13538 matches found
PhpMyAdmin Remote Variable Manipulation (CVE-2011-2505)
A remote variable manipulation vulnerability has been reported in PhpMyAdmin...
PHP phpLDAPadmin Remote Code Execution (CVE-2011-4075)
A remote code execution vulnerability has been reported in phpLDAPadmin web server...
HP Data Protector CRS Opcode 305 Stack Buffer Overflow (CVE-2013-2330)
A stack buffer overflow has been reported in HP Data Protector. The vulnerability is in the Cell Request service, which listens on a randomly chosen port. The application fails to sanitize input with opcode 305, which can result in a stack-based buffer overflow. A remote, unauthenticated attacker...
Microsoft Excel OBJ Record Stack Overflow (MS10-038; CVE-2010-0822)
Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...
Oracle Java Web Start Launch Command-Line Injection (CVE-2010-0886; CVE-2010-0887; CVE-2010-1423)
The Oracle Java Web Start is a component of the Java 2 Runtime Environment JRE. It facilitates network deployment of applications developed with the Java programming language. This component enables stand-alone Java applications to be downloaded from a remote network location and run on a target...
IBM eGatherer ActiveX RunEgatherer Function Buffer Overflow (CVE-2006-4221)
IBM Corporation is a large and well-known vendor of mainframe hardware, software, enterprise applications and servers, as well as desktop and workstation machines. As the vendor provides a broad level of support for its desktop computers, it includes an application designed to assist the user in...
Preemptive Protection against HP OpenView Network Node Manager Buffer Overflows
HP OpenView Network Node Manager NNM is a software application designed for management, maintenance and monitoring of networks and network devices. Several vulnerabilities were reported in HP OpenView Network Node Manager CGI applications, enabling a remote user to execute arbitrary code on the...
Update Protection against Microsoft Visio Remote Code Execution Vulnerabilities (MS07-030)
Multiple remote code execution vulnerabilities have been reported in Microsoft Visio. Microsoft Visio is diagram creation software for Microsoft Windows. A remote attacker can exploit these vulnerabilities via a specially crafted Visio file. Successful exploitation may allow execution of arbitrar...
Citrix Presentation Server Client wfica.ocx Buffer Overflow (CVE-2006-6334)
Citrix Presentation Server, a remote access application publishing product, is prone to a buffer overflow vulnerability. By convincing a user to visit a malicious Web page or open a malicious HTML, a remote attacker could cause the victim's system to execute arbitrary commands and take complete...
Internet Explorer Multiple Protections (CVE-2005-2831; CVE-2006-0003)
...
Update Protection against Microsoft Internet Explorer createTextRange () Vulnerability (MS06-013)
Microsoft Internet Explorer IE fails to properly handle the createTextRange DHTML method, potentially allowing a remote attacker to execute arbitrary code if the attacker has convinced a user to open a specially crafted Web page...
D-Link DIR-816 Command Injection (CVE-2022-37130)
A command injection vulnerability exists in D-Link DIR-816. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
IonizeCMS Remote Code Execution (CVE-2022-26272)
A remote code execution vulnerability exists in IonizeCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Wordpress Like Button Plugin Authentication Bypass (CVE-2019-13344)
An authentication bypass vulnerability exists in the Wordpress plugin like button. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
Palo Alto Networks PAN-OS Command Injection (CVE-2020-2038)
A command injection vulnerability exists in Palo Alto Networks PAN-OS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
HP LinuxKI Command Injection (CVE-2020-7209)
A command injection vulnerability exists in HP LinuxKI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Kaseya VSA Remote Code Execution (CVE-2021-30116)
A remote code execution vulnerability exists in Kaseya VSA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Yealink Device Management Command Injection (CVE-2021-27561)
A command injection vulnerability exists in Yealink Device Management. The vulnerability is due to improper handling of a crafted HTTP request...
Sophos XG Firewall SQL Injection (CVE-2020-12271)
An SQL injection vulnerability exists in Sophos XG Firewall. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
TP-Link Multiple Products Remote Code Execution (CVE-2020-35575)
A remote code execution vulnerability exists in Multiple TP-Link Products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Mimosa Devices Command Injection (CVE-2020-25206)
A command injection vulnerability exists in Mimosa. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Invigo Automatic Device Management Remote Code Execution (CVE-2020-10580)
A remote code execution vulnerability exists in Invigo Automatic Device Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cisco Small Business Routers Denial Of Service (CVE-2021-1167)
A denial of service vulnerability exists in Cisco Small Business routers. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
TerraMaster TOS Command Injection (CVE-2020-15568)
A command injection vulnerability exists in TerraMaster TOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft .NET Framework XPS File Parsing Remote Code Execution (CVE-2020-0605)
A remote code execution vulnerability exists in Microsoft .NET Framework XPS File Parsing. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Hoosk CMS SQL Injection (CVE-2020-26042)
An SQL injection vulnerability exists in Hoosk CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Microsoft SharePoint Server Cross Site Scripting (CVE-2019-1070)
A cross-site scripting vulnerability exists in Microsoft SharePoint Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Ayukov NFTPD Buffer Overflow Remote Code Execution (CVE-2017-15222)
A buffer overflow vulnerability exists in Ayukov NFTP FTP Client. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
HPE Intelligent Management Center Command Injection (CVE-2019-5373; CVE-2019-5374)
Multiple Command Injection vulnerabilities exist in HPE Intelligent Management Center. The vulnerabilities are due to insufficient handling of the beanName request parameter by the CustomReportTemplateSelectBean and operatorGroupTreeSelectContent classes. A remote, authenticated attacker can...
