13538 matches found
Horde Framework Unserialize PHP Code Execution (CVE-2014-1691)
An arbitrary PHP code execution vulnerability has been reported in Horde . An attacker can exploit this vulnerability to execute arbitrary code with the permissions of the web server...
Microsoft Windows Kernel Input Validation Remote Code Execution - Ver2 (CVE-2009-0081)
A code execution vulnerability has been reported in The Windows kernel. The vulnerability is due to an error in the Windows kernel that fails to properly validate input passed from user mode through the kernel component of GDI. Successful exploitation of this vulnerability could allow a remote...
Microsoft Internet Explorer SVG AnimateMotion Memory Corruption - Ver2 (CVE-2008-0077)
A memory corruption vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Horde Groupware Webmail Edition Ingo Filter Cross-Site Request Forgery (CVE-2013-6275)
A Cross-Site Request Forgery CSRF vulnerability has been reported in Horde Groupware Webmail Edition. The vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by convincing the user to follow a malicious link or visit an attacker...
GE Intelligent Platforms Proficy SCADA Substitute.bcl Directory Traversal (CVE-2013-0653)
A directory traversal vulnerability has been reported in GE Intelligent Platforms Proficy...
HP LoadRunner lrFileIOService ActiveX Control Input Validation Error (CVE-2013-2370)
An input validation error has been reported in HP LoadRunner...
Microsoft DirectShow Remote Code Execution (MS13-056; CVE-2013-3174)
A remote code execution vulnerability has been reported in the Microsoft DirectShow. The vulnerability is due to faulty GIF image files parsing. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted GIF file. A successfull exploitation of this vulnerability...
MoinMoin twikidraw Action Directory Traversal (CVE-2012-6081)
A directory traversal vulnerability has been reported in MoinMoin server application. The vulnerability is caused due to improper sanitization of query strings from the path. A remote attacker can exploit this vulnerability by sending crafted requests to the affected server. Successful exploitati...
MiniUPnP MiniUPnPd ProcessSSDPRequest Denial of Service (CVE-2013-0229)
A denial of service vulnerability has been reported in MiniUPnP MiniUPnPd. The vulnerability is due to a boundary error in ProcessSSDPRequest function. A remote attacker can exploit this vulnerability by sending specially crafted packet to the target. Successful exploitation could cause the servi...
FreePBX Recording Interface File Upload Code Execution (CVE-2010-3490)
FreePBX is an open source software implementation of a telephone Private Branch eXchange PBX. It allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. A code execution vulnerability exists i...
Preemptive Protection against Microsoft IIS Request Header Buffer Overflow Vulnerability (MS10-065)
A buffer overflow vulnerability has been reported in Microsoft Internet Information Services IIS with FastCGI enabled. IIS is a collection of Internet services packaged with several versions of the Windows operating system. FastCGI for IIS enables popular application frameworks that support the...
Oracle Secure Backup Administration Server uname Var Authentication Bypass (CVE-2010-0904)
Oracle Secure Backup is a backup solution allowing for single point of management of data present on network attached storage NAS devices and distributed hosts. An authentication bypass vulnerability has been reported in Oracle Secure Backup server. The vulnerability is due to a flaw in the logic...
Update Protection against Adobe Shockwave Player DIR Files PAMI Chunk Code Execution Vulnerability (APSB10-12)
A remote code execution vulnerability has been identified in Adobe Shockwave Player. Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. An attacker can exploi...
Sun JDK Hard Coded Image in Java File (CVE-2007-2788)
Java Technology is a programming platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is widely used for web applications in numerous forms, one of which are Java Applets. The Java Development Kit JDK is a Sun...
Preemptive Protection against Microsoft Distributed Transaction Coordinator Vulnerability (MS06-018)
Microsoft Distributed Transaction Coordinator MSDTC is a system service that coordinates transactions for Microsoft Windows platforms. A vulnerability was detected in the MDTC, allowing a remote attacker with the ability to send a crafted message to cause an affected system to stop responding...
Multiple Products Directory Server LDAP Buffer Overflows (CVE-2006-0468; CVE-2006-0580; CVE-2006-0647; CVE-2006-0717; CVE-2006-4510; CVE-2011-0917)
...
Tenda AX3 Router Command Injection (CVE-2022-24148; CVE-2022-24150)
A command injection vulnerability exists in Tenda AX3 router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Studio42 elFinder Directory Traversal (CVE-2022-26960)
A directory traversal vulnerability exists in elFinder. The vulnerability is due to insufficient validation of user submitted paths...
D-Link Routers Authentication Bypass (CVE-2020-26567)
An authentication bypass vulnerability exists in D-Link DSR-250N. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
D-Link DIR-818LW Command Injection (CVE-2018-19986)
A command injection vulnerability exists in D-Link DIR-818LW. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
PrestaShop Command Injection (CVE-2022-36408)
A command injection vulnerability exists in PrestaShop. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
PbootCMS Remote Code Execution (CVE-2022-32417)
A remote code execution vulnerability exists in PbootCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Network File System Remote Code Execution (CVE-2022-26937)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Grafana Cross-site Scripting (CVE-2021-41174)
A cross-site scripting vulnerability exists in Grafana. The vulnerability is due to insufficient validation of user input in the URI path...
Draytek VigorConnect Directory Traversal (CVE-2021-20124)
A directory traversal vulnerability exists in Draytek VigorConnect. Successful exploitation of this vulnerability could allow an unauthenticated attacker to access arbitrary files on the affected system...
