D-Link Multiple Products Remote Code Execution (CVE-2015-2051; CVE-2022-37056)

A remote code execution vulnerability exists in multiple D-Link products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft .NET Remote Code Execution (CVE-2017-0160)

A Remote Code Execution vulnerability exists in the Microsoft .Net Framework. The vulnerability happend when Microsoft .NET Framework fails to properly validate input before loading libraries. A remote attacker could exploit this vulnerability by sending specially crafted data to the target serve...

Adobe Acrobat And Reader JavaScript API code execution (APSB15-10: CVE-2015-3072; CVE-2015-3065; CVE-2015-3066; CVE-2015-3067; CVE-2015-3068; CVE-2015-3071; CVE-2015-3073)

A Restrictions Bypass Privileged JavaScript API Execution Vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the use of trusted function which provides certain privileges that allows overwriting objects. A remote attacker can exploit this vulnerability by enticing the...

Fortinet Single Sign On Hello Message Multiple Vulnerabilities - ver 2 (CVE-2015-2281)

Multiple Vulnerabilities exists in Fortinet Single Sign On FSSO. The vulnerabilities are due to a lack of adequate validation of user supplied input when processing HELLO messages. A remote, unauthenticated attacker could exploit these vulnerabilities by sending a specially crafted HELLO message ...

Microsoft FrontPage Server Extensions Buffer Overrun (MS03-051: CVE-2003-0822)

A buffer overflow vulnerability exists in Microsoft FrontPage Server Extensions. The vulnerability is caused as a result of a debug functionality in fp30reg.dll. A remote attacker may exploit this issue by executing arbitrary code via a crafted chunked encoded request...

Internet Explorer HtmlDlgHelper Class Memory Corruption - Ver2 (CVE-2010-3329)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted when a document in an HTML format is opened in Microsoft Word. Successful exploitation of...

Windows Media Runtime Voice Sample Rate Code Execution - Ver2 (CVE-2009-0555)

A code execution vulnerability has been reported in Microsoft Windows Media. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Supermicro IPMI Firmware CGI Scanner Remote Code Execution (CVE-2013-3621; CVE-2013-3623)

A buffer overflow vulnerability has been reported in the Supermicro IPMI Firmware. A remote attacker may exploit this issue by sending specially crafted messages to the target server. Exploitation of these vulnerabilities may result in remote code execution as the root user account...

SAP NetWeaver Message Server Memory Corruption (CVE-2013-1592)

A code execution vulnerability has been reported in SAP NetWeaver Message Server. The vulnerability is due to an array index error in the function MsJ2EEAddStatistics. A remote attacker can exploit this vulnerability by sending a specially crafted message to a vulnerable server...

Horde FTP Server Backdoor Arbitrary PHP Code Execution (CVE-2012-0209)

An arbitrary PHP code execution vulnerability has been reported in Horde FTP server...

Ingres Database Communications Server Component Heap Buffer Overflow (CVE-2007-3334)

Ingres developed a relational database product named Ingres Database. Ingres Database is made available for both Windows and Unix-like platforms. The product is embedded by other software vendors such as Computer Associates CA. A heap buffer overflow vulnerability exists in Ingres Database...

Preemptive Protection against Multiple Vendors librpc.dll Stack Buffer Overflow

A buffer overflow vulnerability exists in IBM's Informix Dynamic Server and EMC's Legato Networker. Informix is a family of relational database management system RDBMS products by IBM. The vulnerability is due to insufficient validation of user input during authentication by the RPC protocol...

Microsoft Excel Malformed Graphic Code Execution (MS06-012; CVE-2006-0030)

Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available in several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...

Adobe BlazeDS XML Processing Information Disclosure (APSB10-05; CVE-2009-3960)

Adobe BlazeDS is the server-based Java remoting and web messaging technology that enables developers to connect to back-end distributed data and push data in real-time to Adobe Flex and Adobe AIR applications. An information disclosure vulnerability has been identified in Adobe BlazeDS. The...

Ingres Database uuid_from_char Stack Buffer Overflow (CVE-2007-3338)

Ingres Database is a relational DataBase Management System DBMS product developed by Ingres. Ingres Database is made available for both Windows and Unix-like platforms. The product is embedded by other software vendors, such as Computer Associates CA in its eTrust and Unicenter products. A stack...

