Windows Pragmatic General Multicast Protocol Code Execution

The vulnerability of the Pragmatic General Multicast protocol implementation in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted file...

Barracuda Email Security Gateway Code Execution

The vulnerability of the module responsible for checking the content of incoming emails in Barracuda Email Security Gateway Appliance relates to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Oracle Solaris Libraries Error

The vulnerability of the Oracle Solaris operating system’s Libraries component is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to execute a DoS attack...

Arris Router Code Execution

The vulnerability of the microprogrammed software of Arris routers such as TG2482A, TG2492, and SBG10 is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code by sending a specially crafted request...

LiteSpeed Code Execution

The vulnerability of the LiteSpeed and OpenLiteSpeed web application server software relates to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ImageMagick Information Disclosure

The vulnerability of the ImageMagick graphic editor is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information using the “profile” parameter...

ManageEngine Code Execution

The vulnerability of ManageEngine’s software is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted SAML request remotely...

EndType parameter in the Code Execution

The vulnerability of the EndType parameter in the web interface of the POWER METER SICAM Q100 measurement software is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to disable the device remotely, causing it to shut down automatically, or execute...

Moxa EDR Command Interpreter Code Execution

The vulnerability of the command interpreter in Moxa EDR-810, EDR-G902, EDR-G903, TN-4900, and TN-5916 microprogrammed service routers stems from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HTTP/HTT...

Moxa EDR-810 Router Command Interpreter Code Execution

The vulnerability of the command interpreter in Moxa EDR-810, EDR-G902, EDR-G903, and TN-4900 router software-based web services is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2022-5263 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.1R3-S9 Junos OS versions 19.2 prior to 19.2R3-S6 Junos OS versions 19.3 prior to 19.3R3-S7 Junos OS versions 19.4 prior to 19.4R2-S7, 19.4R3-S8 Junos OS versions 20.1 prior to 20.1R3-S5 Junos OS versions 20.2 pri...

Movable Type XMLRPC Command Execution

The vulnerability of the XMLRPC API interface of the Movable Type content management system is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Cisco RV340 Router Code Execution

The vulnerability of the web-based management interface for Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN software lies in errors during the processing of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the root user or cause...

Mozilla Firefox JavaScript Object Indexing Arbitrary JavaScript Execution

The vulnerability of the JavaScript object indexing mechanism in Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary JavaScript code...

HtmlResponseMessage Component XSS

The vulnerability of the HtmlResponseMessage component in the microprogramming software of D-Link DIR-866L wireless routers is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to execute cross-site scripting attacks...

PT-2021-2427 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to errors in processing input data in the Windows DNS server service, which can be exploited by a remote attacker to execute arbitrary code. This can affect...

PT-2021-2426 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to errors in processing input data in the Windows DNS server service, which can lead to a denial-of-service condition. This can be exploited by a remote...

Cisco IOS Command Syntax Analyzer Access Disclosure

The vulnerability of the command syntax analyzer in Cisco IOS and Cisco IOS XE operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information...

SQL Server Reporting Services File Upload

The vulnerability of the SQL Server Reporting Services reporting system is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to remotely upload files with invalid types...

PT-2020-4430 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web management framework of Cisco IOS XE Software. These vulnerabilities could allow an authenticated, remote attacker...