Monkey HTTPD Header Parsing Denial of Service (CVE-2013-3843)

A denial of service vulnerability has been reported in Monkey HTTPD Server...

SAP NetWeaver AdIExecBlkConv Message Server Buffer Overflow (CVE-2013-1593)

A code execution vulnerability exists in SAP NetWeaver Message Server. The vulnerability is due to a buffer overflow in the function AdIExecBlkConv while handling a request message. A remote attacker could trigger this flaw by sending a specially crafted message to a vulnerable server...

Microsoft Malware Protection Engine File Processing Denial of Service (CVE-2008-1437)

Microsoft Malware Protection Engine provides the scanning, detection and cleaning capabilities for the antivirus and antispyware clients from Microsoft. The applications that use this engine for their operation are: There exists a vulnerability in Microsoft Malware Protection Engine, which can be...

HP OpenView NNM getnnmdata.exe CGI ICount Parameter Buffer Overflow (CVE-2010-1554)

HP OpenView product is a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. A buffer overflow vulnerability exists in...

Microsoft Office Visio DXF File Inserting Buffer Overflow (CVE-2010-1681)

Microsoft Visio is a diagram creation software for Microsoft Windows. A buffer overflow vulnerability exists in Microsoft Office Visio. The vulnerability is due to a boundary error in Microsoft Office Visio when parsing DXF files inserted into Visio documents. This vulnerability may be exploited ...

Microsoft Exchange Server Buffer Overflow (CVE-2005-0560)

Microsoft Exchange Server is a messaging and collaboration server. It is an extensive application designed to provide email and scheduling capabilities for medium to large organizations. The server has the capability to communicate with email clients and other servers using the SMTP protocol. A...

Oracle Secure Backup Multiple Command Injections (CVE-2008-4006; CVE-2008-5448; CVE-2008-5449)

Oracle Database Server is an enterprise-level relational database application suite. Oracle Secure Backup Administration Server provides a single point of data management across network attached storage NAS devices and distributed hosts. Several command injection vulnerabilities were reported in...

IPS-1 Updates against Adobe, Microsoft Windows, Microsoft DirectShow and OpenOffice.org Vulnerabilities

Vulnerabilities in versions of Adobe, Microsoft Windows, Microsoft DirectShow and OpenOffice.org would, if exploited, might allow remote or local attackers to execute arbitrary code on a vulnerable system...

WinZip ActiveX Control Instantiation Buffer Overflow (CVE-2006-5198; CVE-2006-6884)

WinZip is a file archiver and compressor for Microsoft Windows. The vulnerability is due to an error in the WinZip FileView ActiveX control WZFILEVIEW.FileViewCtrl.61. To trigger the vulnerability, an attacker can create a malicious web page that initiates the vulnerable ActiveX control with a lo...

D-Link DIR-816 Command Injection (CVE-2022-37130)

A command injection vulnerability exists in D-Link DIR-816. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

VMWare Workspace One Access Authentication Bypass (CVE-2022-31656)

An authentication bypass vulnerability exists in VMWare Workspace One Access. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information and gain unauthorized access to the affected system...

Kaseya VSA Remote Code Execution (CVE-2021-30116)

A remote code execution vulnerability exists in Kaseya VSA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Yealink Device Management Command Injection (CVE-2021-27561)

A command injection vulnerability exists in Yealink Device Management. The vulnerability is due to improper handling of a crafted HTTP request...

Mimosa Devices Command Injection (CVE-2020-25206)

A command injection vulnerability exists in Mimosa. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

NETGEAR Command Injection (CVE-2021-33514)

A command injection vulnerability exists in NETGEAR routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Amcrest Cameras Stack Buffer Overflow (CVE-2020-5735)

A buffer overflow vulnerability exists in Amcrest Cameras. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

Ruckus IoT Controller Web UI Command Injection (CVE-2020-26878)

A remote command injection vulnerability exists in Ruckus IoT Controller Web UI. The vulnerability is due to improper handling of a crafted HTTP request...

