17432 matches found
CVE-2016-4293
Multiple heap-based buffer overflows in the 1 CBookBase::SetDefTableStyle and 2 CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote attackers to execute arbitrary code via a crafted Hangul Hcell Document .cell file...
The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.
The vulnerability of the IOATAFamily component in the Mac OS X operating system arises from an operation that occurs outside the buffer boundaries on the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context remotely, or to trigger a servi...
FFmpeg Heap Buffer Overflow Vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. FFmpeg suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of an affected application...
Command injection
The datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is vulnerable to remote command execution via unspecified attack vectors...
CVE-2015-8107
Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code...
EyesOfNetwork SQL Injection Vulnerability
EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. Multiple SQL injection vulnerabilities exist in EyesOfNetwork aka EON 5.0 and...
Alienvault OSSIMUSM 5.3.45.3.5 - Remote Command Execution (Metasploit)
Alienvault OSSIMUSM 5.3.45.3.5 - Remote Command Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'AlienVault USM/OSSIM API Command Execution', 'Description'...
CVE-2016-5313
Symantec Web Gateway (SWG) is affected by CVE-2016-5313: before version 5.2.5, the management console contains a flaw in the web interface (notably the /spywall/new_whitelist.php script) that allows remote authenticated users to execute arbitrary OS commands due to improper whitelist validation. ...
Adobe Flash Player Security Update (APSB17-10) - Linux
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
Microsoft Office Word OLE Object Code Execution Vulnerability
Microsoft Office is a popular office software suite developed by Microsoft. A code execution vulnerability exists in the Microsoft Office Word OLE object, which can be exploited by an attacker to obtain permission to remotely execute arbitrary code, covertly install a variety of malware, and infe...
Design/Logic Flaw
Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HTTP header to photo/login.php...
The vulnerability of the Adobe Reader PDF viewer program allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Reader PDF viewer program arises from an operation that goes beyond the buffer boundaries in memory within the rendering system. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...
SquirrelMail Remote Code Execution Vulnerability
SquirrelMail is a PHP-based WEB mail service program . A remote code execution vulnerability exists in SquirrelMail 1.4.22 and earlier versions, which allows an attacker to inject specific parameters into a malicious Sendmail configuration file when using Sendmail, and then upload it as an...
MS IIS 6.0 Buffer Overflow NSE Script
local nmap = require "nmap" local string = require "string" local shortport = require "shortport" local vulns = require "vulns" -- NSE Buffer Overflow vulnerability in IIS description = Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services IIS...
Foxit Reader Heap Buffer Overflow Vulnerability
Foxit Reader is a small PDF document viewer and printing program. A heap buffer overflow vulnerability exists in the CreateFXPDFConvertor function of ConvertToPdfx86.dll in Foxit Reader version 7.3.4.311, which can be exploited by remote attackers to execute arbitrary code...
Code injection
GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka PT-2017-03...
Remote Command Execution Vulnerability in iGuardian Security Guardian
iGuardian is a router-based application embedded in the Linux operating system, with Snort an intrusion detection system as an embedded command-and-control system. A remote command execution vulnerability exists in the iGuardian Security/apps/login.php file. This allows an attacker to remotely...
Gazelle cross-site scripting vulnerability (CNVD-2017-05135)
Gazelle is a set of web frameworks for BitTorrent trackers. A cross-site scripting vulnerability exists in versions of Gazelle prior to 2017-03-19 that stems from the program failing to adequately filter the torrents and size parameters. A remote attacker could use this vulnerability to execute...