VideoLAN VLC Media Player RealText File Buffer Overflow (CVE-2008-5036)

VLC Media Player is an open source multimedia player. It can play many audio and video formats MPEG, DivX, ogg, Wave etc. as well as various streaming protocols. It is highly portable and available for multiple platforms. Support for various formats is implemented in the form of plugins bundled...

Microsoft Excel SST Record Integer Overflow (MS09-021; CVE-2009-0561; CVE-2009-3037)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The flaw is due to a memory corruption error in Microsoft Excel when loading specially crafted Excel files that include a malformed record object. The...

SmartRG Routers Command Injection (CVE-2022-37661)

A command injection vulnerability exists in SmartRG routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

GitLab Hardcoded Credentials (CVE-2022-1162)

A hardcoded credentials vulnerability exists in GitLab. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...

DigitalDruid HotelDruid Remote Code Execution (CVE-2022-22909)

A remote code execution vulnerability exists in DigitalDruid HotelDruid. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

BookStackApp BookStack Improper Access Control (CVE-2021-4119)

An improper access control vulnerability exists in BookStackApp BookStack. Successful exploitation of this vulnerability could allow a remote attacker to read sensitive files on the affected system...

IRZ Mobile Router Remote Code Execution (CVE-2022-27226)

A remote code execution vulnerability exists in IRZ Mobile Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

D-Link DNS-320 ShareCenter Command Injection (CVE-2019-16057)

A command injection vulnerability exists in D-Link DNS-320 ShareCenter. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to execute arbitrary commands on the affected system...

ClonOs WEB UI Authentication Bypass (CVE-2019-18418)

An authentication bypass vulnerability exists in ClonOs WEB UI. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

Octeth Oempro SQL injection (CVE-2019-19740)

An SQL injection vulnerability exists in Octeth Oempro. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...

OMRON CX-One CX-Protocol Trace Type Confusion (CVE-2018-19027)

A type confusion vulnerability exists in OMRON CX-One CX-Protocol. This vulnerability occurs due to improper parsing of the project file...

Cisco Multiple Products Remote Code Execution (CVE-2019-1821)

A remote code execution vulnerability exists in the web based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager. A remote unauthenticated attacker could exploit this vulnerability to execute code with root level privileges on the target system...

Oracle Application Testing Suite DownloadServlet Directory Traversal (CVE-2019-2557)

A directory traversal vulnerability exists in Oracle Application Testing Suite. A remote authenticated attacker can exploit this vulnerability by sending a malicious request to the vulnerable server. Successful exploitation results in arbitrary file download from the target server...

Jenkins GitLab Plugin Information Disclosure (CVE-2019-10300)

An information disclosure vulnerability exists in Jenkins GitLab Plugin. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

ZIP Slip Arbitrary File Overwrite Remote Code Execution (CVE-2018-1002200; CVE-2018-1002201; CVE-2018-1002203; CVE-2018-1002204; CVE-2018-1002205; CVE-2018-1002206; CVE-2018-1002207; CVE-2018-1261; CVE-2018-8008; CVE-2018-8009; CVE-2021-43555)

A file overwrite vulnerability exist in archive formats. To trigger this issue, an attacker may create a malicious archive that will exploit this vulnerability. Successful exploitation of this vulnerability would allow a remote attacker to overwrite arbitrary files on the vulnerable system and...

Microsoft Windows Remote Assistance XXE Injection Information Disclosure (CVE-2018-0878)

An XML external entity XXE injection vulnerability exist in the Remote Assistance component of Microsoft Windows. The vulnerability is due to a failure to properly handle external entity references in XML files. A remote attacker could exploit this vulnerability by enticing a target user into...

Schneider Electric U.motion Builder nfcserver.php SQL Injection (CVE-2017-7973)

An SQL injection vulnerability exists in Schneider Electric U.motion Builder. The vulnerability is due to insufficient validation of the sessionid HTTP request parameter in requests made to nfcserver.php.A remote, unauthenticated user can exploit this vulnerability by sending a crafted HTTP reque...

HPE Intelligent Management Center dbman RestartDB Command Injection (CVE-2017-5816)

A command injection vulnerability exists in the dbman component of HPE Intelligent Management Center. The vulnerability is due to improper validation of the dbInstance parameter when handling RestartDB commands. A remote, unauthenticated attacker can exploit the vulnerability by sending a...

