SQL Injection Scanning Attempt (CVE-2022-27412)

Remote attackers use SQL injection scanning in order to locate potential SQL injection vulnerabilities on a target server, which could be later used for attacks...

Endian Firewall Proxy Password Change Command Execution (CVE-2015-5082)

A command injection vulnerability has been reported in Endian Firewall. The vulnerability is due to an input validation error in a CGI script. A remote, authenticated attacker can exploit this vulnerability by sending crafted HTTP requests to the target. Successful exploitation could lead to remo...

Microsoft Internet Explorer VBScript Memory Corruption (MS14-080; CVE-2014-6363)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way that the VBScript engine handles objects in memory when rendered in Internet Explorer. A remote attacker can exploit this issue by enticing a user to open a specially crafte...

Web Servers Suspicious File Upload (CVE-2019-16113; CVE-2021-26918; CVE-2022-26645)

A remote attacker can upload a malicious file to a web server. Successful exploitation could result in the execution of arbitrary code in the security context of the web server...

Hastymail2 call_user_func_array() Command Injection (CVE-2011-4542)

A command injection vulnerability exists in Hastymail 2.1.1. The vulnerability is due to improper sanitization of special elements used in a request to the server. Remote attacker can exploit this vulnerability by sending malicious HTTP requests to the target server...

PHP phpLDAPadmin Remote Code Execution (CVE-2011-4075)

A remote code execution vulnerability has been reported in phpLDAPadmin web server...

HP LoadRunner lrFileIOService ActiveX Control Input Validation Error (CVE-2013-2370)

An input validation error has been reported in HP LoadRunner...

Preemptive Protection against ProFTPD FTP Server TELNET_AIC Stack Buffer Overflow

A buffer overflow vulnerability was reported in ProFTPD FTP Server, a full featured File Transfer Protocol FTP server mainly used in Linux distributions. The vulnerability is due to insufficient validation of user input. Remote attackers could exploit this vulnerability by sending a crafted FTP...

Preemptive Protection against Microsoft IIS Request Header Buffer Overflow Vulnerability (MS10-065)

A buffer overflow vulnerability has been reported in Microsoft Internet Information Services IIS with FastCGI enabled. IIS is a collection of Internet services packaged with several versions of the Windows operating system. FastCGI for IIS enables popular application frameworks that support the...

Oracle Java Web Start Launch Command-Line Injection (CVE-2010-0886; CVE-2010-0887; CVE-2010-1423)

The Oracle Java Web Start is a component of the Java 2 Runtime Environment JRE. It facilitates network deployment of applications developed with the Java programming language. This component enables stand-alone Java applications to be downloaded from a remote network location and run on a target...

Sun JDK Hard Coded Image in Java File (CVE-2007-2788)

Java Technology is a programming platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is widely used for web applications in numerous forms, one of which are Java Applets. The Java Development Kit JDK is a Sun...

IBM eGatherer ActiveX RunEgatherer Function Buffer Overflow (CVE-2006-4221)

IBM Corporation is a large and well-known vendor of mainframe hardware, software, enterprise applications and servers, as well as desktop and workstation machines. As the vendor provides a broad level of support for its desktop computers, it includes an application designed to assist the user in...

Update Protection against Multiple MySQL Query Commands Vulnerabilities

MySQL is an open-source relational database management system that is rapidly growing in popularity. MySQL is free for most applications and is heavily used by the open source community, running on both Windows and UNIX operating systems. SQL query commands form a logical unit and perform a...

Multiple Products Directory Server LDAP Buffer Overflows (CVE-2006-0468; CVE-2006-0580; CVE-2006-0647; CVE-2006-0717; CVE-2006-4510; CVE-2011-0917)

...

Update Protection against Microsoft Internet Explorer createTextRange () Vulnerability (MS06-013)

Microsoft Internet Explorer IE fails to properly handle the createTextRange DHTML method, potentially allowing a remote attacker to execute arbitrary code if the attacker has convinced a user to open a specially crafted Web page...

Schneider Electric IGSS Arbitrary File Deletion (CVE-2021-22823)

An arbitrary file deletion vulnerability exists in Schneider Electric IGSS. This vulnerability is due to insufficient input validation...

Studio42 elFinder Directory Traversal (CVE-2022-26960)

A directory traversal vulnerability exists in elFinder. The vulnerability is due to insufficient validation of user submitted paths...

Wordpress Like Button Plugin Authentication Bypass (CVE-2019-13344)

An authentication bypass vulnerability exists in the Wordpress plugin like button. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

D-Link DIR-818LW Command Injection (CVE-2018-19986)

A command injection vulnerability exists in D-Link DIR-818LW. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

PrestaShop Command Injection (CVE-2022-36408)

A command injection vulnerability exists in PrestaShop. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows Network File System Remote Code Execution (CVE-2022-26937)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

HP LinuxKI Command Injection (CVE-2020-7209)

A command injection vulnerability exists in HP LinuxKI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Kaseya VSA Remote Code Execution (CVE-2021-30116)

A remote code execution vulnerability exists in Kaseya VSA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

OpenPLC WebServer Remote Code Execution (CVE-2021-31630)

A remote code execution vulnerability exists in OpenPLC WebServer. Successful exploitation of this vulnerability could allow an authenticated attacker to execute arbitrary code on the affected system...

