Microsoft SharePoint Malformed Request Remote Code Execution (MS10-104; CVE-2010-3964)

Document Conversions Launcher Service schedules and initiates the document conversions on a server. When Microsoft Office SharePoint Server 2007 passes the service a document conversion request, the Document Conversions Launcher Service calls the appropriate document converter. A remote code...

Apache Struts2 ParametersInterceptor Remote Command Execution (CVE-2010-1870)

Apache Struts2 is a free framework for building Java web-based applications. A command execution vulnerability has been reported in the web application framework Apache Struts2. The vulnerability is due to insufficient input validation in the ParametersInterceptor component when parsing incoming...

Oracle Database Server Network Authentication AUTH_SESSKEY Buffer Overflow (CVE-2009-1979)

Oracle Database Server is an enterprise-level relational database application suite. A buffer overflow vulnerability exists in the Oracle Database server, the vulnerability is due to an error in the Oracle Database server that fails to sufficiently validate the length field of the AUTHSESSKEY...

CA Products Message Engine RPC Server Opcode 43 Buffer Overflow (CVE-2006-5143)

Computer Associates CA BrightStor ARCserve Backup and Business Protection Suite families of software products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distribution operations including Backup and Restore,...

Oracle Database Server REPCAT_RPC.VALIDATE_REMOTE_RC SQL Injection (CVE-2009-1021)

Oracle Database Server is an enterprise-level relational database application suite. An SQL injection vulnerability has been reported in Oracle Database server. Remote authenticated attackers having Create Session privileges can exploit this vulnerability to inject and execute malicious SQL...

Internet Explorer Heap Spray Shell Code Execution (MS06-055 MS06-067; CVE-2006-4446; CVE-2006-4777; CVE-2006-4868; CVE-2009-2991)

Heap spraying is a new and increasingly popular technique to exploit vulnerabilities in Internet browsers. Heap spraying is used by attackers to implant a shell code on a target system. Shell code is a piece of executable code that opens a command shell that the attacker can control remotely...

RealVNC Password Authentication Bypass (CVE-2006-2369)

...

Update Protection against Oracle XDB HTTP Buffer Overflow Vulnerability

Oracle 9i XML database suffers from a buffer overflow vulnerability. By passing an overly long username or password, an attacker can execute arbitrary code on the target system...

Ahsay Cloud Backup Solutions Command Injection (CVE-2022-37027)

A command injection vulnerability exists in Ahsay Cloud Backup Solutions. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

GitLab Hardcoded Credentials (CVE-2022-1162)

A hardcoded credentials vulnerability exists in GitLab. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...

Moxa MXView Information Disclosure (CVE-2017-7455)

An information disclosure vulnerability exists in Moxa MXView. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Exchange Server Remote Code Execution (CVE-2022-23277)

A remote code execution vulnerability exists in Microsoft Exchange Server. The vulnerability is due to improper handling of EWS requests containing malicious UserConfiguration objects...

Google Chrome Out-of-Bounds Write (CVE-2019-5825)

An out of bounds write vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could cause heap corruption in the affected system...

Studio-42 elFinder Remote Code Execution (CVE-2022-27115)

A remote code execution vulnerability exists in Studio-42 elFinder. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

OpenSNS SQL Injection (CVE-2020-21725; CVE-2020-21726)

An SQL injection vulnerability exists in OpenSNS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

WordPress ProfilePress Plugin Privilege Escalation (CVE-2021-34621)

A privilege escalation exists in WordPress ProfilePress plugin. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Unauthorized SQL Commands Over HTTP (CVE-2020-15153; CVE-2020-35545)

Unauthorized SQL Commands Over HTTP...

Codiad Web IDE Command Injection (CVE-2019-19208)

A command injection vulnerability exists in Codiad Web IDE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Pligg CMS Cross Site Request Forgery (CVE-2015-6655)

A cross site request forgery vulnerability exists in Pligg CMS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Apache Spark Unauthenticated Remote Code Execution (CVE-2018-11770)

A remote code execution vulnerability exists in Apache Spark. Successful exploitation of this vulnerability could result in arbitrary code execution...

Microsoft Windows NTLM Authentication Bypass (CVE-2019-1040)

An authentication bypass vulnerability exists in the NTLM component of Microsoft Windows. The vulnerability is due to improper validation of the MIC in an AUTHENTICATE message. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and...

ReSIProcate Heap Buffer Overflow (CVE-2018-12584)

A heap buffer overflow vulnerability exists in the ReSIProcate. A remote, unauthenticated attackers could exploit this vulnerability by sending specially crafted SIP packets to the target server. Successful exploitation would result in arbitrary code execution...

Network Weathermap Persistent Cross-Site Scripting (CVE-2013-2618)

A cross-site scripting vulnerability has been reported in Network Weathermap. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Oracle Java SE MixerSequencer Object GM_Song Remote Code Execution (CVE-2010-0842)

A remote code execution vulnerability exists in Oracle Java SE 6u18 and prior. The vulnerability is caused by running specially crafted MIDI file within an RMF File. A remote attacker can exploit this issue by enticing a user to open a specially crafted file...

Bassmaster Batch Arbitrary JavaScript Injection Remote Code Execution (CVE-2014-7205)

An un-authenticated code injection vulnerability exists in the Bassmaster Nodejs plugin for Hapi. The vulnerability is due to improper input validation within the batch endpoint. Successful exploitation could allow an attacker to execute arbitrary code...