Advantech WebAccess Stack-based Buffer Overflow (CVE-2018-18999)
A stack-based buffer overflow vulnerability exists in Advantech WebAccess. The vulnerability is due to a lack of boundary checks while copying user-supplied data into a stack-based buffer within BwPAlarm.dll. A remote, unauthenticated attacker could exploit this vulnerability by sending a...
LAquis SCADA LGX Report Arbitrary File Write (CVE-2018-18988)
An arbitrary file write vulnerability exists in LAquis SCADA LGX report. Successful exploitation of this vulnerability could result in arbitrary file write and possible arbitrary code execution...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1335)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Elevation of Privilege (CVE-2019-1184)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Jenkins Swarm Plugin XML External Entity Injection (CVE-2019-10309)
An information disclosure vulnerability exists in Jenkins Swarm Plugin. Successful exploitation of this vulnerability could lead to the disclosure of arbitrary files from the client...
D-Link DI-524 Cross-Site Scripting (CVE-2019-11017)
A cross-site scripting vulnerability exists in D-Link DI-524. Successful exploitation of this vulnerability could allow remote attackers to inject arbitrary web script into the affected system...
Microsoft Office Information Disclosure - Ver 0 (CVE-2018-0950)
A vulnerability exists in RTF based emails which cause information disclosure through Outlook on Windows. The vulnerability is due to an error in the way Microsoft Office improperly discloses the contents of its memory. A remote attacker can exploit this issue by enticing a victim to open a...
JBoss Enterprise Application Platform Invoker Servlets Remote Code Execution (CVE-2012-0874)
A remote code execution vulnerability is exist in JBoss Enterprise Application Platform. A remote attacker can exploit this vulnerability to execute arbitrary code in the targeted system...
Microsoft XmlDocument Elevation of Privilege (CVE-2019-0555)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Theme API Remote Code Execution (CVE-2018-8413)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Malware Protection Engine Remote Code Execution (CVE-2018-0986)
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption .An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the Local Syst...
Netgear DGN2200 dnslookup.cgi Command Injection (CVE-2017-6334)
A command injection vulnerability exists in NETGEAR DGN2200 Router. The vulnerability is due to insufficient input validation in the router's web administration. Successful exploitation of this vulnerability could allow a remote attacker with valid login details to execute arbitrary code...
CGI Namespace Conflict Man-In-The-Middle (httpoxy; CVE-2016-1000109; CVE-2016-1000110; CVE-2016-5385; CVE-2016-5386; CVE-2016-5387; CVE-2016-5388)
Namespace conflict related to HTTP proxy headers allows an attacker to configure the HTTPPROXY environment variable. A successful exploitation might allow an attacker to launch a man-in-the-middle attack and redirect traffic to an arbitrary host...
Microsoft Windows Media Center Remote Code Execution (MS16-059: CVE-2016-0185)
A flaw exists in Windows Media Center when parsing MCL files. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted Media Center file. Successful exploitation could allow attackers to execute code on the target system...
Microsoft Internet Explorer Memory Corruption (MS15-065: CVE-2015-2384)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error where Internet Explorer treats CTreeNode object as a CGeneratedTreeNode object. A remote attacker can exploit this issue by enticing a user to open a specially crafted...
Microsoft Windows Group Policy Remote Code Execution (MS15-011; CVE-2015-0008)
A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Group Policy receives and applies policy data when a domain-joined system connects to a domain controller. An attacker can exploit this vulnerability by convincing a victim with a...
ManageEngine Multiple Products FileCollector doPost Directory Traversal (CVE-2014-6034)
A directory traversal vulnerability exists in ManageEngine OpManager, Social IT Plus and IT360. The vulnerability is due to lack of authentication and insufficient input validation on parameters sent to "/servlet/com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector" in HTTP requests...
HP Service Virtualization AutoPass License Server Directory Traversal (CVE-2013-6221)
A code execution vulnerability exists in HP Service Virtualization running the AutoPass License Server. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to the vulnerable service. Successful exploitation of this vulnerability could result in creation ...
AlienVault OSSIM av-centerd SOAP Requests Multiple Command Execution - ver 2 (CVE-2014-3804)
Multiple command execution vulnerabilities exist in AlienVault OSSIM. The vulnerabilities are due to failure to safely sanitize user data while handling av-centerd SOAP service requests. A remote unauthenticated attacker can exploit these vulnerabilities by sending crafted requests to affected...
FreePBX config php Code Execution (CVE-2014-1903)
FreePBX is an open source software implementation of a telephone Private Branch eXchange PBX. A code execution vulnerability exists in FreePBX software. Remote attacker can exploit this vulnerability to inject arbitrary PHP functions and commands...
Microsoft Publisher Function Pointer Overwrite (MS11-091) - Ver2 (CVE-2011-1508)
A memory corruption vulnerability has been reported in Microsoft Publisher. The vulnerability is due to the way Microsoft Publisher does not properly handle memory for function pointers while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by enticing a...