CVE-2018-17632

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-17661

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-17704

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-17692

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-17657

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Cisco RV320 Command Injection

Advisory: Cisco RV320 Command Injection RedTeam Pentesting discovered a command injection vulnerability in the web-based certificate generator feature of the Cisco RV320 router. Details ======= Product: Cisco RV320 Dual Gigabit WAN VPN Router, possibly others Affected Versions: 1.4.2.15 and later...

Code injection

In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object...

openSUSE Security Update : zeromq (openSUSE-2019-64)

This update for zeromq fixes the following issues : Security issue fixed : - CVE-2019-6250: fix a remote execution vulnerability due to pointer arithmetic overflow bsc1121717 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Code Execution Vulnerability in Ac***.cl***.php in LmxCMS V1.4 Backend

Dream Cms, hereinafter referred to as "lmxcms", is a simple and practical website management system cms developed by "10 years" screen name. A code execution vulnerability exists in Ac.cl.php in the backend of LmxCMS V1.4. An attacker can exploit the vulnerability to launch a remote command...

OMRON CX-Supervisor sr3 Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processi...

LAquis SCADA LGX Report TextFile Write Arbitrary File Creation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

SUSE SLED15 / SLES15 Security Update : zeromq (SUSE-SU-2019:0110-1)

This update for zeromq fixes the following issues : Security issue fixed : CVE-2019-6250: fix a remote execution vulnerability due to pointer arithmetic overflow bsc1121717 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

GHSA-JHJH-GHWX-6H7R modulemd uses an unsafe function for processing externally provided data

modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution...

SUSE-SU-2019:0110-1 Security update for zeromq

This update for zeromq fixes the following issues: Security issue fixed: - CVE-2019-6250: fix a remote execution vulnerability due to pointer arithmetic overflow bsc1121717...

Security update for zeromq (important)

openSUSE Security Update: Security update for zeromq Announcement ID: openSUSE-SU-2019:0064-1 Rating: important References: 1121717 Cross-References: CVE-2019-6250 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for zeromq...

Security Advisory 0039

Security Advisory 0039 PDF Date: January 16th, 2019 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | January 16th, 2019 | Initial Release The CVE-IDs tracking this issue are CVE-2018-16873, CVE-2018-16874 and CVE-2018-16875 Description This advisory is to document the impact of...

Authentication Bypass

smartproxydynflow is vulnerable to authentication bypass. This is due to a lack of authorization with the SSL clients and trusted hosts, which allows a remote attacker is able to execute arbitrary commands with high privileges...

Remote Code Execution

ReflectionHelper org.hibernate.validator.util.ReflectionHelper in Hibernate Validator is vulnerable to remote code execution. It is possible because it does not enforce Java Security Manager JSM restrictions, thereby allowing the attacker to trigger restricted reflection calls via a malicious...

Remote Code Execution (RCE)

Elasticsearch is vulnerable to arbitrary code execution. This is because dynamic scripting is enabled by default, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to search...