13538 matches found
Ruby On Rails Directory Traversal (CVE-2016-0752)
A directory traversal vulnerability exists in Ruby on Rails. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
TP-Link TL-WR840N Router Command Injection (CVE-2021-41653)
A command injection vulnerability exists in TP-Link TL-WR840N Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Codiad Web IDE Command Injection (CVE-2019-19208)
A command injection vulnerability exists in Codiad Web IDE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
IPFire Remote Code Execution (CVE-2021-33393)
A remote code execution vulnerability exists in IPFire. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Hongdian H8922 Command Injection (CVE-2021-28151; CVE-2021-28149)
A command injection vulnerability exists in Hongdian H8922. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Netgear ProSAFE Remote Code Execution (CVE-2020-26919)
A remote code execution vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Grandstream Multiple Products Authentication Bypass (CVE-2019-10655)
An authentication bypass vulnerability exists in multiple Grandstream products. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...
Pligg CMS Cross Site Request Forgery (CVE-2015-6655)
A cross site request forgery vulnerability exists in Pligg CMS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Zeroshell Remote Code Execution (CVE-2020-29390)
A remote code execution vulnerability exists in Zeroshell. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Artica Proxy Command Injection (CVE-2020-17505)
A command injection vulnerability exists in Artica Proxy. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
WordPress Site Editor Plugin Local File Inclusion (CVE-2018-7422)
A directory traversal vulnerability exists in WordPress Site Editor Plugin. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
OMRON CX-One CX-Protocol Trace Type Confusion (CVE-2018-19027)
A type confusion vulnerability exists in OMRON CX-One CX-Protocol. This vulnerability occurs due to improper parsing of the project file...
Cisco Multiple Products Remote Code Execution (CVE-2019-1821)
A remote code execution vulnerability exists in the web based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager. A remote unauthenticated attacker could exploit this vulnerability to execute code with root level privileges on the target system...
WordPress portable-phpMyAdmin Plugin Authentication Bypass (CVE-2012-5469)
An authentication bypass vulnerability exists in WordPress portable-phpMyAdmin Plugin. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...
Nagios XI Cmdsubsys Command Injection (CVE-2018-15709; CVE-2018-15710)
An command injection vulnerability has been reported in the Command subsystem component of Nagios XI. The vulnerability is due to insufficient validation of command options submitted to ajaxhelper.php for the submitcommand action and the existence of a local privilege escalation vulnerability tha...
HAProxy HTTP2 Frame Size Heap Buffer Overflow (CVE-2018-10184)
A heap-based buffer overflow vulnerability exists in HAProxy. The vulnerability is due to incorrect validation of frame length on incoming HTTP/2 frames. A remote, unauthenticated attacker could exploit this vulnerability by sending a malicious request to the target server...
Microsoft Windows VBScript Engine Remote Code Execution (CVE-2018-8544)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Linksys WVBR0-25 Command Injection (CVE-2017-17411)
A command injection vulnerability exists in Linksys WVBR0-25. The vulnerability is due to insufficient input validation in the router's web management portal. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
HPE Intelligent Management Center dbman RestartDB Command Injection (CVE-2017-5816)
A command injection vulnerability exists in the dbman component of HPE Intelligent Management Center. The vulnerability is due to improper validation of the dbInstance parameter when handling RestartDB commands. A remote, unauthenticated attacker can exploit the vulnerability by sending a...
HP Data Protector Remote Command Execution (CVE-2016-2004)
An arbitrary command execution vulnerability exists in the HPE Data Protector. A remote, unauthenticated attacker could exploit this vulnerability by sending malformed requests to a HPE Data Protector service. Successful exploitation could lead to arbitrary command execution under the context of...
Apache Struts REST Plugin DMI Code Execution (CVE-2016-3087)
A code execution vulnerability exists in Apache Struts. The vulnerability is due the way the OGNL expressions are processed when DMI is enabled and the REST plugin is used. A remote attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitatio...
Fortinet Single Sign On Hello Message Multiple Vulnerabilities - ver 2 (CVE-2015-2281)
Multiple Vulnerabilities exists in Fortinet Single Sign On FSSO. The vulnerabilities are due to a lack of adequate validation of user supplied input when processing HELLO messages. A remote, unauthenticated attacker could exploit these vulnerabilities by sending a specially crafted HELLO message ...
Wordpress Video Gallery Plugin SQL Injection (CVE-2014-9097)
An SQL injection vulnerability has been reported in Wordpress Video Gallery Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Rocket Servergraph Admin Center fileRequestor Directory Traversal (CVE-2014-3914)
A code execution vulnerability exists in Rocket Servergraph Admin Center. The vulnerability occurs when making an HTTP POST request to the URI /SGPAdmin/fileRequest with the parameters cmd=writeDataFile, cmd=run, cmd=runClear or cmd=del, which can be present in the Body of the request. A remote...
