13538 matches found
Microsoft Outlook Express and Windows Mail Integer Overflow (MS10-030; CVE-2010-0816)
Windows Mail formerly Outlook Express is an online communication tool for use with Windows. A remote code execution vulnerability has been reported in the way that Windows Mail Client handles specially crafted mail responses. The vulnerability is caused when a common library used by Outlook Expre...
Microsoft Excel Malformed FNGROUPCOUNT Value Code Execution (MS06-037; CVE-2006-1308)
Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...
Microsoft Office Excel Featheader Record Memory Corruption (MS09-067; CVE-2009-3129)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...
Office Files (CVE-2006-1308; CVE-2006-1540; CVE-2006-3431; CVE-2007-0934; CVE-2007-0936)
...
Update Protection against SHOUTcast Format String Vulnerability
SHOUTcast is Nullsoft's streaming audio system for Linux and Microsoft Windows platforms. A format string vulnerability was reported in SHOUTcast. A malicious attacker with the ability to send a formatted URL request to the SHOUTcast server may be able to execute arbitrary code on the target syst...
SSL - General Settings (CVE-2003-0719; CVE-2004-0826)
SSL Protections use a SSL protocol parser which uses a default port of TCP/443, but this port can be reconfigured...
GitLab Community and Enterprise Edition Cross-Site Scripting (CVE-2021-22242)
A stored cross-site scripting vulnerability exists in the Community edition and Enterprise edition of GitLab. The vulnerability is due to improper input validation...
Microsoft Windows Parse Server Prototype Pollution (CVE-2022-24760)
A prototype pollution vulnerability exists in Microsoft Windows Parse Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Emerson Dixell Arbitrary File Write (CVE-2021-45420)
An arbitrary file write vulnerability exists in Emerson Dixell. Successful exploitation of this vulnerability could result in denial of service and potentially code execution on the affected system...
Microsoft Defender Remote Code Execution (CVE-2021-42298)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Octeth Oempro SQL injection (CVE-2019-19740)
An SQL injection vulnerability exists in Octeth Oempro. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...
CAYIN xPost Remote Code Execution (CVE-2020-7356)
A remote code execution vulnerability exists in CAYIN xPost. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
SAP NetWeaver Directory Traversal (CVE-2020-6286; CVE-2020-6287)
A directory traversal vulnerability exists in SAP NetWeaver. Successful exploitation of this vulnerability could lead to disclosure of file contents accessible by the prime user...
ZyXEL NAS Command Injection (CVE-2020-9054)
A command injection vulnerability exists in Multiple ZyXEL network-attached storage NAS devices. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Advantech WebAccess Buffer Overflow (CVE-2019-13556)
A stack-based buffer overflow vulnerability exists in Advantech WebAccess. The vulnerability is due to a lack of boundary checks while copying user-supplied data into a stack-based buffer within giffconv.exe. A remote, unauthenticated attacker could exploit this vulnerability by sending a...
Microsoft Internet Explorer Memory Corruption - VER0 (CVE-2018-8631)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Advantech WebAccess SCADA Buffer Overflow (CVE-2018-7499)
A overflow vulnerability exists in the service of Advantech WebAccess. The vulnerability is due to a lack of data verification. Successful exploitation could lead to arbitrary code execution...
Microsoft Internet Explorer Memory Corruption (MS16-051: CVE-2016-0189)
A use after free vulnerability exists in Microsoft Internet Explorer. The root cause is a heap corruption when dealing with a corrupted VBScript array size. A successful exploitation of this issue could allow an attacker to execute arbitrary code on the remote system...
WordPress VideoWhisper Live Streaming Integration Plugin Unrestricted File Upload (CVE-2014-1905)
An unauthorized file upload vulnerability has been reported in VideoWhisper Live Streaming Integration plugin for WordPress. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could...
Microsoft .NET Framework TypeFilterLevel Code Execution (MS14-026; CVE-2014-1806)
A code execution vulnerability exists in Microsoft .NET Framework. The vulnerability is due to the way the .NET framework handles TypeFilterLevel checks for some malformed objects. A remote attacker could exploit this vulnerability by sending specially crafted data to the target server that uses...
AlienVault OSSIM av-centerd SOAP Requests Multiple Command Execution (CVE-2014-3804)
Multiple command execution vulnerabilities has been reported in AlienVault OSSIM. The vulnerabilities are due to failure to safely sanitize user data while handling av-centerd SOAP service requests. A remote unauthenticated attacker can exploit these vulnerabilities by sending crafted requests to...
Sophos Web Protection Appliance sblistpack Arbitrary Command Execution (CVE-2013-4983)
A command injection vulnerability has been reported in Sophos Web Protection Appliance. The vulnerability is due to sblistpack component, reachable from the web interface without authentication. An unauthenticated remote attacker could execute arbitrary OS commands on the Sophos appliance...
Internet Explorer Same ID Property Remote Code Execution (MS12-037; CVE-2012-1875)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object that has been deleted. A remote attacker could trigger this vulnerability by enticing an unsuspecting victim to open a...
