4224 matches found
Command injection
An arbitrary command execution vulnerability exists in the fopen function of file writes of UCMS v1.4.8, where an attacker can gain access to the server...
Command Execution Vulnerability in Lightspeed PDF Converter pc Client Software
Lightspeed PDF Converter is a PDF document reading tool. Lightspeed PDF Converter pc client software has a command execution vulnerability that can be exploited by attackers to gain control of the server...
Command Execution Vulnerability in BIMe Data Collaboration Platform UE***.Net Component
Dongchen Gongyuan ProBIM was founded in 2014 as a software provider specializing in BIM cloud services. A command execution vulnerability exists in the UE.Net component of the BIMe data collaboration platform, which can be exploited by an attacker to gain control of the server...
CVE-2020-24649
A remote bytemessageresource transformentity" input validation code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
Command Execution Vulnerability in the Center Management Server System of Guangzhou Paulan Electronics Co.
Guangzhou Paulun Electronic Co., Ltd. is a company mainly engaged in public broadcasting, campus broadcasting, conference system, paperless system, recording and broadcasting system, intelligent campus, stage lighting, LED big screen, landscape lighting and other projects. A command execution...
CVE-2020-15258
In Wire before 3.20.x, shell.openExternal was used without checking the URL. This vulnerability allows an attacker to execute code on the victims machine by sending messages containing links with arbitrary protocols. The victim has to interact with the link and sees the URL that is opened. The...
Command Execution Vulnerability in CAJViewer of China Academic Journals (CD-ROM Version) Electronic Magazine Company Limited (CNVD-2020-61898)
caj reader CAJViewer is a specialized browser for reading and editing literature in the CNKI series of databases. A command execution vulnerability exists in CAJViewer of China Academic Journals CD-ROM Version Electronic Magazine Company Limited, which can be exploited by an attacker to obtain...
Command Execution Vulnerability in the Interpretation of Guangdong Tianchen Network Technology Company Limited (CNVD-2020-59423)
HootSuite PC is a software for data backup and recovery, computer screen casting, game key mapping, and file transfer between cell phones and computers. Guangdong Tianchen Network Technology Co., Ltd Hootsuite suffers from a command execution vulnerability, which can be exploited by an attacker t...
Command Execution Vulnerability in Spin Master OCR at Xiamen Printed Information Technology Co.
Turn Master OCR Software is an OCR text recognition software. Xiamen PrintMaster OCR has a command execution vulnerability that can be exploited by an attacker to inject an executable DLL file into a client process to gain control of the server...
Code execution vulnerability in LePlay casting screen of Shenzhen LePlay Technology Co.
LePlay Casting, is a multi-screen interactive tool that connects mobile devices cell phones, tablets, etc. with large-screen terminals TVs, boxes, projectors, VR and other smart devices. Shenzhen Lecast Technology Co., Ltd. Lecast cast screen code execution vulnerability, an attacker can use the...
Command Execution Vulnerability in D-Shield_Firewall of Shenzhen DiYuan Technology Co.
D ShieldFirewall is an active defense protection software designed for IIS. D ShieldFirewall has a command execution vulnerability that can be exploited by attackers to gain server control privileges...
Code Execution Vulnerability in 37GameBox of Shanghai Hardtone Network Technology Co.
37GameBox is a web game box tool under Sanqi Entertainment. Ltd. 37GameBox suffers from a code execution vulnerability that can be exploited by an attacker to execute an executable program containing arbitrary code during the immediate experience after installation...
Critical: Red Hat Security Advisory: flash-plugin security update
An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
RHEL 6 : flash-plugin (RHSA-2020:4251)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:4251 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to version...
Security Update for Microsoft Excel 2016 (KB4486678) 32-Bit Edition
A security vulnerability exists in Microsoft Excel 2016 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Office 2013 (KB4486688) 64-Bit Edition
A security vulnerability exists in Microsoft Office 2013 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Description of the security update for Office 2010: October 13, 2020
Description of the security update for Office 2010: October 13, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word if the software does not correctly handle .LNK files. To learn more about the vulnerability, see Microsoft Common...
muslib.arraymusic.com Cross Site Scripting vulnerability OBB-1402082
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
