Infinity Exploit Kit Landing Page (CVE-2013-1347; CVE-2013-2423; CVE-2013-2465; CVE-2014-0322; CVE-2014-0502; CVE-2014-1776)

Infinity is a web exploit kit that operates by delivering a malicious payload to the victim's computer. Remote attackers can infect users with Infinity exploit kit by enticing them to visit a malicious web page. Infinity Exploit Kit installs payloads on infected computer, which could result in da...

Microsoft Office Property Memory Corruption - Ver2 (CVE-2006-2389)

A memory corruption vulnerability has been reported in Microsoft Office. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft .NET Framework WinForms Buffer Overflow (CVE-2013-0002)

A buffer overflow vulnerability exists in Microsoft .NET Framework Windows Form. The vulnerability is due to a race condition when handling the size of an array of objects prior to copying them into a global memory buffer.An attacker can remotely exploit this vulnerability by enticing a user to...

Microsoft Office File Malformed String Parsing Buffer Overflow (MS06-038) - ver 2 (CVE-2006-1540)

Microsoft Office is a popular productivity application suite released by Microsoft Corporation. It includes a word processor, a spreadsheet application, a presentation editor, and a number of other applications and components. A memory corruption vulnerability has been reported in several Microso...

Adobe Shockwave Player DIR Files PAMI Chunk Code Execution (APSB10-12; CVE-2010-1292)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A remote code execution vulnerability has been identified in Adobe Shockwave Player. An attacker can exploi...

HP Power Manager Remote Code Execution (CVE-2009-2685)

A remote code execution vulnerability exists within HP Power Manager. The vulnerability is due to insufficient bounds checking in the HP Power Manager while processing URL parameters in the login form of the web based management web server. Remote unauthenticated attackers can exploit this...

Oracle Database Server REPCAT_RPC.VALIDATE_REMOTE_RC SQL Injection (CVE-2009-1021)

Oracle Database Server is an enterprise-level relational database application suite. An SQL injection vulnerability has been reported in Oracle Database server. Remote authenticated attackers having Create Session privileges can exploit this vulnerability to inject and execute malicious SQL...

Microsoft Windows HTTP Services Chunked Encoding Integer Underflow (MS09-013; CVE-2009-0086)

Windows HTTP Services WinHTTP provides developers with an HTTP client application programming interface API to send requests through the HTTP protocol to other HTTP servers. A remote code execution vulnerability has been reported in Microsoft Windows HTTP Services. The vulnerability is due to the...

WordPress WPGateway Plugin Privilege Escalation (CVE-2022-3180)

A privilege escalation exists in WordPress WPGateway Plugin. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

D-Link DIR-825 OS Command Injection (CVE-2021-46441; CVE-2021-46442)

A command injection vulnerability exists in D-Link DIR-825. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Ruby On Rails Directory Traversal (CVE-2016-0752)

A directory traversal vulnerability exists in Ruby on Rails. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Tenda AX3 Router Buffer Overflow (CVE-2021-46393; CVE-2021-46394)

A stack buffer overflow vulnerability exists in Tenda AX3 Router. Successful exploitation of this vulnerability could result in a remote code execution with carefully crafted overflow data...

Advantech iView Remote Code Execution (CVE-2021-22652)

A remote code execution vulnerability exists in Advantech iView. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Micro Focus Operations Bridge Reporter Remote Code Execution (CVE-2021-22502)

A remote code execution vulnerability exists in Micro Focus Operations Bridge Reporter. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Belkin Linksys WRT160NL Command Injection (CVE-2021-25310)

A command injection vulnerability exists in Belkin Linksys WRT160NL. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Grandstream Multiple Products Authentication Bypass (CVE-2019-10655)

An authentication bypass vulnerability exists in multiple Grandstream products. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

Apache Kylin Remote Code Execution (CVE-2020-1956)

A command execution vulnerability exists in Apache kylin 2.3.2. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Apache Tapestry Information Disclosure (CVE-2020-13953)

An information disclosure vulnerability exists in Apache Tapestry. This vulnerability is due to URL manipulation that allows Java webapp files inside WEB-INF to be listed and downloaded...

Apache Spark Unauthenticated Remote Code Execution (CVE-2018-11770)

A remote code execution vulnerability exists in Apache Spark. Successful exploitation of this vulnerability could result in arbitrary code execution...

OMRON CX-One CX-Protocol Trace Type Confusion (CVE-2018-19027)

A type confusion vulnerability exists in OMRON CX-One CX-Protocol. This vulnerability occurs due to improper parsing of the project file...

Jenkins GitLab Plugin Information Disclosure (CVE-2019-10300)

An information disclosure vulnerability exists in Jenkins GitLab Plugin. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Nagios XI Cmdsubsys Command Injection (CVE-2018-15709; CVE-2018-15710)

An command injection vulnerability has been reported in the Command subsystem component of Nagios XI. The vulnerability is due to insufficient validation of command options submitted to ajaxhelper.php for the submitcommand action and the existence of a local privilege escalation vulnerability tha...

Bassmaster Batch Arbitrary JavaScript Injection Remote Code Execution (CVE-2014-7205)

An un-authenticated code injection vulnerability exists in the Bassmaster Nodejs plugin for Hapi. The vulnerability is due to improper input validation within the batch endpoint. Successful exploitation could allow an attacker to execute arbitrary code...

Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7202)

A buffer overrun vulnerability exists in Microsoft Edge and Microsoft Internet Explorer. The vulnerability is due to the way JavaScript engine handles objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web...

Apache Struts REST Plugin DMI Code Execution (CVE-2016-3087)

A code execution vulnerability exists in Apache Struts. The vulnerability is due the way the OGNL expressions are processed when DMI is enabled and the REST plugin is used. A remote attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitatio...