7T Interactive Graphical SCADA System Arbitrary File Execution (CVE-2011-1566)
A file execution vulnerability has been reported in 7T Interactive Graphical SCADA System IGSS. 7-Technologies' IGSS is a Supervisory Control and Data Acquisition SCADA system used for monitoring and controlling industrial processes. A remote attacker may exploit this vulnerability to execute...
Adobe Shockwave Player Director File FFFFFF88 Record Integer Overflow (CVE-2010-2876; CVE-2010-4192)
Adobe Shockwave is a multimedia player that allows users to view interactive web content such as games, business presentations, entertainment, and advertisements from the web browser. It allows Adobe Director applications to be published on the Internet and viewed in a web browser on systems whic...
HP OpenView Network Node Manager netmon.exe Stack Buffer Overflow (CVE-2010-1551; CVE-2010-2703)
The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A stack buffer overflow vulnerability exists in HP OpenView Network Node...
CA Products Message Engine RPC Server Opcode 43 Buffer Overflow (CVE-2006-5143)
Computer Associates CA BrightStor ARCserve Backup and Business Protection Suite families of software products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distribution operations including Backup and Restore,...
SmartRG Routers Command Injection (CVE-2022-37661)
A command injection vulnerability exists in SmartRG routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
TP Link Wr940N Routers Buffer Overflow (CVE-2017-13772)
A buffer overflow vulnerability exists in TP Link Wr940N Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Ruckus IoT Controller Web UI Authentication Bypass (CVE-2020-26879)
An authentication bypass vulnerability exists in Ruckus IoT Controller Web UI. The vulnerability is due to improperly handling of a crafted HTTP request. A remote attacker could exploit the vulnerability by sending crafted HTTP requests to the target server...
Veeam Backup and Replication Authentication Bypass (CVE-2022-26501)
An authentication bypass vulnerability exists in Veeam Backup and Replication. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
Zoho Multiple Products Remote Code Execution (CVE-2022-35405)
A remote code execution vulnerability exists in multiple Zoho products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Studio-42 elFinder Remote Code Execution (CVE-2022-27115)
A remote code execution vulnerability exists in Studio-42 elFinder. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
F5 BIG-IP Buffer Overflow (CVE-2021-22991)
A buffer overflow vulnerability exists in F5 BIG-IP. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...
Grafana Directory Traversal (CVE-2021-43798)
A directory traversal vulnerability exists in Grafana. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
WordPress BuddyPress Plugin Privilege Escalation (CVE-2021-21389)
A privilege escalation vulnerability exists in WordPress BuddyPress Plugin. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Moodle Command Injection (CVE-2021-21809)
A command injection vulnerability exists in Moodle. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Monicahq Monica Stored Cross-Site Scripting (CVE-2021-27370)
A cross-site scripting vulnerability exists in Monicahq Monica. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
D-Link DNS-320 ShareCenter Command Injection (CVE-2019-16057)
A command injection vulnerability exists in D-Link DNS-320 ShareCenter. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to execute arbitrary commands on the affected system...
VMware Cloud Director Remote Code Execution (CVE-2020-3956)
A remote code execution vulnerability exists in VMware Cloud Director. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows NTLM Authentication Bypass (CVE-2019-1040)
An authentication bypass vulnerability exists in the NTLM component of Microsoft Windows. The vulnerability is due to improper validation of the MIC in an AUTHENTICATE message. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and...
WordPress W3 Total Cache Plugin Arbitrary File Read (CVE-2019-6715)
An Arbitrary File Read vulnerability exists in WordPress W3 Total Cache plugin. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary web script into the effected system...
PhpMyAdmin Cross-Site Request Forgery (CVE-2019-12922)
A cross-site request forgery vulnerability exists in PhpMyAdmin. Successful exploitation of this vulnerability can result in the deletion of servers...
Jenkins Git Client Plugin Remote Code Execution (CVE-2019-10392)
A remote code execution vulnerability exists in Jenkins Git Client Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
ASUSWRT LAN Backdoor Remote Command Execution (CVE-2014-9583)
A remote command execution vulnerability exists in Asuswrt. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Tuleap PHP Unserialize Code Execution (CVE-2014-8791)
This module exploits a PHP object injection vulnerability. Tuelap could be abused to allow authenticated users to execute arbitrary code with the permissions of the web server. This could lead to execute PHP code on the server...
Persistent Systems Radia Client Automation Command Execution - Ver2 (CVE-2015-1497)
A command execution vulnerability exists in Persistent Systems Radia Client Automation. The vulnerability is due to missing authentication while processing requests to the radexecd process. A remote unauthenticated attacker can exploit this vulnerability by sending crafted requests to the affecte...
Microsoft DirectX Crafted MJPEG Stream Handling Code Execution - Ver2 (CVE-2008-0011)
A code execution vulnerability has been reported in Microsoft DirectX application framework. The vulnerability is due to the way DirectX handles specially crafted MJPEG streams. A remote attacker could exploit this vulnerability by persuading a user to open a specially crafted ASF or AVI file,...
Internet Explorer Option Element Memory Corruption (MS11-081) - Ver2 (CVE-2011-1996)
A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer attempts to access objects that have not been initialized or have been deleted. A remote attacker could trigger this vulnerability by enticing an...