass the...
Cisco Webex Network Recording Player and Webex Player for Windows Buffer Overflow Vulnerability (CNVD-2019-02787)
Cisco Webex Business Suite WBS32 sites, etc. are video conferencing solutions from Cisco USA.Cisco Webex Network Recording Player and Webex Player are among the players used to play video conference recordings. A buffer overflow vulnerability exists in the Windows-based Cisco Webex Network...
The vulnerability of the Microsoft JET Database Engine database driver on the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Microsoft Windows CONTACT - Remote Code Execution
Microsoft Windows CONTACT - Remote Code Execution + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-CONTACT-FILE-INSUFFECIENT-UI-WARNING-WEBSITE-LINK-ARBITRARY-CODE-EXECUTION.txt + ISR: ApparitionSec Vendo...
Unpatched vCard Flaw Could Let Attackers Hack Your Windows PCs
A zero-day vulnerability has been discovered and reported in the Microsoft's Windows operating system that, under a certain scenario, could allow a remote attacker to execute arbitrary code on Windows machine. Discovered by security researcher John Page @hyp3rlinx, the vulnerability was reported ...
CVE-2018-4213
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks...
The vulnerability of the DNS Global Blocklist mechanism in the Microsoft Windows operating system allows a hacker to redirect traffic to a malicious destination.
The vulnerability of the DNS Global Blocklist mechanism in the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability allows a malicious actor to redirect traffic to a malicious destination remotely...
The vulnerability of the Linux subsystem of Microsoft Windows systems, allowing a hacker to execute arbitrary code
The vulnerability of the Linux subsystem in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain control over the vulnerable system through a specially created application...
CVE-2018-16170
Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 for Windows allows remote authenticated attackers to read arbitrary files via unspecified vectors...
Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2019-16181)
Microsoft Windows 10 and others are products of Microsoft Corporation USA.Microsoft Windows 10 is an operating system for personal computers; Windows Server 2016 is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows that stems from a program's failure t...
Remote code execution
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows...
CVE-2019-0543
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012,...
Foxit Reader and PhantomPDF for Windows Validation Bypass Vulnerability
Foxit Reader for Windows is China's Foxit Foxit software company's a Windows-based platform for PDF document reader. PhantomPDF for Windows is its commercial version. A security vulnerability exists in Foxit Reader 9.3.0.10826 and earlier versions and PhantomPDF 9.3.0.10826 and earlier versions f...
CVE-2018-1888
An untrusted search path vulnerability in IBM i Access for Windows versions 7.1 and earlier on Windows can allow arbitrary code execution via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function. IBM X-Force ID: 152079...
The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a malicious actor to execute arbitrary code in kernel mode.
The vulnerability of the Win32k component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created application...
The vulnerability of the Windows operating system, related to errors in memory object handling, allows a perpetrator to trigger a service failure.
The vulnerability of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker, acting locally, to cause a service failure through a specially crafted application...