Infinity Exploit Kit Landing Page (CVE-2013-1347; CVE-2013-2423; CVE-2013-2465; CVE-2014-0322; CVE-2014-0502; CVE-2014-1776)
Infinity is a web exploit kit that operates by delivering a malicious payload to the victim's computer. Remote attackers can infect users with Infinity exploit kit by enticing them to visit a malicious web page. Infinity Exploit Kit installs payloads on infected computer, which could result in da...
Microsoft Office Property Memory Corruption - Ver2 (CVE-2006-2389)
A memory corruption vulnerability has been reported in Microsoft Office. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Windows Media Runtime Voice Sample Rate Code Execution - Ver2 (CVE-2009-0555)
A code execution vulnerability has been reported in Microsoft Windows Media. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
MongoDB nativeHelper.apply Remote Code Execution (CVE-2013-1892)
A remote code execution vulnerability has been reported in MongoDB...
Internet Explorer CSS Recursive Import Memory Corruption (CVE-2010-3971)
Microsoft Internet Explorer is the most widely used Internet browser. A memory corruption vulnerability has been reported in the way Microsoft Internet Explorer parses HTML pages that contain recursive CSS import. The vulnerability is due to the creation of uninitialized memory during a CSS...
Microsoft Excel Asian Languages Style Handling Buffer Overflow (MS06-059; CVE-2006-3431)
Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulas, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...
Adobe BlazeDS XML Processing Information Disclosure (APSB10-05; CVE-2009-3960)
Adobe BlazeDS is the server-based Java remoting and web messaging technology that enables developers to connect to back-end distributed data and push data in real-time to Adobe Flex and Adobe AIR applications. An information disclosure vulnerability has been identified in Adobe BlazeDS. The...
Ingres Database uuid_from_char Stack Buffer Overflow (CVE-2007-3338)
Ingres Database is a relational DataBase Management System DBMS product developed by Ingres. Ingres Database is made available for both Windows and Unix-like platforms. The product is embedded by other software vendors, such as Computer Associates CA in its eTrust and Unicenter products. A stack...
VideoLAN VLC Media Player RealText File Buffer Overflow (CVE-2008-5036)
VLC Media Player is an open source multimedia player. It can play many audio and video formats MPEG, DivX, ogg, Wave etc. as well as various streaming protocols. It is highly portable and available for multiple platforms. Support for various formats is implemented in the form of plugins bundled...
Oracle Secure Backup Multiple Command Injections (CVE-2008-4006; CVE-2008-5448; CVE-2008-5449)
Oracle Database Server is an enterprise-level relational database application suite. Oracle Secure Backup Administration Server provides a single point of data management across network attached storage NAS devices and distributed hosts. Several command injection vulnerabilities were reported in...
Microsoft Windows Message Queuing Service String Buffer Overflow (MS05-017; CVE-2005-0059; CVE-2007-3039)
...
WordPress Photo Gallery Plugin SQL Injection (CVE-2022-0169)
A SQL injection vulnerability exists in the WordPress Photo Gallery plugin. This vulnerability is due to an input validation error on the bwgtagidbwgthumbnails0 parameter...
CachetHQ Cachet Remote Code Execution (CVE-2021-39172)
A remote code execution vulnerability exists in CachetHQ Cachet. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress WPGateway Plugin Privilege Escalation (CVE-2022-3180)
A privilege escalation exists in WordPress WPGateway Plugin. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
BookStackApp BookStack Improper Access Control (CVE-2021-4119)
An improper access control vulnerability exists in BookStackApp BookStack. Successful exploitation of this vulnerability could allow a remote attacker to read sensitive files on the affected system...
QNAP NAS Command Injection (CVE-2021-28799)
A command injection vulnerability exists in QNAP NAS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Edgecore ECS2020 Command Injection (CVE-2019-6288)
A command injection vulnerability exists in Edgecore ECS2020. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft Excel Security Feature Bypass (CVE-2021-42292)
A security bypass vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...
Micro Focus Operations Bridge Reporter Remote Code Execution (CVE-2021-22502)
A remote code execution vulnerability exists in Micro Focus Operations Bridge Reporter. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Tiny Tiny RSS Remote Code Execution (CVE-2020-25787)
A remote code execution vulnerability exists in Tiny Tiny RSS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Nagios XI Command Injection (CVE-2020-5791)
A command injection vulnerability exists in Nagios XI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
ClonOs WEB UI Authentication Bypass (CVE-2019-18418)
An authentication bypass vulnerability exists in ClonOs WEB UI. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...
NAPC Xinet Elegant 6 Asset Library SQL injection (CVE-2019-19245)
An SQL injection vulnerability exists in NAPC Xinet Elegant 6 Asset Library. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...
Hoosk CMS Cross Site Scripting (CVE-2020-26043)
A cross-site scripting vulnerability exists in Hoosk CMS. Successful exploitation of this vulnerability could allow remote attackers to inject arbitrary web script into the affected system...
Technicolor TD5130v2 Oi_Fw_V20 Command Injection (CVE-2019-18396)
A command injection vulnerability exists in Technicolor TD5130v2 OiFwV20. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Joomla SimpleCalendar Component SQL Injection (CVE-2018-5974)
A vulnerability exists in Albonico Simplecalendar. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...