HP Data Protector Remote Command Execution (CVE-2016-2004)

An arbitrary command execution vulnerability exists in the HPE Data Protector. A remote, unauthenticated attacker could exploit this vulnerability by sending malformed requests to a HPE Data Protector service. Successful exploitation could lead to arbitrary command execution under the context of...

Symantec Endpoint Protection Manager Remote Privilege Escalation (CVE-2015-1487; CVE-2015-1489)

A vulnerability exist in Symantec Endpoint protection. These vulnerability include privilege escalation, path traversal and binary planting. Attackers can exploit this issue to gain elevated privileges on the affected computer...

Liferay Portal User Account Stored Cross Site Scripting (CVE-2016-3670)

A persistent XSS vulnerability exists in the user account creation process in Liferay Portal. The vulnerability is due to insufficient input validation of the firstName, middleName and lastName parameters. Successful exploitation could allow the attacker to inject arbitrary script code into a use...

Oracle Application Testing Suite UploadFileAction fileType Directory Traversal (CVE-2016-0491)

A directory traversal vulnerability exists in Oracle Application Testing Suite. The vulnerability is due to insufficient input validation when processing HTTP request sent to URI "/olt/UploadFileUpload.do". A remote attacker can exploit this vulnerability by sending a malicious request to the...

VMware OVF Tool Format String - Ver2 (CVE-2012-3569)

A format string vulnerability has been reported in VMware OVF Tool.The vulnerability is caused by insufficient sanitization when processing OVF files.A remote attacker can exploit this vulnerability to execute arbitrary code in the security context of the current user...

WordPress VideoWhisper Live Streaming Integration Plugin Unrestricted File Upload (CVE-2014-1905)

An unauthorized file upload vulnerability has been reported in VideoWhisper Live Streaming Integration plugin for WordPress. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could...

Infinity Exploit Kit Landing Page (CVE-2013-1347; CVE-2013-2423; CVE-2013-2465; CVE-2014-0322; CVE-2014-0502; CVE-2014-1776)

Infinity is a web exploit kit that operates by delivering a malicious payload to the victim's computer. Remote attackers can infect users with Infinity exploit kit by enticing them to visit a malicious web page. Infinity Exploit Kit installs payloads on infected computer, which could result in da...

Microsoft SMB NTLM Authentication Lack of Entropy (MS10-012; CVE-2010-0231)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. An elevation of privilege vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol software handles authentication attempts. The vulnerability is due to a lack of...

HP Power Manager Remote Code Execution (CVE-2009-2685)

A remote code execution vulnerability exists within HP Power Manager. The vulnerability is due to insufficient bounds checking in the HP Power Manager while processing URL parameters in the login form of the web based management web server. Remote unauthenticated attackers can exploit this...

Microsoft Windows HTTP Services Chunked Encoding Integer Underflow (MS09-013; CVE-2009-0086)

Windows HTTP Services WinHTTP provides developers with an HTTP client application programming interface API to send requests through the HTTP protocol to other HTTP servers. A remote code execution vulnerability has been reported in Microsoft Windows HTTP Services. The vulnerability is due to the...

Oracle Secure Backup Multiple Command Injections (CVE-2008-4006; CVE-2008-5448; CVE-2008-5449)

Oracle Database Server is an enterprise-level relational database application suite. Oracle Secure Backup Administration Server provides a single point of data management across network attached storage NAS devices and distributed hosts. Several command injection vulnerabilities were reported in...

Zoho Multiple Products Remote Code Execution (CVE-2022-35405)

A remote code execution vulnerability exists in multiple Zoho products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

TP-Link TL-WR840N Router Command Injection (CVE-2021-41653)

A command injection vulnerability exists in TP-Link TL-WR840N Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Edgecore ECS2020 Command Injection (CVE-2019-6288)

A command injection vulnerability exists in Edgecore ECS2020. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Excel Security Feature Bypass (CVE-2021-42292)

A security bypass vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...

CentOS Web Panel SQL Injection (CVE-2021-31316; CVE-2021-31324)

An SQL injection vulnerability exists in CentOS Web Panel. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Tiny Tiny RSS Remote Code Execution (CVE-2020-25787)

A remote code execution vulnerability exists in Tiny Tiny RSS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...