Extreme Office has a code execution vulnerability

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A code execution vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

Bitdefender Hypervisor Introspection Code Execution Vulnerability

Bidefender Hypervisor Introspection HVI is a software from Bidefender Romania that checks the memory safety of running virtual machines at the Hypervisor layer using the VM self-test APIs of the Xen and KVM hypervisors. The software blocks code execution in abnormal memory by virtualizing the...

Microsoft Visual Studio Code Execution Vulnerability

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle.Git for Visual Studio is one of the Git Distributed Version Control Git for Visual Studio i...

Schneider Electric EcoStruxure Control Expert Input Validation Error Vulnerability

Schneider Electric EcoStruxure Control Expert formerly Unity Pro is a suite of programming software for Schneider Electric logic controller products from Schneider Electric, France. A security vulnerability exists in Schneider Electric EcoStruxure Control Expert that arises from a failure to...

Microsoft Exchange Remote Code Execution Vulnerability

...

CVE-2020-13543

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability...

Code Execution Vulnerability in UCMS System

UCMS is a content management system written in PHP. A code execution vulnerability exists in UCMS, which can be exploited by attackers to execute malicious code...

Apache OpenOffice Code Execution Vulnerability

Apache OpenOffice is the United States Apache Apache Software Foundation of an open source office software suite. The suite contains text documents, spreadsheets, presentations, drawings, databases and so on. Apache OpenOffice has a code execution vulnerability that can be exploited by an attacke...

Code execution vulnerability in XYHCMS backend Fr***.cl***.php file

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system. A code execution vulnerability exists in the XYHCMS backend Fr.cl.php file. Attackers can use this vulnerability to obtain server privileges...

Code Execution Vulnerability in Netgear WMS5316

The NETGEAR WMS5316, Wireless Controller is an easy-to-use device that simplifies the creation and management of wireless networks. A code execution vulnerability exists in the Netgear WMS5316. An attacker could exploit the vulnerability to gain server privileges...

MGASA-2020-0436 Updated f2fs-tools packages fix security vulnerability

An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this...

Code Execution Vulnerability in UCMS

UCMS is a content management system written in PHP. A code execution vulnerability exists in UCMS, which can be exploited by an attacker to gain administrative privileges on the server...

Security Updates for Microsoft SharePoint Server 2016 (November 2020)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An Information Disclosure Vulnerability exists in Microsoft SharePoint. CVE-2020-16979, CVE-2020-17017 - A Spoofing Vulnerability exists in...

CVE-2020-17107

HEVC Video Extensions Remote Code Execution Vulnerability...

CVE-2020-17065

Microsoft Excel Remote Code Execution Vulnerability...

Oracle WebLogic Remote Code Execution (CVE-2020-14882; CVE-2020-14750; CVE-2020-14825; CVE-2020-14883)

A remote code execution vulnerability exists in Oracle WebLogic. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-24649

A remote bytemessageresource transformentity" input validation code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

Code Execution Vulnerability in 37GameBox of Shanghai Hardtone Network Technology Co.

37GameBox is a web game box tool under Sanqi Entertainment. Ltd. 37GameBox suffers from a code execution vulnerability that can be exploited by an attacker to execute an executable program containing arbitrary code during the immediate experience after installation...

Code execution vulnerability in LePlay casting screen of Shenzhen LePlay Technology Co.

LePlay Casting, is a multi-screen interactive tool that connects mobile devices cell phones, tablets, etc. with large-screen terminals TVs, boxes, projectors, VR and other smart devices. Shenzhen Lecast Technology Co., Ltd. Lecast cast screen code execution vulnerability, an attacker can use the...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...