13538 matches found
HPE Edgeline Infrastructure Manager Authentication Bypass (CVE-2021-29203)
An authentication bypass vulnerability exists in HPE Edgeline Infrastructure Manager. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...
Microsoft Windows DNS Server Remote Code Execution (CVE-2021-26897)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows DNS Server Remote Code Execution (CVE-2021-26877)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apple Quicktime Remote Code Execution (CVE-2015-7089)
A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Intel Security VirusScan Enterprise Linux Cross-Site Scripting (CVE-2016-8019)
A cross-site scripting vulnerability exists in Intel Security VirusScan Enterprise Linux. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Microsoft Windows Server Privilege Escalation (CVE-2016-0007)
A privilege escalation vulnerability exists in Microsoft Windows Server. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Microsoft SharePoint Remote Code Execution (CVE-2020-17061)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Alcatel Lucent Stack Overflow (CVE-2019-3922)
A stack overflow vulnerability exists in Alcatel Lucent. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Windows Remote Code Execution (CVE-2020-1300)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation could result in execution of arbitrary code on the affected system...
Microsoft Windows Media Foundation H265 Stream Parsing Remote Code Execution (CVE-2020-16915)
A code execution vulnerability exists in Microsoft Windows Media Foundation. The vulnerability is due to improper validation of H265 media files. A remote attacker could exploit the vulnerability by enticing a victim user to open a maliciously crafted media file or open the folder containing the...
Hoosk CMS Remote Code Execution (CVE-2020-26041)
A remote code execution vulnerability exists in Hoosk CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
JustSystems Ichitaro Buffer Overflow (CVE-2017-2789)
A buffer overflow vulnerability exists in JustSystems Ichitaro. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Verint PTZ Camera Command Injection (CVE-2020-24057)
A command execution vulnerability exists in Verint PTZ Camera. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands as root on the affected system...
Microsoft DirectX Elevation of Privilege (CVE-2020-1308)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
SAP NetWeaver Remote Code Execution (CVE-2020-6287)
A remote code execution vulnerability exists in SAP NetWeaver. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Kernel Information Disclosure (CVE-2020-1426)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Samsung Smart Viewer Cross-site Scripting (CVE-2018-11689)
A cross-site scripting vulnerability exists in Samsung smartviewer . Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
ISC Bind Denial Of Service (CVE-2020-8617)
A denial-of-service vulnerability exists in ISC Bind. Successful exploitation of this vulnerability could cause a denial-of-service condition...
Canon Oce Colorwave Printer Cross Site Scripting (CVE-2020-10667)
A cross-site scripting vulnerability exists in Canon Oce Colorwave printer. Successful exploitation of this vulnerability could allow a remote attacker to inject an arbitrary web script into the affected system...
Wordpress BBPress Plugin Privilege Escalation (CVE-2020-13693)
A Privilege Escalation vulnerability exists in Wordpress BBPress Plugin. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Microsoft Windows SMB Driver Out of Bounds Read (CVE-2020-1284)
An out of bound memory read issue has been identified in SMB driver. A remote attacker could exploit the vulnerability by sending a crafted request...
Gila CMS Remote Code Execution (CVE-2020-5514)
A remote code execution vulnerability exists in Gila CMS. The vulnerability is due to improper validation of user supplied files during image upload...
Microsoft Office Information Disclosure(CVE-2019-1153)
An information disclosure vulnerability exists in microsoft office. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Microsoft Windows Information Disclosure(CVE-2019-1094)
An information disclosure vulnerability exists in microsoft windows . Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
NGINX NJS Buffer Overflow (CVE-2019-13067)
A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Adobe ColdFusion Remote Code Execution (CVE-2019-7838)
A remote code execution vulnerability exists in adobe coldfusion . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Ovirt Engine Reflected Cross Site Scripting (CVE-2016-3113)
A reflected cross site scripting vulnerability exists in Ovirt Engine. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...
PHP mb_strtolower Stack Buffer Overflow (CVE-2020-7065)
A stack buffer overflow vulnerability exists in PHP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Kernel Elevation of Privilege (CVE-2020-1027)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Insecure Library Loading (APSB20-13: CVE-2020-3803)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Progress Telerik UI Remote Code Execution (CVE-2019-18935)
A remote code execution vulnerability exists in Progress Telerik UI for Asp.Net Ajax. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
OPF OpenProject Cross-Site Scripting (CVE-2019-17092)
A cross-site scripting vulnerability exists in OPF OpenProject. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Cisco IOS XE WebUI Privileged Command Injection (CVE-2019-12650)
A command injection exists in the WebUI component of Cisco IOS XE. The vulnerability is due to insufficient input validation on form content submitted by a user via the WebUI.A remote, authenticated attacker with administrative access can exploit this vulnerability by sending a crafted HTTP reque...
Microsoft Office Word Security Feature Bypass (CVE-2019-0540)
An information disclosure vulnerability exists in the Word component of Microsoft Office. This vulnerability is due to improper handling of fields. Successful exploitation could cause an information disclosure...
Drupal Core file_create_filename Stored Cross-Site Scripting (CVE-2019-6341)
A stored cross-site scripting vulnerability exists in the File module of Drupal Core. The vulnerability is due to improper handling of the filename parameter provided for file uploads to the File module. Successful exploitation could result in the execution of arbitrary script code...
Oracle WebLogic Server AbstractPlatformTransactionManager Insecure Deserialization (CVE-2018-3191)
An insecure deserialization vulnerability has been reported in Oracle WebLogic Server. A remote attacker can exploit this vulnerability by sending a specially crafted serialized object. Successful exploitation can result in arbitrary code execution in the context of the user account running...
Asterisk Denial of Service (CVE-2018-12228)
A denial-of-service vulnerability has been reported in Asterisk. The vulnerability is due to improper handling of client abrupt disconnection or client-supplied messages when client is connecting via TLS. A remote user can exploit the vulnerability by abruptly disconnecting or sending specially...
Microsoft Windows Graphics Component Elevation of Privilege (CVE-2019-1435)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Graphics Device Interface Information Disclosure (CVE-2019-1010)
An information disclosure vulnerability exists in Microsoft Graphics Device Interface of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. Successful exploitation could result in disclosure of information which could be used to further compromise the target...
Adobe Acrobat and Reader Use After Free (APSB19-49: CVE-2019-8177)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Out-of-Bounds Write (APSB19-49: CVE-2019-8165)
An out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Microsoft DirectX Elevation of Privilege (CVE-2019-1284)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Pulse Connect Secure File Disclosure (CVE-2019-11510)
A file disclosure vulnerability exists in Pulse Connect Secure. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Microsoft Windows Kernel Information Disclosure (CVE-2019-1071)
...
Spoofed Reset (CVE-2004-0230)
...
Adobe Flash Player Use After Free (APSB19-30: CVE-2019-7845)
A use-after-free vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Kernel Elevation of Privilege (CVE-2019-1065)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Win32k Elevation of Privilege (CVE-2019-1017)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Oracle Fusion Middleware Information Disclosure (CVE-2019-2615)
An information disclosure vulnerability exists in Oracle WebLogic Server component of Oracle Fusion Middleware. Successful exploitation could result in the disclosure of sensitive information...
Adobe Acrobat and Reader Out-of-Bounds Write (APSB19-18: CVE-2019-7825)
An out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...