D-Link Central WiFiManager CWM-100 SQL Injection (CVE-2019-13373)

An SQL injection vulnerability exists in D-Link Central WiFiManager CWM-100. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Wordpress Like Button Plugin Authentication Bypass (CVE-2019-13344)

An authentication bypass vulnerability exists in the Wordpress plugin like button. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

GitHub Repository Hestiacp Command Injection (CVE-2022-2550)

A command injection vulnerability exists in GitHub Repository Hestiacp. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

QNAP NAS Photo Station Arbitrary File Write (CVE-2022-27593)

An arbitrary file write vulnerability exists in QNAP NAS Photo Station. Successful exploitation of this vulnerability could result in code execution on the affected system...

Oracle Transportation Management Privilege Escalation (CVE-2021-35616)

A privilege escalation exists in Oracle Transportation Management. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Eyoucms Server Side Request Forgery (CVE-2021-39497)

A sever-side request forgery vulnerability exists in Eyoucms. The vulnerability is due to a lack of validation on the subdomain parameter in HTTP requests. Successful exploitation of this vulnerability could allow an unauthenticated attacker to make a request to any internal and external server...

PHPMyWind Remote Code Execution (CVE-2021-39503)

A remote code execution vulnerability exists in PHPMyWind. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

QNAP Photo Station Remote Code Execution (CVE-2019-7192; CVE-2019-7193; CVE-2019-7194; CVE-2019-7195)

A remote code execution vulnerability exists in QNAP NAS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft .NET Framework XPS File Parsing Remote Code Execution (CVE-2020-0605)

A remote code execution vulnerability exists in Microsoft .NET Framework XPS File Parsing. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Hoosk CMS Cross Site Scripting (CVE-2020-26043)

A cross-site scripting vulnerability exists in Hoosk CMS. Successful exploitation of this vulnerability could allow remote attackers to inject arbitrary web script into the affected system...

Pivotal RabbitMQ X-Reason Denial of Service (CVE-2019-11287)

A denial-of-service vulnerability exists in Pivotal RabbitMQ. The vulnerability is due to indefinite memory consumption when processing an X-Reason HTTP header containing a crafted Erlang format string...

Microsoft Internet Explorer Use After free (CVE-2019-1367)

A use-after-free vulnerability exists in Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Elevation of Privilege (CVE-2019-1184)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress Form Maker Plugin SQL Injection (CVE-2019-10866)

An SQL injection vulnerability exists in WordPress Form Maker Plugin. Successful exploitation of this vulnerability could lead to disclosure of database credentials...

Oracle Fusion Middleware Remote Code Execution (CVE-2019-2618)

A remote code execution vulnerability exists in Oracle WebLogic Server component of Oracle Fusion Middleware. Successful exploitation of this vulnerability could lead to remote code execution on the target server...

Advantech Webaccess Directory Traversal Remote Code Execution (CVE-2017-16720)

A directory traversal and remote code execution vulnerability exists in Advantech WebAccess software. The vulnerability is due to improper input validation. Successful exploitation could lead to remote code execution on the target...

Cisco Prime Infrastructure swimtemp TFTP Arbitrary File Upload (CVE-2018-15379)

An arbitrary file upload vulnerability exists in Cisco Prime Infrastructure. The vulnerability is due to the presence of a symbolic link permitting the upload of files into a location where they can be later executed. Successful exploitation could result in the execution of arbitrary code in the...

Netgear Multiple Products Command Injection (CVE-2016-1555)

A command Injection vulnerability exists in multiple Netgear routers. A remote attacker can exploit this issue by sending a specially crafted request to the victim. Successful exploitation would allow an attacker to execute arbitrary code on the target machine...

Nikto CSV Injection Remote Code Execution (CVE-2018-11652)

A CSV Injection Vulnerability exists in Nikto 2.1.6. A successful attacker could inject arbitrary OS command directly into a CSV report. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Pivotal Spring PATCH Request Remote Code Execution (CVE-2017-8046)

A remote code execution vulnerability exists in Pivotal Spring Data REST. The vulnerability is due to insufficient validation of user supplied input. A remote attacker can exploit this vulnerability to execute arbitrary code on the affected server...

HPE Intelligent Management Center dbman RestoreDBase Command Injection (CVE-2017-5817; CVE-2017-5819)

A command injection vulnerability exists in the dbman component of HPE Intelligent Management Center. The vulnerability exists due to missing validation of user-provided parameters when handling RestoreDBase commands for MSSQL and MySQL databases. A remote, unauthenticated attacker can exploit th...

Endian Firewall Proxy Password Change Command Execution (CVE-2015-5082)

A command injection vulnerability has been reported in Endian Firewall. The vulnerability is due to an input validation error in a CGI script. A remote, authenticated attacker can exploit this vulnerability by sending crafted HTTP requests to the target. Successful exploitation could lead to remo...

ManageEngine EventLog Analyzer agentHandler Information Disclosure (CVE-2014-6038)

An information disclosure vulnerability exists in ManageEngine EventLog Analyzer. The vulnerability is due to a failure to restrict access to confidential data and an input validation error in the agentHandler servlet. A remote unauthenticated attacker can exploit the vulnerability to disclose...

Linux System Files Information Disclosure (CVE-2018-10823; CVE-2018-3948)

Linux operating system contains system files with sensitive information. If not properly configured, remote attackers can view the information on such files...