Microsoft Internet Explorer HTML Sanitization Information Disclosure (MS12-037) - Ver2 (CVE-2012-1858)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way that the toStaticHTML API within Internet Explorer handles content using specific strings when sanitizing HTML. A remote attacker could exploit this vulnerability by...

Wordpress Video Gallery Plugin SQL Injection (CVE-2014-9097)

An SQL injection vulnerability has been reported in Wordpress Video Gallery Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft Graphics Rendering Engine Thumbnail Image Stack Buffer Overflow - Ver2 (CVE-2010-3970)

Thumbnails are reduced-size versions of pictures, used to help in recognizing and organizing them, serving the same role for images as a normal text index does for words. A stack buffer overflow vulnerability has been discovered in Microsoft's Graphics Rendering Engine. The vulnerability is due t...

NetBSD tnftp fetch.c fetch_url Command Execution (CVE-2014-8517)

A command execution vulnerability has been reported in NetBSD tnftp. The vulnerability is due to insufficient validation of the ftp output file name when using an HTTP URI to fetch files. A remote, unauthenticated attacker could exploit this vulnerability by enticing a user to open a malicious UR...

Microsoft Office Property Memory Corruption - Ver2 (CVE-2006-2389)

A memory corruption vulnerability has been reported in Microsoft Office. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SkyBlueCanvas CMS Remote Command Execution (CVE-2014-1683)

A remote code execution vulnerability has been reported in SkyBlueCanvas CMS. The vulnerability is due to the filebashMail function that allows remote attackers to execute arbitrary commands, when the pid parameter is 4. A remote attacker can exploit this vulnerability by execute arbitrary comman...

Oracle Fusion Middleware Showmap Servlet Information Disclosure (CVE-2012-3152; CVE-2012-3153)

An information disclosure vulnerability has been reported in the Oracle Reports component of Oracle Fusion Middleware. The vulnerability is due to incorrect website configuration that could allow a remote attacker to execute unauthenticated network attacks over HTTP...

Sun Java Web Start JRE Buffer Overflow - Ver2 (CVE-2007-3655)

A buffer overflow vulnerability has been reported in Sun JRE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft XML Core Services Integer Truncation Memory Corruption (MS13-002; CVE-2013-0006)

A memory corruption vulnerability exists in Microsoft XML Core Services. The vulnerability is due to an integer truncation error while Microsoft XML Core Services parses XML content. Remote attackers could exploit this vulnerability by persuading a target user to visit a specially crafted website...

Microsoft Office Visio DXF File Inserting Buffer Overflow (CVE-2010-1681)

Microsoft Visio is a diagram creation software for Microsoft Windows. A buffer overflow vulnerability exists in Microsoft Office Visio. The vulnerability is due to a boundary error in Microsoft Office Visio when parsing DXF files inserted into Visio documents. This vulnerability may be exploited ...

Adobe Shockwave Player DIR Files PAMI Chunk Code Execution (APSB10-12; CVE-2010-1292)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A remote code execution vulnerability has been identified in Adobe Shockwave Player. An attacker can exploi...

D-Link Routers Command Injection (CVE-2021-45382)

A command injection vulnerability exists in D-Link Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

F5 BIG-IP Buffer Overflow (CVE-2021-22991)

A buffer overflow vulnerability exists in F5 BIG-IP. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

Moodle Command Injection (CVE-2021-21809)

A command injection vulnerability exists in Moodle. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Monicahq Monica Stored Cross-Site Scripting (CVE-2021-27370)

A cross-site scripting vulnerability exists in Monicahq Monica. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Zeroshell Remote Code Execution (CVE-2020-29390)

A remote code execution vulnerability exists in Zeroshell. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CAYIN xPost Remote Code Execution (CVE-2020-7356)

A remote code execution vulnerability exists in CAYIN xPost. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress Site Editor Plugin Local File Inclusion (CVE-2018-7422)

A directory traversal vulnerability exists in WordPress Site Editor Plugin. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Joomla SimpleCalendar Component SQL Injection (CVE-2018-5974)

A vulnerability exists in Albonico Simplecalendar. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

WordPress Tutor LMS Plugin Cross Site Request Forgery (CVE-2020-8615)

A cross site request forgery vulnerability exists in WordPress Tutor LMS Plugin. Successful exploitation of this vulnerability can result in the execution of arbitrary code in the effected system...

YSoSerial Payloads Remote Code Execution (CVE-2020-11518; CVE-2020-27130; CVE-2022-29936)

YSoSerial is a collection of utilities and property-oriented programming "gadget chains" discovered in common java libraries that can, under the right conditions, exploit Java applications performing unsafe deserialization of objects. Successful exploitation of unsafe deserialization objects coul...

Apache Tomcat AJP File Inclusion (CVE-2020-10487)

A file inclusion vulnerability exists in Apache Tomcat AJP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Pandora FMS Command Injection (CVE-2019-20224)

A command injection vulnerability exists in Pandora FMS. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary commands on the affected system...

PhpMyAdmin Cross-Site Request Forgery (CVE-2019-12922)

A cross-site request forgery vulnerability exists in PhpMyAdmin. Successful exploitation of this vulnerability can result in the deletion of servers...

NoneCMS ThinkPHP Remote Code Execution (CVE-2019-9082)

...