Oracle Application Testing Suite UploadFileAction fileType Directory Traversal (CVE-2016-0491)

A directory traversal vulnerability exists in Oracle Application Testing Suite. The vulnerability is due to insufficient input validation when processing HTTP request sent to URI "/olt/UploadFileUpload.do". A remote attacker can exploit this vulnerability by sending a malicious request to the...

Microsoft Internet Explorer HTML Sanitization Information Disclosure (MS12-037) - Ver2 (CVE-2012-1858)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way that the toStaticHTML API within Internet Explorer handles content using specific strings when sanitizing HTML. A remote attacker could exploit this vulnerability by...

Wordpress Video Gallery Plugin SQL Injection (CVE-2014-9097)

An SQL injection vulnerability has been reported in Wordpress Video Gallery Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

SkyBlueCanvas CMS Remote Command Execution (CVE-2014-1683)

A remote code execution vulnerability has been reported in SkyBlueCanvas CMS. The vulnerability is due to the filebashMail function that allows remote attackers to execute arbitrary commands, when the pid parameter is 4. A remote attacker can exploit this vulnerability by execute arbitrary comman...

Sun Java Web Start JRE Buffer Overflow - Ver2 (CVE-2007-3655)

A buffer overflow vulnerability has been reported in Sun JRE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

MongoDB nativeHelper.apply Remote Code Execution (CVE-2013-1892)

A remote code execution vulnerability has been reported in MongoDB...

SAP NetWeaver Message Server Memory Corruption (CVE-2013-1592)

A code execution vulnerability has been reported in SAP NetWeaver Message Server. The vulnerability is due to an array index error in the function MsJ2EEAddStatistics. A remote attacker can exploit this vulnerability by sending a specially crafted message to a vulnerable server...

Horde FTP Server Backdoor Arbitrary PHP Code Execution (CVE-2012-0209)

An arbitrary PHP code execution vulnerability has been reported in Horde FTP server...

Microsoft Office Visio DXF File Inserting Buffer Overflow (CVE-2010-1681)

Microsoft Visio is a diagram creation software for Microsoft Windows. A buffer overflow vulnerability exists in Microsoft Office Visio. The vulnerability is due to a boundary error in Microsoft Office Visio when parsing DXF files inserted into Visio documents. This vulnerability may be exploited ...

Ingres Database Communications Server Component Heap Buffer Overflow (CVE-2007-3334)

Ingres developed a relational database product named Ingres Database. Ingres Database is made available for both Windows and Unix-like platforms. The product is embedded by other software vendors such as Computer Associates CA. A heap buffer overflow vulnerability exists in Ingres Database...

Microsoft Excel Asian Languages Style Handling Buffer Overflow (MS06-059; CVE-2006-3431)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulas, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

Preemptive Protection against Multiple Vendors librpc.dll Stack Buffer Overflow

A buffer overflow vulnerability exists in IBM's Informix Dynamic Server and EMC's Legato Networker. Informix is a family of relational database management system RDBMS products by IBM. The vulnerability is due to insufficient validation of user input during authentication by the RPC protocol...

Adobe BlazeDS XML Processing Information Disclosure (APSB10-05; CVE-2009-3960)

Adobe BlazeDS is the server-based Java remoting and web messaging technology that enables developers to connect to back-end distributed data and push data in real-time to Adobe Flex and Adobe AIR applications. An information disclosure vulnerability has been identified in Adobe BlazeDS. The...

Ingres Database uuid_from_char Stack Buffer Overflow (CVE-2007-3338)

Ingres Database is a relational DataBase Management System DBMS product developed by Ingres. Ingres Database is made available for both Windows and Unix-like platforms. The product is embedded by other software vendors, such as Computer Associates CA in its eTrust and Unicenter products. A stack...

Microsoft Excel SST Record Integer Overflow (MS09-021; CVE-2009-0561; CVE-2009-3037)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The flaw is due to a memory corruption error in Microsoft Excel when loading specially crafted Excel files that include a malformed record object. The...

Microsoft Windows Message Queuing Service String Buffer Overflow (MS05-017; CVE-2005-0059; CVE-2007-3039)

...

Razer Sila Gaming Router Command Injection (CVE-2022-29013)

A command injection vulnerability exists in Razer Sila gaming router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

WordPress Photo Gallery Plugin SQL Injection (CVE-2022-0169)

A SQL injection vulnerability exists in the WordPress Photo Gallery plugin. This vulnerability is due to an input validation error on the bwgtagidbwgthumbnails0 parameter...

CachetHQ Cachet Remote Code Execution (CVE-2021-39172)

A remote code execution vulnerability exists in CachetHQ Cachet. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

BookStackApp BookStack Improper Access Control (CVE-2021-4119)

An improper access control vulnerability exists in BookStackApp BookStack. Successful exploitation of this vulnerability could allow a remote attacker to read sensitive files on the affected system...

Zoho ManageEngine ADAudit Plus Remote Code Execution (CVE-2022-28219)

A remote code execution vulnerability exists in Zoho ManageEngine ADAudit Plus. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

TP-Link TL-WR840N Router Command Injection (CVE-2021-41653)

A command injection vulnerability exists in TP-Link TL-WR840N Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Excel Security Feature Bypass (CVE-2021-42292)

A security bypass vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...

Codiad Web IDE Command Injection (CVE-2019-19208)

A command injection vulnerability exists in Codiad Web IDE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

ClonOs WEB UI Authentication Bypass (CVE-2019-18418)

An authentication bypass vulnerability exists in ClonOs WEB UI. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...