Microsoft MPEG Layer-3 Audio Decoder Stack Overflow (MS10-026) - Ver2 (CVE-2010-0480)

MPEG Layer-3 audio codecs are the MPEG Layer-3 Audio Codec for Microsoft DirectShow l3codecx.ax and the Fraunhofer IIS MPEG Layer-3 ACM codecs L3codeca.acm and L3codecp.acm. These MPEG Layer-3 audio codecs are provided along with Windows Media files on affected versions of Microsoft Windows. A...

OpenX Ad Server Backdoor PHP Code Execution (CVE-2013-4211)

A Code Execution vulnerability has been reported in OpenX Ad Server. The vulnerability is due to the existence of a backdoor within the flowplayer-3.1.1.min.js library. A remote attacker could exploit this vulnerability by sending a malicious request to the server. Successful exploitation could...

PhpMyAdmin Remote Variable Manipulation (CVE-2011-2505)

A remote variable manipulation vulnerability has been reported in PhpMyAdmin...

PHP phpLDAPadmin Remote Code Execution (CVE-2011-4075)

A remote code execution vulnerability has been reported in phpLDAPadmin web server...

Microsoft DirectShow Remote Code Execution (MS13-056; CVE-2013-3174)

A remote code execution vulnerability has been reported in the Microsoft DirectShow. The vulnerability is due to faulty GIF image files parsing. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted GIF file. A successfull exploitation of this vulnerability...

Preemptive Protection against ProFTPD FTP Server TELNET_AIC Stack Buffer Overflow

A buffer overflow vulnerability was reported in ProFTPD FTP Server, a full featured File Transfer Protocol FTP server mainly used in Linux distributions. The vulnerability is due to insufficient validation of user input. Remote attackers could exploit this vulnerability by sending a crafted FTP...

Oracle BEA WebLogic Server Apache Connector Buffer Overflow (CVE-2008-4008)

Oracle BEA WebLogic Server is an enterprise-class multi-tier Java Application Server platform. WebLogic is typically used as the platform for large enterprise web applications. It supports various databases including Oracle, DB2, Microsoft SQL Server, MySQL and other JDBC-compliant databases. The...

Preemptive Protection against Adobe JRun 4.0 Directory Traversal File Read Vulnerability (APSB09-12)

A directory traversal vulnerability was reported in the Adobe Systems JRun. JRun is an application server based on Java 2 Platform, Enterprise Edition J2EE. It works with popular Web servers including Apache and IIS. This vulnerability allows an attacker to access normally-inaccessible files and...

Schneider Electric IGSS Buffer Overflow (CVE-2021-22802)

A buffer overflow exists in Schneider Electric IGSS. This vulnerability is due to insufficient input validation...

TP-Link TL-WR840N Command Injection (CVE-2022-25064)

A command injection vulnerability exists in TP-Link TL-WR840N. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Montala Limited ResourceSpace Cross-Site Scripting (CVE-2021-41951)

A reflected cross-site scripting vulnerability exists in ResourceSpace by Montala Limited. The vulnerability is due to improper input validation of user input passed to index.php page...

Zoho Multiple Products Authentication Bypass (CVE-2022-29081)

An authentication bypass vulnerability exists in multiple Zoho products. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

IBM Planning Analytics Remote Code Execution (CVE-2019-4716)

A remote code execution vulnerability exists in IBM Planning Analytics. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Sunhillo SureLine Command Injection (CVE-2021-36380)

A command injection vulnerability exists in Sunhillo SureLine. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

OpenPLC WebServer Remote Code Execution (CVE-2021-31630)

A remote code execution vulnerability exists in OpenPLC WebServer. Successful exploitation of this vulnerability could allow an authenticated attacker to execute arbitrary code on the affected system...

Pyres Termod4 Remote Code Execution (CVE-2020-23160)

A remote code execution vulnerability exists in Pyres Termod4. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

OpenRepeater Command Injection (CVE-2019-25024)

A command injection vulnerability exists in OpenRepeater. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Node.js Remote Code Execution (CVE-2017-5941)

A remote code execution vulnerability exists in Node.js. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

OsCommerce Phoenix CE Command Injection (CVE-2020-27976)

A command injection vulnerability exists in OsCommerce Phoenix CE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Dynamics 365 Commerce Remote Code Execution (CVE-2020-17152)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Technicolor TD5130v2 Oi_Fw_V20 Command Injection (CVE-2019-18396)

A command injection vulnerability exists in Technicolor TD5130v2 OiFwV20. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Internet Explorer Uninitialized Memory Corruption (CVE-2009-0075)

A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has been deleted. Successful exploitation of this vulnerability will crash the browser, allowing execution of arbitrary code on the vulnerable...

SuperWebMailer Remote Code Execution (CVE-2020-11546)

A remote code execution vulnerability exists in SuperWebMailer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Phoenix Contact TC Router Command Injection (CVE-2020-9436)

A command injection vulnerability exists in Phoenix Contact TC Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Advantech WebAccess Remote Code Execution (CVE-2019-10987)

A remote code execution vulnerability exists in Advantech WebAccess. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Foxit Reader Use After Free (CVE-2018-14304; CVE-2018-14300; CVE-2018-17682; CVE-2018-3924)

A use after free vulnerability exists in Foxit Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...