InPage Reader Remote Code Execution (CVE-2017-12824)

A remote code execution vulnerability exists in Inpage inpage . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Atos Magento Command Injection (CVE-2020-13404)

A command injection vulnerability exists in Atos Magento. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-3411

CVE-2020-3411 affects Cisco DNA Center. The issue is an information-disclosure vulnerability caused by improper handling of authentication tokens, allowing an unauthenticated, remote attacker to access sensitive device information (including configuration files) by sending a crafted HTTP request....

PT-2020-3102 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in object handling in memory in the psmsrv.dll library of the Windows operating system. It may allow an attacker to elevate their privileges and execute...

IPS Community Suite Remote Code Execution (CVE-2016-6174)

A remote code execution vulnerability exists in IPS Community Suite. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

OpenLDAP Slapd Denial of Service (CVE-2020-12243)

A denial-of-service vulnerability exists in OpenLDAP Slapd. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

IPConfigure Orchid Core VMS Directory Traversal (CVE-2018-10956)

A directory traversal vulnerability exists in ipconfigure orchid core vms. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Advantech WebAccess SCADA Heap-based Buffer Overflow

A heap-based buffer overflow vulnerability exists in Advantech WebAccess. Successful exploitation of this vulnerability will allow remote attackers to execute arbitrary code on the affected system...

Adobe ColdFusion Remote Code Execution (CVE-2019-7838)

A remote code execution vulnerability exists in adobe coldfusion . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Google Chrome Security Update (stable-channel-update-for-desktop_15-2020-04) - Windows

Google Chrome is prone to an use-after-free vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

Microsoft Windows Graphics Component Information Disclosure Vulnerability (CNVD-2020-24072)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Graphics Components is one of the graphics components. An information disclosure...

Microsoft Visio Remote Code Execution Vulnerability (KB4484244)

This host is missing an important security update according to Microsoft KB4484244 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft OpenType Font Parsing Remote Code Execution (CVE-2020-0938)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Input validation

A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to ...

Intellian Aptus Web Remote Code Execution (CVE-2020-7980)

A remote code execution vulnerability exists in Intellian Aptus Web. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress ThemeREX Plugin Remote Code Execution

A remote code execution vulnerability exists in WordPress ThemeREX Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Elog Project Denial of Service (CVE-2019-3995; CVE-2020-8859)

A denial of service vulnerability exists in Elog. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Apple iTunes Memory Corruption (CVE-2019-8601)

A memory corruption vulnerability exists in Apple iTunes. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Foxit Reader Annotations Point Use After Free (CVE-2018-9958)

A use-after-free vulnerability exists in Foxit Reader. This vulnerability is due to improper handling of an annotation object. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system...

CVE-2019-12629 Cisco SD-WAN vManage Command Injection Vulnerability

A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input validation of data parameters for certain fields in t...