CVE-2021-26119

Smarty before 3.1.39 allows a Sandbox Escape because $smarty.templateobject can be accessed in sandbox mode...

Cisco IoT Field Network Director SOAP API Authorization Bypass Vulnerability

Cisco IoT Field Network Director FND is a network management system for large-scale FAN deployments. A SOAP API authorization bypass vulnerability exists in Cisco IoT Field Network Director versions prior to 4.6.1. The vulnerability stems from insufficient authorization of the SOAP API. An attack...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2020-51782)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in Microsoft Internet Explorer versions 9 and 11, which stems from the program failing to properly access memory objects. ...

CVE-2019-18998

Insufficient access control in the web interface of ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior to 9.5.3.2 and 9.6.0 enables full access to directly referenced objects. An attacker with knowledge of a resource's URL can access the resource directly...

CVE-2019-18998

Insufficient access control in the web interface of ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior to 9.5.3.2 and 9.6.0 enables full access to directly referenced objects. An attacker with knowledge of a resource's URL can access the resource directly...

CVE-2019-15978

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker with administrative privileges on the DCNM application to inject arbitrary commands on the underlying operating system OS. For more information about...

Foxit PhantomPDF Resource Management Error Vulnerability (CNVD-2019-37959)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. stb is a single file for C / C + + public domain library . A resource management error vulnerability exists in Foxit PhantomPDF, which arises from a program that does not validate the existence of an object before performing a...

Foxit Reader AcroForm Memory Misreference Vulnerability

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A memory misreference vulnerability exists in Foxit Reader AcroForm. The vulnerability stems from a failure to verify the existence of an object before performing an operation on it. A remote attacker can exploit this...

CVE-2019-0780

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'...

CVE-2019-0606

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'...

The vulnerability of the Simple Object Access Protocol component in the Cisco TelePresence Management Suite software for centralized control of video systems allows a perpetrator to gain access to control tools.

The vulnerability of the Simple Object Access Protocol component in the Cisco TelePresence Management Suite software for centralized control of video systems is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to control tools...

CVE-2018-8631

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10...

Microsoft Windows: Audit Removable Storage

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winremovablestorage.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Removable Storage Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

CVE-2018-1020

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0870, CVE-2018-0991...

Apache Struts 'top' Object Access Security Bypass Vulnerability (S2-026) - Linux

Apache Struts is prone to a security bypass vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

PostgreSQL PL/Java Arbitrary Object Access Vulnerability

PostgreSQL PL/Java is the PostgreSQL development team developed a database can be used in Java code to write stored procedures , triggers and functions of the open source project . A security vulnerability exists in PostgreSQL PL/Java 9.0 and earlier versions. An attacker can exploit the...

The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code

The vulnerability of the Internet Explorer browser is related to improper access to objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft PowerPoint presentation preparation program allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft PowerPoint presentation preparation program is related to improper access to objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Edge browser vulnerability, which allows a hacker to gain access to processes in privileged context

The vulnerability of Microsoft Edge relates to improper access to objects in memory. Exploiting this vulnerability can allow a local attacker to gain control over processes from a privileged context...

The vulnerability of the Windows operating system’s kernel allows a hacker to gain access to process control from a privileged context.

The vulnerability of the Windows operating system’s kernel is related to improper access to objects in memory. Exploiting this vulnerability can allow an attacker, operating locally, to gain control over processes from a privileged context...