17422 matches found
Honeywell OPC UA Tunneller Resource Management Error Vulnerability
Honeywell OPC UA Tunneller is a Honeywell application that provides reliable OPC UA connectivity across devices and domains. Honeywell OPC UA Tunneller All versions prior to 6.3.0.8233 A resource management error vulnerability exists that could allow an attacker to disclose sensitive information,...
PT-2021-11411 · Ibm · Ibm Infosphere Information Server
Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 8.5.0.0 Description: The issue is related to the deserialization of untrusted data, which could allow remote unauthenticated attackers to execute arbitrary code. This problem only affects products tha...
The vulnerability of the execution environment for remote process calls in the Windows operating system allows a perpetrator to execute arbitrary code.
The vulnerability of the execution environment for remote procedure calls in the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2021-1300
Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...
UBUNTU-CVE-2021-3177
Python 3.x through 3.9.1 has a buffer overflow in PyCArgrepr in ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to cdouble.fromparam. This occurs because sprintf is...
Design/Logic Flaw
Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glassadmin privileges to execute arbitrary code as root on the underlying host operating system...
CVE-2020-35131
A flaw was found in cockpit. An attacker is able to inject custom PHP code and achieve remote command execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
Backdoor.Win32.Ncx.bt Remote Stack Buffer Overflow
Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/ad5c01b3e6d0254adfe0898c6d16f927.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Ncx.bt Vulnerability: Remote Stack Buffer Overflow Description: The malware listens o...
CVE-2021-1170
CVE-2021-1170 affects Cisco Small Business RV110W/RV130/RV130W/RV215W routers, via multiple vulnerabilities in the web-based management interface (and UPnP per Cisco advisory) caused by improper validation of user-supplied input. An authenticated attacker could exploit crafted HTTP requests to ac...
CVE-2021-1171
The CVE-2021-1171 entry concerns Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers. The issue stems from improper validation of user-supplied input in the web-based management interface, allowing an authenticated attacker with valid administrator credentials to send crafted HTTP requ...
CVE-2021-1197 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...
CVE-2021-1215 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...
Design/Logic Flaw
An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature is mishandled during a plugin upload, a remote, authenticated admin user can execute operating-system commands...
Cisco DNA Center 跨站脚本漏洞
Cisco DNA Center is the network management and command center for Cisco DNA. A cross-site scripting vulnerability exists in the Web management interface of Cisco DNA Center versions prior to 2.2.1.0. The vulnerability stems from the Web management interface not properly validating user-supplied...
Unauthenticated remote code execution in Ignition
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of filegetcontents and fileputcontents. This is exploitable on sites using debug mode with Laravel before 8.4.2. Module Options msf use...
Erlang Cookie - Remote Code Execution
Exploit Title: Erlang Cookie - Remote Code Execution Date: 2020-05-04 Exploit Author: 1F98D Original Author: Milton Valencia wetw0rk Software Link: https://www.erlang.org/ Version: N/A Tested on: Debian 9.11 x64 References:...
CVE-2021-1668
Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability...
CVE-2021-1643
HEVC Video Extensions Remote Code Execution Vulnerability...
CVE-2021-3129
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of filegetcontents and fileputcontents. This is exploitable on sites using debug mode with Laravel before 8.4.2...