Mimosa Devices Command Injection (CVE-2020-25206)

A command injection vulnerability exists in Mimosa. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Invigo Automatic Device Management Remote Code Execution (CVE-2020-10580)

A remote code execution vulnerability exists in Invigo Automatic Device Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Pyres Termod4 Remote Code Execution (CVE-2020-23160)

A remote code execution vulnerability exists in Pyres Termod4. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SAP Solution Manager Remote Code Execution (CVE-2020-6207)

A remote code execution vulnerability exists in SAP Solution Manager. The vulnerability is due to a lack of authentication in the User Experience Monitoring componant. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successful...

Cisco Small Business Routers Denial Of Service (CVE-2021-1167)

A denial of service vulnerability exists in Cisco Small Business routers. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

TerraMaster TOS Command Injection (CVE-2020-15568)

A command injection vulnerability exists in TerraMaster TOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Amcrest Cameras Stack Buffer Overflow (CVE-2020-5735)

A buffer overflow vulnerability exists in Amcrest Cameras. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

Hoosk CMS SQL Injection (CVE-2020-26042)

An SQL injection vulnerability exists in Hoosk CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Gracemedia Media Player Local File Inclusion (CVE-2019-9618)

A vulnerability exists in gracemedia media player project gracemedia media player. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Microsoft SharePoint Server Cross Site Scripting (CVE-2019-1070)

A cross-site scripting vulnerability exists in Microsoft SharePoint Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Ayukov NFTPD Buffer Overflow Remote Code Execution (CVE-2017-15222)

A buffer overflow vulnerability exists in Ayukov NFTP FTP Client. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

HPE Intelligent Management Center Command Injection (CVE-2019-5373; CVE-2019-5374)

Multiple Command Injection vulnerabilities exist in HPE Intelligent Management Center. The vulnerabilities are due to insufficient handling of the beanName request parameter by the CustomReportTemplateSelectBean and operatorGroupTreeSelectContent classes. A remote, authenticated attacker can...

Advantech WebAccess Stack-based Buffer Overflow (CVE-2018-18999)

A stack-based buffer overflow vulnerability exists in Advantech WebAccess. The vulnerability is due to a lack of boundary checks while copying user-supplied data into a stack-based buffer within BwPAlarm.dll. A remote, unauthenticated attacker could exploit this vulnerability by sending a...

LAquis SCADA LGX Report Arbitrary File Write (CVE-2018-18988)

An arbitrary file write vulnerability exists in LAquis SCADA LGX report. Successful exploitation of this vulnerability could result in arbitrary file write and possible arbitrary code execution...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1335)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft SharePoint Remote Code Execution (CVE-2019-1295)

A remote code execution vulnerability exists in Microsoft Microsoft SharePoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Elevation of Privilege (CVE-2019-1184)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle Fusion Middleware Remote Code Execution (CVE-2019-2618)

A remote code execution vulnerability exists in Oracle WebLogic Server component of Oracle Fusion Middleware. Successful exploitation of this vulnerability could lead to remote code execution on the target server...

D-Link DI-524 Cross-Site Scripting (CVE-2019-11017)

A cross-site scripting vulnerability exists in D-Link DI-524. Successful exploitation of this vulnerability could allow remote attackers to inject arbitrary web script into the affected system...

Microsoft XmlDocument Elevation of Privilege (CVE-2019-0555)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Netgear DGN2200 dnslookup.cgi Command Injection (CVE-2017-6334)

A command injection vulnerability exists in NETGEAR DGN2200 Router. The vulnerability is due to insufficient input validation in the router's web administration. Successful exploitation of this vulnerability could allow a remote attacker with valid login details to execute arbitrary code...

Ruby on Rails Remote Code Execution (CVE-2016-2098)

A remote code execution vulnerability exists in Ruby on Rails. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CGI Namespace Conflict Man-In-The-Middle (httpoxy; CVE-2016-1000109; CVE-2016-1000110; CVE-2016-5385; CVE-2016-5386; CVE-2016-5387; CVE-2016-5388)

Namespace conflict related to HTTP proxy headers allows an attacker to configure the HTTPPROXY environment variable. A successful exploitation might allow an attacker to launch a man-in-the-middle attack and redirect traffic to an arbitrary host...

Microsoft Windows Media Center Remote Code Execution (MS16-059: CVE-2016-0185)

A flaw exists in Windows Media Center when parsing MCL files. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted Media Center file. Successful exploitation could allow attackers to execute code on the target system...

Microsoft Internet Explorer Memory Corruption (MS15-065: CVE-2015-2384)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error where Internet Explorer treats CTreeNode object as a CGeneratedTreeNode object. A remote attacker can exploit this issue by enticing a user to open a specially crafted...

Web Clients HTTP URL JavaScript Function Cross-Site Scripting (CVE-2015-1159; CVE-2015-6099; CVE-2015-6972; CVE-2017-0068)

A cross-site scripting vulnerability has been reported in multiple web clients. The vulnerability is due to improper input validation. A remote attacker could exploit this vulnerability to execute arbitrary scripting or HTML code in the user's browser session...