Tobesoft MiPlatform Operating System Command Injection Vulnerability

Tobesoft MiPlatform is a user graphical interface development tool from the Korean company Tobesoft. An operating system command injection vulnerability exists in the ExtCommandApi.dll file in versions of Tobesoft MiPlatform prior to 2019.05.16 for Windows-based platforms, which can be exploited ...

Foxit Studio Photo Buffer Overflow Vulnerability (CNVD-2020-65179)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A buffer overflow vulnerability exists in the processing of PNG files in Foxit Studio Photo 3.6.6.924 and earlier versions for Windows platforms, which stems from the program not properly validating...

AZL-79080 CVE-2020-14039 affecting package golang 1.25.7-1

In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements if VerifyOptions.Roots equals nil and the installation is on Windows. Thus, X.509 certificate verification is incomplete...

Adobe Download Manager Injection Vulnerability

Adobe Download Manager is an application for managing and downloading Adobe products from Adobe USA. An injection vulnerability exists in version 2.0.0.518 of Adobe Download Manager for Windows-based platforms. An attacker can exploit this vulnerability to execute arbitrary code...

Mozilla Firefox Code Problem Vulnerability (CNVD-2020-46339)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 78 for Windows-based platforms. The vulnerability can be exploited by an attacker to execute arbitrary code via a malicious DLL...

Unspecified Vulnerability in IBM DB2

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2. An attacker can exploit the vulnerability to cause a denia...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data. This allows a malicious actor to trigger a service failure.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Unspecified Vulnerability in NVIDIA Windows GPU Display Driver (CNVD-2021-27725)

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. A security vulnerability in the Inter Process Communication APIs in the NVIDIA Windows GPU Display Driver all versions can be exploited by a local attacker to execute...

CVE-2020-7279

DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System Host IPS for Windows prior to 8.0.0 Patch 15 Update allows attackers with local access to execute arbitrary code via execution from a compromised folder...

Cisco Webex Network Recording Player and Cisco Webex Player Input Validation Error Vulnerability (CNVD-2020-31990)

Cisco Webex Network Recording Player is a player for playing video conference recordings from Cisco USA. An input validation error vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player Release prior to 3.0 MR3 Security Patch 2 and prior to 4.0 MR3 for Windows-based...

Cisco Webex Network Recording Player and Cisco Webex Player Input Validation Error Vulnerability (CNVD-2020-31968)

Cisco Webex Network Recording Player is a player for playing video conference recordings from Cisco USA. An input validation error vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player for Windows-based platforms. An attacker can send a malicious ARF or WRF file via ...

Mozilla Firefox and Firefox ESR Input Validation Error Vulnerability (CNVD-2020-34653)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox ESR versions prior to 68.8 an...

CVE-2020-12772

An issue was discovered in Ignite Realtime Spark 2.8.3 and the ROAR plugin for it on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the NTLM hashes of the user are sent with the HTTP request. Th...

CVE-2020-6243

Under certain conditions, SAP Adaptive Server Enterprise XP Server on Windows Platform, versions 15.7, 16.0, does not perform the necessary checks for an authenticated user while executing the extended stored procedure, allowing an attacker to read, modify, delete restricted data on connected...

CVE-2020-6243

Under certain conditions, SAP Adaptive Server Enterprise XP Server on Windows Platform, versions 15.7, 16.0, does not perform the necessary checks for an authenticated user while executing the extended stored procedure, allowing an attacker to read, modify, delete restricted data on connected...

CVE-2020-6243

Under certain conditions, SAP Adaptive Server Enterprise XP Server on Windows Platform, versions 15.7, 16.0, does not perform the necessary checks for an authenticated user while executing the extended stored procedure, allowing an attacker to read, modify, delete restricted data on connected...

CVE-2020-6243

The CVE-2020-6243 entry affects SAP Adaptive Server Enterprise (XP Server on Windows), specifically versions 15.7 and 16.0. The root cause is that the extended stored procedure execution may not perform necessary checks for an authenticated user, allowing an attacker to read, modify, or delete re...

McAfee Active Response Privilege Vulnerability (CNVD-2020-35073)

McAfee Active Response MAR is an endpoint detection and response tool for security threats from the U.S.-based McAfee. The product supports features such as rapid access to threat data, threat alerts and centralized management. A power lifting vulnerability exists in versions prior to McAfee MAR...

CVE-2020-7803

IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution...

Kentico CMS 12.0.14 Remote Command Execution Exploit

This Metasploit module exploits a vulnerability in the Kentico CMS platform versions 12.0.14 and earlier. Remote command execution is possible via unauthenticated XML requests to the Staging Service SyncServer.asmx interface ProcessSynchronizationTaskData method stagingTaskData parameter. XML inp...