NAPC Xinet Elegant 6 Asset Library SQL injection (CVE-2019-19245)

An SQL injection vulnerability exists in NAPC Xinet Elegant 6 Asset Library. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...

AlienVault OSSIM Remote Code Execution (CVE-2017-6971)

A remote code execution vulnerability exists in AlienVault OSSIM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Gracemedia Media Player Local File Inclusion (CVE-2019-9618)

A vulnerability exists in gracemedia media player project gracemedia media player. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Apache Tomcat AJP File Inclusion (CVE-2020-10487)

A file inclusion vulnerability exists in Apache Tomcat AJP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Google Chrome Use After Free Denial Of Service (CVE-2019-5788; CVE-2019-5789)

Multiple use-after-free vulnerabilities exist in Google Chrome. Successful exploitation of these vulnerabilities could allow a remote attacker to create a denial of service condition on the affected system...

WordPress GDPR Compliance Plugin Privilege Escalation (CVE-2018-19207)

A privilege escalation vulnerability exists in WordPress GDPR Compliance Plugin. The vulnerability is due to a missing authorization at the "userscanregister" action. A remote authenticated attacker may exploit this vulnerability to gain administrator privileges...

Trend Micro InterScan Messaging Security modTMCSS Command Injection (CVE-2017-11391; CVE-2017-11394)

A command injection vulnerability exists in Trend Micro InterScan Messaging Security virtual appliance. The vulnerability is due to improper validation of request parameters within the modTMCSS Proxy functionality. A remote, authenticated attacker could exploit the vulnerability by sending a...

Brocade Network Advisor FileReceiveServlet filename Directory Traversal (CVE-2016-8204)

A directory traversal vulnerability exists in Brocade Network Advisor. The vulnerability is due to lack of authentication and insufficient input validation in the FileReceiveServlet servlet when processing HTTP multipart form requests. A remote, unauthenticated attacker can exploit this...

Symantec Endpoint Protection Manager Remote Privilege Escalation (CVE-2015-1487; CVE-2015-1489)

A vulnerability exist in Symantec Endpoint protection. These vulnerability include privilege escalation, path traversal and binary planting. Attackers can exploit this issue to gain elevated privileges on the affected computer...

Microsoft Windows Graphics Component Remote Code Execution (MS16-097: CVE-2016-3301; CVE-2016-3303)

A memory corruption vulnerability exists in Microsoft Windows GDI . The vulnerability is due to integer overflow vulnerability founded in the GDI shared library. An attacker can exploits this vulnerability in various ways through an .emf file...

Apache Qpid Session.gap Denial of Service - Ver2 (CVE-2015-0203)

A denial of service vulnerability exists in Apache Qpid. The vulnerability is due to an assertion failure prior to session establishment when processing the session.gap control segment. A remote, authenticated attacker could exploit this vulnerability by sending an out of sequence session.gap...

Persistent Systems Radia Client Automation Command Execution (CVE-2015-1497)

A command execution vulnerability exists in Persistent Systems Radia Client Automation. The vulnerability is due to missing authentication while processing requests to the radexecd process. A remote unauthenticated attacker can exploit this vulnerability by sending crafted requests to the affecte...

Microsoft Graphics Rendering Engine Thumbnail Image Stack Buffer Overflow - Ver2 (CVE-2010-3970)

Thumbnails are reduced-size versions of pictures, used to help in recognizing and organizing them, serving the same role for images as a normal text index does for words. A stack buffer overflow vulnerability has been discovered in Microsoft's Graphics Rendering Engine. The vulnerability is due t...

ManageEngine EventLog Analyzer Hostdetails Information Disclosure (CVE-2014-6039)

An information disclosure vulnerability exists in ManageEngine EventLog Analyzer. The vulnerability is due to a failure to restrict access to confidential data in the HostDataServlet servlet...

Mozilla Firefox JIT escape Function Memory Corruption - Ver2 (CVE-2009-2477)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, and various graphic formats, and so on. The browser runs on Windows,...

