USN-5581-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the contents of the addressbar, bypass security restrictions, or execute arbitrary code...

D-Link DIR-816 Buffer Overflow Vulnerability

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the mirrored version of the D-link DIR-816 firmware A2v1.10CNB04.img. The vulnerability stems from the fact that when the wantype of its /goform/form2Wan.cgi component is 3, the...

Vulnerability fixed in VMWare Tools

VMWare has fixed a vulnerability in VMWare Tools. A malicious person with user privileges in a virtual machine VM can exploit the vulnerability to grant himself elevated privileges and execute code with local administrator privileges in the vulnerable virtual machine. As far as is known, the...

Proficy Machine Edition Unlimited File Loading

The vulnerability of the Proficy Machine Edition programming software involves the unlimited loading of malicious files. Exploiting this vulnerability allows an attacker to load and execute malicious files on the target system...

PT-2022-22434 · Zengenti · Zengenti Contensis Classic

Name of the Vulnerable Software and Affected Versions: Zengenti Contensis Classic versions prior to 15.2.1.79 Description: The file upload wizard does not correctly check that a user has authenticated, allowing the execution of arbitrary commands by uploading a crafted aspx file. Recommendations:...

XAMPP security vulnerabilities

XAMPP is an easy-to-install Apache distribution with MariaDB, PHP, and Perl.The product is primarily used for building web servers. A security vulnerability exists in XAMPP version 8.1.12 and earlier versions. An attacker can exploit the vulnerability to execute files in the xampp directory...

Cross-site Scripting (XSS)

jenkins is vulnerable to cross-site scripting. The vulnerability exists because the symbol-based icons unescape previously escaped values of tooltip parameters, allowing an attacker to inject and execute malicious javascript...

CVE-2022-36157

XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account...

Apple OS Out-of-Bounds Write Vulnerability

iOS is a mobile operating system developed by Apple Inc. iPadOS full name: iPad Operating System is a family of mobile operating systems developed by Apple Inc. based on iOS. mac OS is a set of operating systems developed by Apple to run on the Macintosh series of computers. Apple iOS, iPadOS, an...

Apple iOS and macOS Out-of-Bounds Write Vulnerability

Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges...

CVE-2022-37393

Zimbra's sudo configuration permits the zimbra user to execute the zmslapd binary as root with arbitrary parameters. As part of its intended functionality, zmslapd can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root...

Tenda W6 Command Injection Vulnerability

Tenda W6 is a wireless WiFi AP access point router from Tenda, China.A command injection vulnerability exists in Tenda W6 /goform/exeCommand, which can be exploited by attackers to execute arbitrary commands on the system...

CVE-2022-38190 Stored cross-site scripting vulnerability in Esri Portal for ArcGIS Configurable Apps

A stored Cross Site Scripting XSS vulnerability in Esri Portal for ArcGIS configurable apps may allow a remote, unauthenticated attacker to pass and store malicious strings via crafted queries which when accessed could potentially execute arbitrary JavaScript code in the user’s browser...

Buffer overflow

A buffer overflow in the FTcpListener thread in The Isle Evrima the dedicated server on Windows and Linux 0.9.88.07 before 2022-08-12 allows a remote attacker to crash any server with an accessible RCON port, or possibly execute arbitrary code...

CVE-2022-38221

A buffer overflow in the FTcpListener thread in The Isle Evrima the dedicated server on Windows and Linux 0.9.88.07 before 2022-08-12 allows a remote attacker to crash any server with an accessible RCON port, or possibly execute arbitrary code...

Microsoft Edge Heap Buffer Overflow RCE

The vulnerability of Microsoft Edge relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2024-11777

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability has been resolved in the Linux kernel. The issue was triggered by blktests nvme/004 and resulted in a user-memory-access bug in the blk mq complete request...

Weblizar School Management Pro plugin backdoor

Added: 08/12/2022 CVE: CVE-2022-1609 Background Weblizar School Management is a WordPress plugin for management of school operations. Problem The license checking code in School Management Pro contains a backdoor which allows remote attackers to execute arbitrary commands. Resolution Upgrade to t...

Adobe FrameMaker Resource Management Error Vulnerability (CNVD-2022-58406)

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A resource management error vulnerability exists in Adobe FrameMaker. An attacker could exploit this vulnerability...

Adobe FrameMaker Buffer Overflow Vulnerability (CNVD-2022-58468)

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A buffer overflow vulnerability exists in Adobe FrameMaker. An attacker could exploit this vulnerability to execut...