418 matches found
EUVD-2018-1751
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization ASLR bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server...
Internet Explorer Memory Corruption Vulnerability
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabilit...
Kodi 'Open Subtitles' Addon Remote Code Execution Vulnerability
Kodi formerly XBMC is a free and open source media player software application. A remote code execution vulnerability exists in Kodi. An attacker could exploit the vulnerability to execute arbitrary code on an affected system, and a failed attack would result in a denial of service...
Microsoft Windows Multiple Vulnerabilities (KB4053578)
This host is missing a critical security update according to Microsoft KB4053578 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Remote code execution vulnerability in Adobe Acrobat and Reader (CNVD-2017-35852)
Adobe Reader, etc. are the United States of America Auduby Adobe company's products. Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tools; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are the two update...
NetBSD Arbitrary Code Execution Vulnerability
NetBSD is a BSD-based operating system. An arbitrary code execution vulnerability exists in NetBSD. An attacker can exploit this vulnerability to execute arbitrary code in the context of an affected system...
CVE-2017-8483
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka...
Kronos Telestaff < 2.92EU29 - SQL Injection
Software: Kronos Telestaff Web Application Version: compare timing with device=stdbrowser&action=doLogin&user='ifDBNAME'TELESTAFF'waitfor%20delay'00%3a00%3a12';--&pwd=&code= PoC 2 - Execute Code Remotely example inject benign code e.g. ping a remote systems ?php $cmdtoexecute = strToHex"ping -n 1...
Adobe Flash Player Code Execution Vulnerability (CNVD-2017-06317)
Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code to compromise an affected system...
Adobe Flash Player Code Execution Vulnerability (CNVD-2017-06322)
Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A free-use vulnerability exists in this product that could lead to code execution, which could be exploited by an attacker to execute arbitrary code to compromise an affected...
Serviio Media Server Remote Code Execution
A code execution vulnerability exists in Serviio Media Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
IBM API Connect Command Execution Vulnerability
IBM API Connect is a suite of integrated solutions for managing the API lifecycle and IBM NPM is a suite of NodeJS package management and distribution tools. A command execution vulnerability exists in IBM API Connect. An attacker could exploit this vulnerability to execute arbitrary commands on ...
Microsoft .NET Framework Remote Code Execution Vulnerability (KB4014981)
This host is missing a critical security update according to Microsoft Security Updates KB4014981 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
Adobe Acrobat and Reader Remote Code Execution Vulnerability (CNVD-2017-04979)
Adobe Acrobat and Reader is the United States Adobe developed a portable document format can be used to publish all the documents of the editing software. A remote code execution vulnerability exists in Adobe Acrobat and Reader. An attacker could use this vulnerability to compromise an affected...
Microsoft Windows Kernel CVE-2017-0050 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...
CVE-2016-7626
An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS before 3.1.1 is affected. The issue involves the "Profiles" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...
Microsoft Windows PDF Library Remote Code Execution Vulnerability (3182248)
This host is missing an important security update according to Microsoft Bulletin MS16-102 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Print Spooler Components Multiple Vulnerabilities (3170005)
This host is missing a critical security update according to Microsoft Bulletin MS16-087 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Edge Multiple Vulnerabilities (3148532)
This host is missing a critical security update according to Microsoft Bulletin MS16-038. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...