13538 matches found
Microsoft Internet Explorer Information Disclosure (MS17-006: CVE-2017-0059)
Information disclosure vulnerabilities exists in Microsoft Internet Explorer. This vulnerability is due to improper handling of objects in memory. A successful exploitation could result in an out-of-bounds read and access to private user data...
Tarantool xrow_header_decode Out of Bounds Read (CVE-2016-9037)
An Out of Bounds read vulnerability has been reported in the xrowheaderdecode function of Tarantool. This vulnerability is due to incorrect handling of objects in memory when trying to determine the type of a key. A remote, unauthenticated attacker could exploit this vulnerability by sending a...
Apache Qpid Session.gap Denial of Service (CVE-2015-0203)
A denial of service vulnerability exists in Apache Qpid. The vulnerability is due to an assertion failure prior to session establishment when processing the session.gap control segment. A remote, authenticated attacker could exploit this vulnerability by sending an out of sequence session.gap...
ManageEngine EventLog Analyzer agentHandler Information Disclosure (CVE-2014-6038)
An information disclosure vulnerability exists in ManageEngine EventLog Analyzer. The vulnerability is due to a failure to restrict access to confidential data and an input validation error in the agentHandler servlet. A remote unauthenticated attacker can exploit the vulnerability to disclose...
Rocket Servergraph Admin Center fileRequestor Directory Traversal (CVE-2014-3914)
A code execution vulnerability exists in Rocket Servergraph Admin Center. The vulnerability occurs when making an HTTP POST request to the URI /SGPAdmin/fileRequest with the parameters cmd=writeDataFile, cmd=run, cmd=runClear or cmd=del, which can be present in the Body of the request. A remote...
Horde Framework Unserialize PHP Code Execution (CVE-2014-1691)
An arbitrary PHP code execution vulnerability has been reported in Horde . An attacker can exploit this vulnerability to execute arbitrary code with the permissions of the web server...
Microsoft Windows Kernel Input Validation Remote Code Execution - Ver2 (CVE-2009-0081)
A code execution vulnerability has been reported in The Windows kernel. The vulnerability is due to an error in the Windows kernel that fails to properly validate input passed from user mode through the kernel component of GDI. Successful exploitation of this vulnerability could allow a remote...
HP Data Protector Opcode 42 Directory Traversal (CVE-2013-6194)
A directory traversal vulnerability has been reported in HP Data Protector. The vulnerability is due to a lack of input sanitization on a file name provided with Opcode 42. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the vulnerable service...
Microsoft Windows LNK PIF Code Execution - Ver2 (CVE-2010-2568)
A code execution vulnerability has been reported in Microsoft Windows 7, Microsoft Windows Vista, Microsoft Windows Xp, Microsoft Windows 2003 Server, Microsoft Windows Server 2003 and Microsoft Windows Server 2008. Successful exploitation of this vulnerability could allow a remote attacker to...
OpenX Ad Server Backdoor PHP Code Execution (CVE-2013-4211)
A Code Execution vulnerability has been reported in OpenX Ad Server. The vulnerability is due to the existence of a backdoor within the flowplayer-3.1.1.min.js library. A remote attacker could exploit this vulnerability by sending a malicious request to the server. Successful exploitation could...
Microsoft DirectShow Remote Code Execution (MS13-056; CVE-2013-3174)
A remote code execution vulnerability has been reported in the Microsoft DirectShow. The vulnerability is due to faulty GIF image files parsing. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted GIF file. A successfull exploitation of this vulnerability...
Microsoft .NET Framework WinForms Buffer Overflow (CVE-2013-0002)
A buffer overflow vulnerability exists in Microsoft .NET Framework Windows Form. The vulnerability is due to a race condition when handling the size of an array of objects prior to copying them into a global memory buffer.An attacker can remotely exploit this vulnerability by enticing a user to...
Preemptive Protection against Microsoft IIS FTP Server Telnet IAC Buffer Overflow Vulnerability (MS11-004)
A heap buffer overflow vulnerability has been reported within the Microsoft Internet Information Services IIS FTP Service. IIS is a collection of Internet services packaged with several versions of the Windows operating system. IIS includes a FTP server service for exchanging and manipulating fil...
