17432 matches found
CVE-2021-34938
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
GHSA-VP5X-3V8R-QPRW Deserialization of Untrusted Data in Dubbo
A deserialization vulnerability existed in dubbo hessian-lite 3.2.11 and its earlier versions, which could lead to malicious code execution. Most Dubbo users use Hessian2 as the default serialization/deserialization protocol, during Hessian catch unexpected exceptions, Hessian will log out some...
CVE-2021-45411
In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution...
Command injection
Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings through the Admin ProxySettings and Tenant ProxySettings components...
The vulnerability of the Demo_ExecuteProcessOnGroup process in the CommCell storage management software allows a hacker to execute arbitrary code.
The vulnerability of the DemoExecuteProcessOnGroup process in the CommCell storage management software is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request remotely...
The vulnerability of software for the development and mass production of Gerbv printed circuits lies in the ability to write data beyond the buffer limit, allowing an attacker to execute arbitrary code.
The vulnerability of software for the development and mass production of printed circuit boards is related to data writing beyond the buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious gerber file...
CVE-2022-21963 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
...
CVE-2021-43971
A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitrary SQL commands via the filterText parameter...
Microsoft HEVC Video Extensions 缓冲区错误漏洞
Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. The application allows computers and devices to quickly read and efficiently perform video encoding or HEVC video. Microsoft HEVC Video Extensions suffers from a remote code execution vulnerability th...
PT-2022-1507 · Microsoft · Windows Security Center Api +1
Name of the Vulnerable Software and Affected Versions: Windows Security Center API affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Security Center API component of the Windows operating system. This allows remote attackers t...
CVE-2021-40002
The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end...
Out-of-bounds
The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end...
Out-of-bounds
The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end...
Pillow 安全漏洞
Pillow is a Python-based image processing library. Pillow is vulnerable to an input validation error prior to 9.0.0, which stems from a networked system or product that does not properly validate input data. An attacker could exploit this vulnerability to execute arbitrary expressions using the...
Exim Mail Transfer Agent (MTA) Improper Input Validation
Improper validation of recipient address in delivermessage function in /src/deliver.c may lead to remote command execution...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Spinnaker Access Control Error Vulnerability
Spinnaker is a continuous delivery platform. Used to release software changes with high speed and confidence. Spinnaker has a security vulnerability that stems from the presence of inappropriate privileges in the software that allow for pipeline creation and execution. This allows an arbitrary us...
CVE-2021-23727
A command injection vulnerability was found in the distributed task queue celery, which can lead to remote code execution. An attacker with access to backend results can reconstruct the exception class to act as a command payload which can be queried to the task to execute...
cWifi Hotspot Wireless CP Code Execution
Document Title: =============== cWifi Hotspot Wireless CP - Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2310 Release Date: ============= 2021-12-15 Vulnerability Laboratory ID VL-ID: ====================================...
CVE-2021-43832
Spinnaker is an open source, multi-cloud continuous delivery platform. Spinnaker has improper permissions allowing pipeline creation & execution. This lets an arbitrary user with access to the gate endpoint to create a pipeline and execute it without authentication. If users haven't setup...