Sunhillo SureLine Command Injection (CVE-2021-36380)
A command injection vulnerability exists in Sunhillo SureLine. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft Exchange Information Disclosure (CVE-2021-33766)
An information disclosure vulnerability exists in Microsoft Exchange. Successful exploitation could result in the disclosure of sensitive information...
SAP Solution Manager Remote Code Execution (CVE-2020-6207)
A remote code execution vulnerability exists in SAP Solution Manager. The vulnerability is due to a lack of authentication in the User Experience Monitoring componant. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successful...
Web Servers Memory Corruption Attempt (CVE-2020-12000; CVE-2020-13934; CVE-2020-3239; CVE-2020-9490)
A memory corruption vulnerability can be exploited by malicious actors. Successful exploitation could cause damage to target systems...
Amcrest Cameras Stack Buffer Overflow (CVE-2020-5735)
A buffer overflow vulnerability exists in Amcrest Cameras. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...
jQuery Cross Site Scripting (CVE-2020-11022; CVE-2020-11023)
A cross-site scripting vulnerability exists in jQuery. Successful exploitation of this vulnerability could result in execution of arbitrary scripts on the affected system...
Apache Spark Remote Code Execution (CVE-2020-9480)
A remote code execution vulnerability exists in Apache Spark. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
ERS Data System Remote Code Execution (CVE-2017-14702)
A remote code execution vulnerability exists in ERS Data System. Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on the affected system...
Centreon RRDdatabase_status_path Command Injection (CVE-2020-13252; CVE-2020-22345)
A command injection vulnerability exists in the Centreon Web Application. The vulnerability is due to improper validation of the RRDdatabasestatuspath parameter in an HTTP request...
Pivotal RabbitMQ X-Reason Denial of Service (CVE-2019-11287)
A denial-of-service vulnerability exists in Pivotal RabbitMQ. The vulnerability is due to indefinite memory consumption when processing an X-Reason HTTP header containing a crafted Erlang format string...
Microsoft Internet Explorer Use After free (CVE-2019-1367)
A use-after-free vulnerability exists in Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Oracle Fusion Middleware Remote Code Execution (CVE-2019-2618)
A remote code execution vulnerability exists in Oracle WebLogic Server component of Oracle Fusion Middleware. Successful exploitation of this vulnerability could lead to remote code execution on the target server...
Cisco Adaptive Security Appliance Remote Code Execution (CVE-2018-0101)
A Remote Code Execution vulnerability exists in Cisco Adaptive Security Appliance software. The vulnerability is due to a failure on part of Internet Key Exchange code to handle UDP requests. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted UDP requests to a...
Microsoft Graphics Component Information Disclosure (CVE-2017-0283)
An information disclosure vulnerability exists in Microsoft Graphics Component. The vulnerability is due to improper handling of objects in memory, allowing an attacker to retrieve information that could lead to an Address Space Layout Randomization ASLR bypass. An attacker could convince a user ...
Wireless IP Camera (P2P) WIFICAM Cameras Information Disclosure (CVE-2017-8225)
An information disclosure vulnerability exists in multiple Wireless IP Camera P2P WIFICAM cameras. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...
Microsoft Windows Graphics Component Remote Code Execution (MS16-097: CVE-2016-3301; CVE-2016-3303)
A memory corruption vulnerability exists in Microsoft Windows GDI . The vulnerability is due to integer overflow vulnerability founded in the GDI shared library. An attacker can exploits this vulnerability in various ways through an .emf file...
Ruby on Rails Remote Code Execution (CVE-2016-2098)
A remote code execution vulnerability exists in Ruby on Rails. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Web Clients HTTP URL JavaScript Function Cross-Site Scripting (CVE-2015-1159; CVE-2015-6099; CVE-2015-6972; CVE-2017-0068)
A cross-site scripting vulnerability has been reported in multiple web clients. The vulnerability is due to improper input validation. A remote attacker could exploit this vulnerability to execute arbitrary scripting or HTML code in the user's browser session...
ESF pfSense webgui deletefile Directory Traversal (CVE-2015-2295)
A directory traversal vulnerability has been reported in Electric Sheep Fencing pfSense firewall. This vulnerability is due to insufficient validation of the deletefile HTTP request parameter in "/systemfirmwarerestorefullbackup.php". By convincing an authenticated user to click on a crafted link...
Apache Qpid Session.gap Denial of Service - ver 2 (CVE-2015-0203)
A denial of service vulnerability exists in Apache Qpid. The vulnerability is due to an assertion failure prior to session establishment when processing the session.gap control segment. A remote, authenticated attacker could exploit this vulnerability by sending an out of sequence session.gap...
Ultra Mini HTTPD Resource Name Request Handling Stack Buffer Overflow - Ver2 (CVE-2013-5019)
A buffer overflow vulnerability has been reported in Vector Ultra Mini HTTPD. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
WordPress Holding Pattern Theme Arbitrary File Upload (CVE-2015-1172)
An unauthorized file upload vulnerability has been reported in WordPress Holding Pattern Theme. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to...
HP Network Node Manager I ovopi.dll Command 685 Memory Corruption (CVE-2014-2624)
A memory corruption vulnerability in HP Network Node Manager I NNMi ha been reported. The vulnerability is caused by using remotely supplied data as a pointer without sufficient validation in ovopi.dll. By sending a crafted request to the vulnerable product on port 696/UDP, a remote unauthenticat...
Hastymail2 call_user_func_array() Command Injection (CVE-2011-4542)
A command injection vulnerability exists in Hastymail 2.1.1. The vulnerability is due to improper sanitization of special elements used in a request to the server. Remote attacker can exploit this vulnerability by sending malicious HTTP requests to the target server...