Microsoft Windows Cinepak Codec Remote Code Execution (MS10-055; CVE-2010-2553)
The Cinepak codec is a media encoder and decoder supported by the Windows Media Player. A remote code execution vulnerability has been reported in the way the Cinepak codec handles supported format files. The vulnerability is due to an error in the Cinepak codec that fails to properly handle...
Microsoft Malware Protection Engine File Processing Denial of Service (CVE-2008-1437)
Microsoft Malware Protection Engine provides the scanning, detection and cleaning capabilities for the antivirus and antispyware clients from Microsoft. The applications that use this engine for their operation are: There exists a vulnerability in Microsoft Malware Protection Engine, which can be...
Workaround for Microsoft Windows Kernel-Mode Drivers Win32k EOT Parsing Remote Code Execution Vulnerability (MS09-065)
A remote code execution vulnerability has been reported in the way the Windows kernel-mode drivers are parsing Windows Embedded OpenType EOT font code. The Windows kernel is the core of the operating system. It provides system level services such as device management and memory management,...
WordPress SVG Icons Plugin Arbitrary File Upload (CVE-2022-0863)
An arbitrary file upload vulnerability exists in WordPress SVG Icons plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Ruckus IoT Controller Web UI Authentication Bypass (CVE-2020-26879)
An authentication bypass vulnerability exists in Ruckus IoT Controller Web UI. The vulnerability is due to improperly handling of a crafted HTTP request. A remote attacker could exploit the vulnerability by sending crafted HTTP requests to the target server...
Prima Systems FlexAir Command Injection (CVE-2019-7670)
A command injection vulnerability exists in Prima Systems FlexAir. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Apache OpenMeetings Denial of Service (CVE-2020-13951; CVE-2021-27576)
A denial of service vulnerability exists in Apache OpenMeetings. Successful exploitation of this vulnerability would allow remote attackers to cause denial of service on the affected system...
SAP NetWeaver J2EE Engine SQL Injection (CVE-2016-2386)
An SQL injection vulnerability exists in SAP NetWeaver J2EE Engine. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...
Google Android Denial Of Service (CVE-2013-4710)
A denial of service vulnerability exists in Google Android. Successful exploitation of this vulnerability would allow remote attackers to cause denial of service on the affected system...
Gogs File Upload Command Injection (CVE-2022-0415)
A command injection vulnerability exists in Gogs File Upload. Successful exploitation of this vulnerability could result in code execution on the affected system...
TP-LINK TL-WR840N Command Injection (CVE-2022-25060)
A command injection vulnerability exists in TP-LINK TL-WR840N. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Tenda AX3 Router Buffer Overflow (CVE-2021-46393; CVE-2021-46394)
A stack buffer overflow vulnerability exists in Tenda AX3 Router. Successful exploitation of this vulnerability could result in a remote code execution with carefully crafted overflow data...
rConfig SQL Injection (CVE-2020-10546; CVE-2020-10547; CVE-2020-10548; CVE-2020-10549)
An SQL injection vulnerability exists in rConfig. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
IPFire Remote Code Execution (CVE-2021-33393)
A remote code execution vulnerability exists in IPFire. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Hongdian H8922 Command Injection (CVE-2021-28151; CVE-2021-28149)
A command injection vulnerability exists in Hongdian H8922. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Netgear ProSAFE Remote Code Execution (CVE-2020-26919)
A remote code execution vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Belkin Linksys WRT160NL Command Injection (CVE-2021-25310)
A command injection vulnerability exists in Belkin Linksys WRT160NL. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
NAPC Xinet Elegant 6 Asset Library SQL injection (CVE-2019-19245)
An SQL injection vulnerability exists in NAPC Xinet Elegant 6 Asset Library. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...
Technicolor TD5130v2 Oi_Fw_V20 Command Injection (CVE-2019-18396)
A command injection vulnerability exists in Technicolor TD5130v2 OiFwV20. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
ERS Data System Remote Code Execution (CVE-2017-14702)
A remote code execution vulnerability exists in ERS Data System. Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on the affected system...
