17414 matches found
Heap overflow
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
Western Digital My Cloud 路径遍历漏洞
Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in Western Digital My Cloud version 5.26.119. An attacker exploiting this vulnerability could read and write arbitrary files, potentially leading to a complete compromise of the NAS a...
CVE-2022-42405
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
CVE-2022-42371
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
CVE-2022-29844
CVE-2022-29844 affects Western Digital My Cloud OS 5 devices with firmware versions prior to 5.26.119. The vulnerability resides in the FTP service and, as described in multiple sources, allows an attacker to read and write arbitrary files, potentially leading to a full NAS compromise and remote ...
CVE-2022-29844 Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp
A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to read and write arbitrary files. This could lead to a full NAS compromise and would give remote execution capabilities to the attacker...
CVE-2023-24059
Technical details (affected products, versions, root cause, exploit scenarios) are not publicly available in the provided documents; monitor for updates from vendors and CERT advisories.
The vulnerability of the Web interface of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition systems, related to errors in processing input data, allows a perpetrator to execute arbitrary SQL queries.
The vulnerability of the Web interface of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition systems is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...
Ivanti Cloud Services Appliance (CSA) Command Injection Exploit
This Metasploit module exploits a command injection vulnerability in the Ivanti Cloud Services Appliance CSA for Ivanti Endpoint Manager. A cookie based code injection vulnerability in the Cloud Services Appliance before 4.6.0-512 allows an unauthenticated user to execute arbitrary code with...
CVE-2022-45928
A remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1 16.2.19.1803. Multiple endpoints allow the user to pass the parameter htmlFile, which is included in the HTML output rendering pipeline of a request. Because the Content Server evaluates and executes Oscript...
Input validation
A remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1 16.2.19.1803. Multiple endpoints allow the user to pass the parameter htmlFile, which is included in the HTML output rendering pipeline of a request. Because the Content Server evaluates and executes Oscript...
Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Sewio Real-Time Location System (RTLS) Studio 操作系统命令注入漏洞
Sewio Real-Time Location System RTLS Studio is a real-time location system from Sewio, Inc. An operating system command injection vulnerability exists in Sewio Real-Time Location System RTLS Studio versions 2.0.0 through 2.6.2, which stems from not properly validating the input module name of the...
CVE-2023-22279
MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allow a remote unauthenticated attacker to execute an arbitrary OS command...
ruby-git 代码注入漏洞
ruby-git is a Ruby library. It can be used to create, read, and manipulate Git repositories by wrapping system calls into git binaries. A security vulnerability exists in ruby-git v1.13.0 and earlier versions that could allow an authenticated, remote attacker to execute arbitrary ruby code by...
PT-2023-1189 · Oracle · Oracle Bi Publisher
Name of the Vulnerable Software and Affected Versions: Oracle BI Publisher versions 5.9.0.0.0, 6.4.0.0.0 and 12.2.1.4.0 Description: The issue is related to insufficient input validation in the Security component of Oracle BI Publisher, part of the Oracle Fusion Middleware platform. This can be...
The vulnerability of the JavaScript script handler in PDF viewer software like Foxit PDF Reader lies in the use of memory after it is freed, allowing an attacker to execute arbitrary JavaScript code.
The vulnerability of the JavaScript script handler in PDF viewer software, such as Foxit PDF Reader, relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary JavaScript code remotely...
VulnCheck KEV: CVE-2022-44877
CWP Control Web Panel formerly CentOS Web Panel contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter...
PT-2023-3630 · Ashlar Vellum · Ashlar-Vellum Cobalt
Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...
