CVE-2016-0276

IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM for Corporate Payment Services CPS for...

CVE-2017-10853

Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors...

ntp buffer overflow vulnerability (CNVD-2018-06628)

NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. ntpd is an operating system daemon. A buffer overflow vulnerability exists in the 'decodearr' function of ntpq in NTP versions 4.2.8p6 through 4.2.8p10. A remote attacker could...

CVE-2018-7889

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call...

CVE-2018-0147

A vulnerability in Java deserialization used by Cisco Secure Access Control System ACS prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by...

Apple macOS QuartzCore render_mask Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation o...

CVE-2018-6530

OS command injection vulnerability in soap.cgi soapcgimain in cgibin in D-Link DIR-880L DIR-880LREVAFIRMWAREPATCH1.08B04 and previous versions, DIR-868L DIR868LA1FW112b04 and previous versions, DIR-65L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and...

The vulnerability of the Android operating system’s libhevc library, allowing a hacker to execute arbitrary code

The vulnerability of the Android operating system’s libhevc library arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process remotely...

CVE-2018-1169

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Amazon Music Player 6.1.5.1213. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

Command Injection Vulnerability in Multiple Citrix Products

Citrix NetScaler Application Delivery Controller and others are products of Citrix Systems, Inc.Citrix NetScaler Application Delivery Controller ADC. NetScaler ADC is a suite of service and application delivery solutions Application Delivery Controller; NetScaler Gateway is a secure remote access...

The vulnerability of the HPE Intelligent Management Center PLAT software platform, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the HPE Intelligent Management Center PLAT software is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

Delta Electronics Delta Industrial Automation DOPSoft

CVSS v3 6.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Delta Electronics Equipment: Delta Industrial Automation DOPSoft Vulnerability: Stack-based Buffer Overflow AFFECTED PRODUCTS The following version of Delta Industrial Automation DOPSoft, a human machine interface HMI...

FasterXML Jackson-databind Code Execution Vulnerability

FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . Jackson-databind is one of the components with data binding capabilities . A security vulnerability exists in FasterXML jackson-databind versions prior to 2.8.11.1 and 2.9.x prior to 2.9.5. A remote attacker can send...

ValidFormBuilder PHP Object Injection Vulnerability

ValidForm Builder is an open source for creating Web forms and field validation of JavaScript and PHP libraries . A PHP object injection vulnerability exists in the Valid Form deserialization method in ValidFormBuilder version 4.5.4. A remote attacker can exploit this vulnerability to execute...

nanopool Claymore Dual Miner Remote Code Execution Vulnerability

nanopool Claymore Dual Miner is a software for bitcoin mining. A remote code execution vulnerability exists in the API in nanopool Claymore Dual Miner 7.3 and earlier versions. A remote attacker can exploit this vulnerability to execute code...

Croogo Cross-Site Scripting Vulnerability

Croogo is a content management system CMS based on the CakePHP framework development . The system provides content type can be customized for Blog, Node, Page, content editing using WYSIWYG editor and other features. A cross-site scripting vulnerability exists in Page name in Croogo version...

Popcorn Time 'Subtitles' Dropdown Remote Code Execution Vulnerability

Popcorn Time is an open source movie player that plays HD movies directly from cloud servers via seed files. A remote code execution vulnerability exists in Popcorn Time. An attacker can exploit the vulnerability to execute arbitrary code in an affected system environment, and a failed attack cou...

CVE-2018-6488

Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution...

CVE-2018-0124

A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to bypass security protections, gain elevated privileges, and execute arbitrary code. The vulnerability is due to insecure key generation during application configuration. An attacker...

foreman: Persistent XSS in Foreman remote execution plugin

It was found that foreman is vulnerable to a stored XSS via a job template with a malformed name. This could allow an attacker with privileges to set the name in a template to display arbitrary HTML including scripting code within the web interface...