VulnCheck KEV: CVE-2020-36198

A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect:...

CVE-2021-27472

A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements...

Deserialization of untrusted data

A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre...

Design/Logic Flaw

A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements...

CVE-2021-27472

CVE-2021-27472 affects Rockwell Automation FactoryTalk AssetCentre (v10.00 and earlier) with a SQL Injection in the RunSearch function of the SearchService, enabling remote unauthenticated arbitrary SQL execution. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE list) an...

CVE-2021-27462 Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre...

The vulnerability of the Azure Site Recovery recovery tool, related to improper code generation, allows a attacker to execute arbitrary code.

The vulnerability of the Azure Site Recovery disaster recovery tool is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2022-16309 · Unknown · Zzzcms Zzzphp

Name of the Vulnerable Software and Affected Versions: ZZZCMS zzzphp version 2.1.0 Description: A remote command execution issue was discovered in ZZZCMS zzzphp, allowing for potential exploitation via the danger key function at zzz template.php. Recommendations: For ZZZCMS zzzphp version 2.1.0,...

The vulnerability of Fireware operating systems in network security devices like WatchGuard Firebox and XTM arises from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the Fireware operating systems used in network security devices like WatchGuard Firebox and XTM lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Adobe Medium’s 3D modeling software lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to execute arbitrary code.

The vulnerability of Adobe Medium’s 3D modeling software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

VulnCheck KEV: CVE-2022-24934

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEYCURRENTUSER in the registry...

UBUNTU-CVE-2022-0415

Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6...

Exploit for Code Injection in Phpunit_Project Phpunit

PoC exploit for CVE-2017-9841, a remote code execution vulnerabi...

CVE-2022-25438

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...

ROS-20220318-02

The vulnerability of OpenSSL function BNmodsqrt is related to execution of a loop without sufficiently limiting the number of its executions. limit the number of times it can be executed. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

CVE-2021-39726

In cdParseMsg of cdcodec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

The vulnerability of the software platform for developing and managing online stores Magento Commerce arises from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the Magento Commerce software platform for developing and managing online stores exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the software platform for developing and managing online stores Magento Commerce arises from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the Magento Commerce software platform for developing and managing online stores exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microweber file upload vulnerability

Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A file upload vulnerability exists in versions of Microweber prior to 1.2.11. The vulnerability stems from the lack of val...

ABB OPC Server for AC 800M

1. EXECUTIVE SUMMARY CVSS v3 8.4 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: OPC Server for AC 800M Vulnerability: Execution with Unnecessary Privileges 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a low privileged authenticated...