HP Data Protector Opcode 42 Directory Traversal (CVE-2013-6194)

A directory traversal vulnerability has been reported in HP Data Protector. The vulnerability is due to a lack of input sanitization on a file name provided with Opcode 42. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the vulnerable service...

Windows Media Runtime Voice Sample Rate Code Execution - Ver2 (CVE-2009-0555)

A code execution vulnerability has been reported in Microsoft Windows Media. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

MS-SQL Server Protocol - General Settings - Ver2 (CVE-2002-1123)

...

Graphite Web Unsafe Module Handling Code Execution (CVE-2013-5093)

A command injection vulnerability has been reported in Graphite Web...

MoinMoin twikidraw Action Directory Traversal (CVE-2012-6081)

A directory traversal vulnerability has been reported in MoinMoin server application. The vulnerability is caused due to improper sanitization of query strings from the path. A remote attacker can exploit this vulnerability by sending crafted requests to the affected server. Successful exploitati...

MiniUPnP MiniUPnPd ProcessSSDPRequest Denial of Service (CVE-2013-0229)

A denial of service vulnerability has been reported in MiniUPnP MiniUPnPd. The vulnerability is due to a boundary error in ProcessSSDPRequest function. A remote attacker can exploit this vulnerability by sending specially crafted packet to the target. Successful exploitation could cause the servi...

Microsoft Exchange Server MIME Base64 Decoding Code Execution (MS07-026; CVE-2007-0213) - Improved Performance

A vulnerability exists in the way Microsoft Exchange servers process certain MIME-encoded attachments. An attacker can exploit this vulnerability for code execution in SYSTEM security context...

Oracle Java Applet2ClassLoader Remote Code Execution (CVE-2010-4452)

Java Technology is a programming platform which aims to provide a system for developing and deploying cross-platform applications. It is distributed in the form of various tools such as Java Runtime Environment JRE and Java Development Kit JDK. A remote code execution vulnerability has been...

Update Protection against Adobe Shockwave Player DIR Files PAMI Chunk Code Execution Vulnerability (APSB10-12)

A remote code execution vulnerability has been identified in Adobe Shockwave Player. Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. An attacker can exploi...

Microsoft Windows Media Player Plug-in Buffer Overflow (CVE-2006-0005)

Microsoft Windows Media Player is an application that is used to play various media files, such as those compressed with AVI, MP3, MPG formats and so on. Windows Media Player runs on Microsoft Windows platforms, including Windows 2000, Windows XP and Windows Server 2003. Windows Media Player...

Oracle Database Server LT.ROLLBACKWORKSPACE SQL Injection (CVE-2009-0978)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

Sun Java Web Start JNLP vm args Stack Overflow (CVE-2008-3111)

The Sun Java Web Start is a component of the Java 2 Runtime Environment JRE. It allows for the network deployment of Java applications. This component enables stand-alone Java applications to be downloaded from a remote network location and invoked on a target machine. There exists a stack buffer...

Internet Explorer Multiple Protections (CVE-2005-2831; CVE-2006-0003)

...

Studio42 elFinder Directory Traversal (CVE-2022-26960)

A directory traversal vulnerability exists in elFinder. The vulnerability is due to insufficient validation of user submitted paths...

D-Link Central WiFiManager CWM-100 SQL Injection (CVE-2019-13373)

An SQL injection vulnerability exists in D-Link Central WiFiManager CWM-100. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Wordpress Like Button Plugin Authentication Bypass (CVE-2019-13344)

An authentication bypass vulnerability exists in the Wordpress plugin like button. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

GitHub Repository Hestiacp Command Injection (CVE-2022-2550)

A command injection vulnerability exists in GitHub Repository Hestiacp. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

QNAP NAS Photo Station Arbitrary File Write (CVE-2022-27593)

An arbitrary file write vulnerability exists in QNAP NAS Photo Station. Successful exploitation of this vulnerability could result in code execution on the affected system...