2852 matches found
cPanel Code Execution Vulnerability (CNVD-2020-18566)
cPanel is a set of Web-based host control management system of the U.S. cPanel. A code execution vulnerability exists in cPanel versions prior to 84.0.20. An attacker can exploit this vulnerability to achieve code execution via the PassengerApps API using a demo account...
Microsoft Issues March 2020 Updates to Patch 115 Security Flaws
Microsoft today released security updates to fix a total of 115 new security vulnerabilities in various versions of its Windows operating system and related software—making March 2020 edition the biggest ever Patch Tuesday in the company's history. Of the 115 bugs spanning its various products —...
Microsoft Windows and Windows Server Code Execution Vulnerabilities
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A code execution vulnerability exists in Microsoft Windows and Windows Server that can be...
Quest Software KACE K1000 Systems Management Appliance Code Execution Vulnerability
The Quest Software KACE K1000 Systems Management Appliance KACE SMA is a systems management appliance from Quest Software, USA. A security vulnerability exists in the service/krashrpt.php file in Quest Software KACE SMA versions prior to 6.4 SP3 6.4.120822. A remote attacker can exploit the...
CVE-2020-2158
The CVE-2020-2158 entry affects Jenkins Literate Plugin versions 1.0 and earlier. The root cause is that the YAML parser is not configured to prevent instantiation of arbitrary types, enabling remote code execution. The impact is remote code execution with the plugin, and multiple sources identif...
CVE-2016-11021
setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter...
Code Execution Vulnerability in Crypto Game Box
Quick Play Game Box is a treasure trove of games for game lovers. A code execution vulnerability exists in Quick Play Game Box, which can be exploited by attackers to execute arbitrary code...
Code Execution Vulnerability in YY Voice
YY Voice is an Internet-based team voice communication platform developed by Guangzhou Huado Network Technology Co. A code execution vulnerability exists in YY Voice, which can be exploited by an attacker to execute arbitrary code...
Dell Security Management Server Code Issue Vulnerability
Dell Security Management Server is a data security management solution from Dell Dell. A code issue vulnerability exists in Dell Security Management Server versions prior to 10.2.10. The vulnerability stems from an improperly designed or implemented code development process for a network system o...
Code Execution Vulnerability in Yimin Trader Jiying
Yimin Trader Smart Earnings is a stock investors special computerized securities finance tools. Yimin Trader Zhiying has a code execution vulnerability that can be exploited by attackers to execute arbitrary code...
CVE-2020-8809
Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connection. A man-in-the-middle attacker can prompt the user to download updates by modifying the contents of gurux.fi/obis/files.xml and gurux.fi/updates/updates.xml. Then, the attack...
Huawei EulerOS: Security Advisory for e2fsprogs (EulerOS-SA-2020-1098)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Code execution vulnerability in QQMusic installation package
QQ Music QQMusic is the official music playback software launched by Tencent. A code execution vulnerability exists in the QQMusic installation package. An attacker can exploit the vulnerability to execute task code...
Code Execution Vulnerability in Thunderbolt X Installer
Thunderbolt X is an Internet download tool software. A code execution vulnerability exists in the Xunlei X installer. An attacker can exploit the vulnerability to execute arbitrary code...
Code Execution Vulnerability in Sohu Video
Sohu Video is a video acceleration player. A code execution vulnerability exists in Sohu Video. An attacker can exploit the vulnerability to execute arbitrary code...
Critical: Red Hat Security Advisory: flash-plugin security update
An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Wowza Streaming Engine Code Execution Vulnerability
Wowza Streaming Engine is a streaming media server software from Wowza Media Systems. The program supports live streaming, VOD, online video chat, and remote recording. A security vulnerability exists in Wowza Streaming Engine. The vulnerability stems from the lack of proper validation of client...
Security Bulletin: A Security Vulnerability has been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2018-1567)
Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about security vulnerabilities affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin: Code...
CVE-2020-0681
CVE-2020-0681 is a remote code execution vulnerability in the Windows Remote Desktop Client. The issue occurs when a user connects to a malicious Remote Desktop server, allowing an attacker to execute arbitrary code on the client machine. The vulnerability is associated with the Remote Desktop Cl...
