The vulnerability of the Windows operating system allows a perpetrator to execute arbitrary code or cause a service failure.

A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. This...

The vulnerability in the Windows Desktop Experience software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for remote execution of code exists in the Windows event log system and is related to the processing of specially crafted files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted event log file. If the user...

The vulnerability of the Microsoft SharePoint software package allows a remote attacker to execute arbitrary code and gain control over the system.

Microsoft SharePoint software has vulnerabilities related to errors that occur during the processing of specially crafted files. Exploiting these vulnerabilities allows a malicious intruder to execute arbitrary code and gain full control over the system...

The vulnerability of the Microsoft Office software package allows a malicious individual to execute arbitrary code and gain full control over the system.

Microsoft Office software has vulnerabilities related to errors that occur during the processing of specially crafted files. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code and gain full control over the system...

Vulnerability of the Windows operating system, allowing a malicious individual to execute arbitrary code

A vulnerability that allows for remote execution of code exists in Microsoft Windows and is related to the processing of .bat and .cmd files executed from an external network. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then install...

Vulnerability of the Windows operating system, allowing a malicious individual to execute arbitrary code

The vulnerability exists in Windows components and is related to the processing of specially crafted two-dimensional 2D geometric figures. Exploiting this vulnerability allows for the execution of code remotely, provided that the user opens the file containing such specially crafted figures using...

Dream Gallery 2.0 Authentication Bypass

======================================================================================================= Dream Gallery 2.0 Admin panel Authentication bypass Description : An Attackers are able to completely compromise the web application built upon Dream Gallery as they can gain access to the admi...

Microsoft Office RCE Vulnerability

Microsoft Outlook is an e-mail client software bundled with the Office suite from Microsoft USA. The software manages e-mail, contacts, calendars, and more. A security vulnerability exists in Microsoft Outlook, which arises from a failure of the program to properly handle specially designed e-mai...

Joomla! 3.2.0 - 3.4.4 SQLi Vulnerability - Active Check

Joomla! is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; if...

Microsoft Windows TrueType Font Remote Code Execution Vulnerability (CNVD-2015-05361)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A font remote code execution vulnerability exists in Microsoft Windows TrueType, which can be exploited by an attacker to take full control of the affected system...

Microsoft Windows OpenType Font Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A font remote code execution vulnerability exists in Microsoft Windows OpenType, which can be exploited by an attacker to take full control of an affected system...

Sierra Wireless GX, ES, and LS gateways running ALEOS contain hard-coded credentials

Overview Sierra Wireless GX, ES, and LS gateway devices running ALEOS versions 4.4.1 and earlier contain hard-coded credentials. Description CWE-259: Use of Hard-coded Password - CVE-2015-2897Sierra Wireless GX, ES, and LS gateways running ALEOS contain multiple hard-coded accounts with root...

Cisco Unified MeetingPlace Unauthorized Password Change Vulnerability

The password change functionality in the Cisco Unified MeetingPlace Web Conferencing application could allow an unauthenticated remote, attacker to change the passwords of arbitrary users. The vulnerability is due to the following: Users are not required to enter the previous password during a...

Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2015-04706)

Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists when Microsoft SQL Server fails to properly handle internal...

Arbitrary Command Execution Vulnerability in Multiple ESET Products

ESET is a world-renowned computer security software company based in Bratislava, Slovakia. An arbitrary command execution vulnerability exists in several ESET products, which allows an attacker to exploit this vulnerability to execute arbitrary commands with root privileges and take full control ...

D-Link DIR-636L has multiple vulnerabilities

The D-Link DIR-636L is a router device. A remote command injection and authentication bypass vulnerability exists in the D-Link DIR636L, which allows an attacker to execute arbitrary commands or bypass the authentication mechanism and take full control of the affected device...

Belkin N750 - 'jump?login' Remote Buffer Overflow

""" Source: https://labs.integrity.pt/articles/from-0-day-to-exploit-buffer-overflow-in-belkin-n750-cve-2014-1635/ A vulnerability in the guest network web interface of the Belkin N750 DB Wi-Fi Dual-Band N+ Gigabit Router with firmware F9K1103WW1.10.16m, allows an unauthenticated remote attacker ...

Cobham Aviator satellite terminals contain multiple vulnerabilities

Overview Cobham Aviator 700D and 700E satellite terminals contain multiple vulnerabilities. Description Cobham Aviator 700D and 700E satellite communication terminals contain the following vulnerabilities:CWE-327:Use of a Broken or Risky Cryptographic Algorithm - CVE-2014-2942 Please note that th...

Datum Systems satellite modem devices contain multiple vulnerabilities

Overview Datum Systems PSM-4500 and PSM-500 series satellite modem devices contain multiple vulnerabilities Description CWE-220:Sensitive Data Under FTP Root - CVE-2014-2950The Datum Systems SnIP operating system on PSM-4500 and PSM-500 satellite modem devices has FTP enabled by default with no...

Esoftpro Online Guestbook Pro Multiple Vulnerabilities

No description provided by source. Exploit Title: Esoftpro Online Guestbook Pro Multiple Vulnerability Vendor url:http://www.esoftpro.com/ Version:5.1 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-07-4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat...