Advanced Package Tool Remote Code Execution (CVE-2019-3462)

A remote code execution vulnerability exists in Advanced Package Tool. The vulnerability is due to lack of sanitation on Location headers in HTTP responses. Successful exploitation could result in installation and execution of altered packages...

Pivotal Spring PATCH Request Remote Code Execution (CVE-2017-8046)

A remote code execution vulnerability exists in Pivotal Spring Data REST. The vulnerability is due to insufficient validation of user supplied input. A remote attacker can exploit this vulnerability to execute arbitrary code on the affected server...

HPE Intelligent Management Center dbman RestoreDBase Command Injection (CVE-2017-5817; CVE-2017-5819)

A command injection vulnerability exists in the dbman component of HPE Intelligent Management Center. The vulnerability exists due to missing validation of user-provided parameters when handling RestoreDBase commands for MSSQL and MySQL databases. A remote, unauthenticated attacker can exploit th...

Symantec Messaging Gateway remote code execution (CVE-2017-6326)

Command injection vulnerability exists in Symantec Messaging Gateway. The vulnerability is due to insufficient validation of property. An authenticated user can execute a terminal command under the context of the web server user which is root...

GoAutoDial 3.3 Authentication Bypass Command Injection (CVE-2015-2843; CVE-2015-2844; CVE-2015-2845)

An SQL injection vulnerability has been reported in GoAutoDial version 3.3. The vulnerability is due to improper validation of the user input. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server...

Microsoft Win32k Elevation of Privilege (MS16-062: CVE-2016-0173)

An elevation of privilege vulnerability exists in the Windows Kernel. The vulnerability is caused when Microsoft Windows improperly deals with DC Device context surface. A remote attacker can exploit this vulnerability by running a specially crafted application...

WebGate Multiple Products WESPSerialPortCtrl Buffer Overflow (CVE-2015-2097)

A buffer overflow vulnerability exists in WebGate Multiple Products. The vulnerability is due to insufficient input validation of the length of the parameters passed to the Connect method of WESPSerialPort.WESPSerialPortCtrl.1. A remote attacker could exploit this vulnerability by enticing a user...

Fortinet Single Sign On Hello Message Multiple Vulnerabilities (CVE-2015-2281)

Multiple Vulnerabilities exists in Fortinet Single Sign On FSSO. The vulnerabilities are due to a lack of adequate validation of user supplied input when processing HELLO messages. A remote, unauthenticated attacker could exploit these vulnerabilities by sending a specially crafted HELLO message ...

HP Network Node Manager I ovopi.dll Command 685 Memory Corruption (CVE-2014-2624)

A memory corruption vulnerability in HP Network Node Manager I NNMi ha been reported. The vulnerability is caused by using remotely supplied data as a pointer without sufficient validation in ovopi.dll. By sending a crafted request to the vulnerable product on port 696/UDP, a remote unauthenticat...

Web Servers Suspicious File Upload (CVE-2019-16113; CVE-2021-26918; CVE-2022-26645)

A remote attacker can upload a malicious file to a web server. Successful exploitation could result in the execution of arbitrary code in the security context of the web server...

Hastymail2 call_user_func_array() Command Injection (CVE-2011-4542)

A command injection vulnerability exists in Hastymail 2.1.1. The vulnerability is due to improper sanitization of special elements used in a request to the server. Remote attacker can exploit this vulnerability by sending malicious HTTP requests to the target server...

AlienVault OSSIM av-centerd SOAP Requests Multiple Command Execution - ver 2 (CVE-2014-3804)

Multiple command execution vulnerabilities exist in AlienVault OSSIM. The vulnerabilities are due to failure to safely sanitize user data while handling av-centerd SOAP service requests. A remote unauthenticated attacker can exploit these vulnerabilities by sending crafted requests to affected...

AlienVault OSSIM av-centerd Util.pm get_license Arbitrary Command Execution (CVE-2014-3805)

An arbitrary command execution vulnerability exists in AlienVault OSSIM. The vulnerability is due to a failure to safely sanitize user data while handling SOAP service requests via the getlicense function of Util.pm. A remote unauthenticated attacker can exploit this vulnerability by sending...

IcoFX Stack Buffer Overflow (CVE-2013-4988)

A stack buffer overflow has been reported in IcoFX. The vulnerability is due to an error while parsing specially crafted .ico files. A remote attacker can exploit this issue by enticing a user to open a malicious .ico file...

Microsoft Excel Incorrect BIFF2 Record Parsing Code Execution (MS11-072) - Ver2 (CVE-2011-1988)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to a heap memory corruption while parsing certain BIFF2 records in Excel files. A remote attacker could exploit this vulnerability by enticing a target user to open a malicious BIFF2 file using a...

Windows Media Player ActiveX Missing Codec Code Execution - Ver2 (CVE-2010-0268)

A code execution vulnerability has been reported in Microsoft Windows Xp, Microsoft Windows Media Player and Microsoft Windows 2000. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Excel Document Malformed BIFF Record Heap Overflow (MS09-067) - Ver2 (CVE-2009-3130)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

GLPI install.php Remote Command Execution (CVE-2013-5696)

A command execution vulnerability has been reported in GLPI...

Microsoft Windows InformationCardSigninHelper Class ActiveX Control Code Execution - ver 2 (CVE-2013-3918)

A remote code execution vulnerability exists in the InformationCardSigninHelper Class ActiveX control, icardie.dll. When the InformationCardSigninHelper Class ActiveX control is instantiated in Internet Explorer, the control may corrupt the system state in such a way that an attacker could run...

GE Intelligent Platforms Proficy SCADA Substitute.bcl Directory Traversal (CVE-2013-0653)

A directory traversal vulnerability has been reported in GE Intelligent Platforms Proficy...

PhpMyAdmin Remote Variable Manipulation (CVE-2011-2505)

A remote variable manipulation vulnerability has been reported in PhpMyAdmin...

McAfee Virtual Technician ActiveX Control Insecure Method Exposure (CVE-2012-5879)

An insecure method exposure vulnerability has been reported in McAfee Virtual Technician...

HP OpenView Storage Stack Buffer Overflow (CVE-2011-1865)

A remote code execution vulnerability has been reported in HP OpenView. The vulnerability is due to insufficient boundary checking while handling certain opcode requests. A remote attacker may exploit this vulnerability by sending a specially crafted opcode request to a target server. Successful...

Microsoft Windows NDISTAPI Code Execution (MS11-062; CVE-2011-1974)

This is a code execution vulnerability. The vulnerability is due to improper validation of user input by NDISTAPI. A remote attacker could trigger this flaw by convincing an unsuspecting victim to open a malicious file. Successful exploitation of this vulnerability may allow an attacker to gain...

Microsoft MPEG Layer-3 Audio Decoder Stack Overflow (MS10-026; CVE-2010-0480)

MPEG Layer-3 audio codecs are the MPEG Layer-3 Audio Codec for Microsoft DirectShow l3codecx.ax and the Fraunhofer IIS MPEG Layer-3 ACM codecs L3codeca.acm and L3codecp.acm. These MPEG Layer-3 audio codecs are provided along with Windows Media files on affected versions of Microsoft Windows. A...

Microsoft Windows WMF Handling Arbitrary Code Execution (CVE-2005-4560)

There exists a code execution vulnerability in Microsoft Windows. The vulnerability is created by unrestricted access to GDI functions through WMF files. An attacker can exploit this vulnerability to supply and execute arbitrary code through calling a specific GDI function via a crafted WMF file...

HP OpenView Network Node Manager rping Stack Buffer Overflow (CVE-2009-1420)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes hundreds of optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. A stack-based buffer overflo...

Oracle BEA WebLogic Server Apache Connector Buffer Overflow (CVE-2008-4008)

Oracle BEA WebLogic Server is an enterprise-class multi-tier Java Application Server platform. WebLogic is typically used as the platform for large enterprise web applications. It supports various databases including Oracle, DB2, Microsoft SQL Server, MySQL and other JDBC-compliant databases. The...

Oracle Secure Backup Administration Server Authentication Bypass (CVE-2009-1977)

Oracle Secure Backup is a backup solution allowing for single point of management of data present on network attached storage NAS devices and distributed hosts. An authentication bypass vulnerability has been reported in Oracle Secure Backup server. The vulnerability is due to a flaw in the logic...

Update Protection against IBM Access Support ActiveX GetXMLValue Method Buffer Overflow

IBM Access Support ActiveX Control contains a buffer overflow vulnerability. The IBM Access Support ActiveX control is used by the vendor to collect system information, such as make, model, serial number, OS version, etc. This control is available on the IBM / Lenovo web site, and may also come...

Microsoft Windows Workstation Service Buffer Overflow (MS06-070; CVE-2006-4691)

The Server Service SRVSVC is one of the network services supplied by Microsoft. It supports file, print, and named-pipe sharing over Windows-based networks, and allows named pipe communication between applications running on distributed systems. By supplying malformed parameters to some of the AP...

Internet Explorer Multiple Protections (CVE-2005-2831; CVE-2006-0003)

...

Microsoft Windows ANI File Parsing Buffer Overflow (MS05-002; CVE-2004-1049; CVE-2007-0038)

ANI is a Windows Animated cursor file format. Specially crafted ANI files may be used to create a DoS condition and in some cases, arbitrary code execution...

Jenkins Scriptler Plugin Cross-Site Scripting (CVE-2021-21667)

A stored cross-site scripting vulnerability exists in Jenkins Scriptler Plugin. This vulnerability is due to insufficient escaping of parameter names shown in job configuration forms...

D-Link DIR-816 Command Injection (CVE-2022-37130)

A command injection vulnerability exists in D-Link DIR-816. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

IonizeCMS Remote Code Execution (CVE-2022-26272)

A remote code execution vulnerability exists in IonizeCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Montala Limited ResourceSpace Cross-Site Scripting (CVE-2021-41951)

A reflected cross-site scripting vulnerability exists in ResourceSpace by Montala Limited. The vulnerability is due to improper input validation of user input passed to index.php page...

Palo Alto Networks PAN-OS Command Injection (CVE-2020-2038)

A command injection vulnerability exists in Palo Alto Networks PAN-OS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

D-Link DIR-818LW Command Injection (CVE-2018-19986)

A command injection vulnerability exists in D-Link DIR-818LW. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Magnolia CMS Cross-Site Scripting (CVE-2022-33098)

A cross-site scripting vulnerability exists in Magnolia CMS. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

IBM Planning Analytics Remote Code Execution (CVE-2019-4716)

A remote code execution vulnerability exists in IBM Planning Analytics. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

TP-Link Multiple Products Remote Code Execution (CVE-2020-35575)

A remote code execution vulnerability exists in Multiple TP-Link Products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PHP Information Disclosure Over HTTP (CVE-2021-21804)

PHP Information Disclosure Over HTTP...

Mimosa Devices Command Injection (CVE-2020-25206)

A command injection vulnerability exists in Mimosa. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

OpenRepeater Command Injection (CVE-2019-25024)

A command injection vulnerability exists in OpenRepeater. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Node.js Remote Code Execution (CVE-2017-5941)

A remote code execution vulnerability exists in Node.js. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Blue Coat ASG Command Injection (CVE-2016-9091)

A command execution vulnerability exists in Blue Coat Advanced Secure Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Fortinet FortiOS SSL VPN Buffer Overflow (CVE-2018-13381)

A buffer overflow vulnerability exists in Fortinet FortiOS. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

TOTOLINK Realtek SDK Routers Authentication Bypass (CVE-2019-19825)

An authentication bypass vulnerability exists in TOTOLINK Realtek SDK Routers. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

MobileIron Core And Connector Remote Code Execution (CVE-2020-15505)

A remote code execution vulnerability exists in MobileIron Core And Connector. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...