IPS Community Suite Remote Code Execution (CVE-2016-6174)
A remote code execution vulnerability exists in IPS Community Suite. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Win32k Elevation of Privilege (CVE-2020-1054)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
mIRC URI Handler Remote Code Execution (CVE-2019-6453)
A remote code execution vulnerability exists in mIRC. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option. Successful exploitation could result in code execution on the target machine in the context of the application...
Moodle Remote Code Execution (CVE-2018-1133)
A remote code execution vulnerability exists in Moodle server. The vulnerability is due to improper validation of request parameters. A remote attacker can exploit this vulnerability to execute arbitrary code on the vulnerable Moodle server...
Advantech WebAccess SCADA Buffer Overflow (CVE-2018-7499)
A overflow vulnerability exists in the service of Advantech WebAccess. The vulnerability is due to a lack of data verification. Successful exploitation could lead to arbitrary code execution...
Trend Micro InterScan Messaging Security modTMCSS Command Injection (CVE-2017-11391; CVE-2017-11394)
A command injection vulnerability exists in Trend Micro InterScan Messaging Security virtual appliance. The vulnerability is due to improper validation of request parameters within the modTMCSS Proxy functionality. A remote, authenticated attacker could exploit the vulnerability by sending a...
DNN Cookie Deserialization Remote Code Execution (CVE-2017-9822)
An object deserialization vulnerability exists in DotNetNuke web content management system. A remote unauthenticated attacker may exploit this vulnerability by sending a crafted file to the web application...
Brocade Network Advisor FileReceiveServlet filename Directory Traversal (CVE-2016-8204)
A directory traversal vulnerability exists in Brocade Network Advisor. The vulnerability is due to lack of authentication and insufficient input validation in the FileReceiveServlet servlet when processing HTTP multipart form requests. A remote, unauthenticated attacker can exploit this...
Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0087)
A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...
Microsoft FrontPage Server Extensions Cross Site Scripting (MS06-017: CVE-2006-0015)
A Cross Site Scripting vulnerability exists in Microsoft FrontPage Server Extensions and Microsoft SharePoint Team Services. The vulnerability is caused as a result of the failure of these products to properly validate certain CGI parameters passed to them. This vulnerability allows arbitrary HTM...
Apache Qpid Session.gap Denial of Service - Ver2 (CVE-2015-0203)
A denial of service vulnerability exists in Apache Qpid. The vulnerability is due to an assertion failure prior to session establishment when processing the session.gap control segment. A remote, authenticated attacker could exploit this vulnerability by sending an out of sequence session.gap...
Microsoft Windows AVI Processing Malformed Header Code Execution (MS09-038) - Ver2 (CVE-2009-1545)
Audio Video Interleave AVI is a special case of Resource Interchange File Format RIFF. This file type used with applications that capture, edit, and play back audio-video sequences. A remote code execution vulnerability has been discovered in the way Microsoft Windows handles specially crafted AV...
Persistent Systems Radia Client Automation Command Execution (CVE-2015-1497)
A command execution vulnerability exists in Persistent Systems Radia Client Automation. The vulnerability is due to missing authentication while processing requests to the radexecd process. A remote unauthenticated attacker can exploit this vulnerability by sending crafted requests to the affecte...
ManageEngine EventLog Analyzer Hostdetails Information Disclosure (CVE-2014-6039)
An information disclosure vulnerability exists in ManageEngine EventLog Analyzer. The vulnerability is due to a failure to restrict access to confidential data in the HostDataServlet servlet...
WordPress Slider Revolution Plugin Local File Inclusion (CVE-2014-9734; CVE-2015-1579)
An information disclosure vulnerability has been reported in WordPress Slider Revolution Plugin. Successful exploitation of this vulnerability could allow a remote attacker to download local files, and may lead to disclosure of database credentials...
Yokogawa CS3000 SCADA BKFSim_vhfd.exe Remote Code Execution (CVE-2014-3888)
A remote code execution vulnerability has been reported in Yokogawa CENTUM CS 3000. The vulnerability is due to a stack based buffer overflow when handling specially crafted packets...
Linux System Files Information Disclosure (CVE-2018-10823; CVE-2018-3948)
Linux operating system contains system files with sensitive information. If not properly configured, remote attackers can view the information on such files...