D-Link GO-RT-AC750 Command Injection (CVE-2022-37057)

A command injection vulnerability exists in D-Link GO-RT-AC750. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Open Automation Software Platform Authentication Bypass (CVE-2022-26833)

An authentication bypass vulnerability exists in Open Automation Software Platform. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

H2 Database Remote Code Execution (CVE-2022-23221)

A remote code execution vulnerability exists in H2 Database console. This vulnerability is due to improper input validation when handling a specific JDBC URL...

D-Link Routers Authentication Bypass (CVE-2020-26567)

An authentication bypass vulnerability exists in D-Link DSR-250N. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

VMWare Workspace One Access Authentication Bypass (CVE-2022-31656)

An authentication bypass vulnerability exists in VMWare Workspace One Access. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information and gain unauthorized access to the affected system...

Oracle MySQL Cluster Stack Buffer Overflow (CVE-2022-21280)

A buffer overflow vulnerability exists in Oracle MySQL Cluster. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

WordPress XCloner Backup Plugin Remote Code Execution (CVE-2020-35948)

A remote code execution vulnerability exists in WordPress XCloner Backup plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco HyperFlex HX Directory Traversal (CVE-2021-1499)

A directory traversal vulnerability exists in Cisco Hyperflex. The vulnerability is due to improper input sanitization...

Invigo Automatic Device Management Remote Code Execution (CVE-2020-10580)

A remote code execution vulnerability exists in Invigo Automatic Device Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

USVN Remote Code Execution (CVE-2020-17363)

A remote code execution vulnerability exists in USVN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Trend Micro InterScan Web Security Virtual Appliance Command Injection (CVE-2020-28580; CVE-2020-28581)

A command injection vulnerability exists in Trend Micro InterScan Web Security Virtual Appliance. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Amcrest Cameras Stack Buffer Overflow (CVE-2020-5735)

A buffer overflow vulnerability exists in Amcrest Cameras. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

Zoho ManageEngine Applications Manager Arbitrary File Upload (CVE-2020-14008)

An arbitrary file upload vulnerability exists in Zoho ManageEngine Applications Manager. The vulnerability is due to improper validation of user supplied data in UploadAction. Successful exploitation could result in uploading potentially dangerous file which may lead to arbitrary code execution...

Phoenix Contact TC Router Command Injection (CVE-2020-9436)

A command injection vulnerability exists in Phoenix Contact TC Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle E-Business Suite SQL Injection (CVE-2019-2633; CVE-2019-2638)

An SQL vulnerability exists in the Work In Process component of Oracle E-Business Suite. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements with the privileges of the APPS database user...

Advantech WebAccess Stack-based Buffer Overflow (CVE-2018-18999)

A stack-based buffer overflow vulnerability exists in Advantech WebAccess. The vulnerability is due to a lack of boundary checks while copying user-supplied data into a stack-based buffer within BwPAlarm.dll. A remote, unauthenticated attacker could exploit this vulnerability by sending a...

Microsoft SharePoint DestinationFolder Cross-site Scripting (CVE-2019-1262)

A cross-site scripting vulnerability exists in Microsoft SharePoint server. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary code on the affected system...

Lighttpd Web Server Denial Of Service (CVE-2019-11072)

A denial-of-service vulnerability exists in Lighttpd server. This vulnerability is due to improper handling of URL when url-path-2f-decode is enabled. A remote, unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the target server. Successful...

Flexense DiskBoss Enterprise Buffer Overflow (CVE-2018-5262)

A stack buffer overflow vulnerability exists in the web server of DiskBoss Enterprise. The vulnerability is due to the way DiskBoss Enterprise handles bounds checking. A remote, authenticated attack can lead to a stack buffer overflow...

Dahua Amcrest IP Camera Information Disclosure (CVE-2019-3948)

An information disclosure vulnerability exists in Amcrest IP camera. An unauthenticated, remote attacker can connect to this endpoint and listen to the audio the camera is capturing...

Sony Smart TV Authentication Bypass Information Disclosure (CVE-2019-11336)

An authentication bypass vulnerability exists in Sony Smart TV. Successful exploitation could result in the disclosure of sensitive user information...

NETGEAR WNR2000v5 Remote Code Execution (CVE-2016-10174)

A remote code execution vulnerability exists in NETGEAR WNR2000v5 routers. Successful exploitation could lead to arbitrary code execution on the vulnerable device...

Microsoft Office Information Disclosure - Ver 0 (CVE-2018-0950)

A vulnerability exists in RTF based emails which cause information disclosure through Outlook on Windows. The vulnerability is due to an error in the way Microsoft Office improperly discloses the contents of its memory. A remote attacker can exploit this issue by enticing a victim to open a...

Cisco Prime Infrastructure swimtemp TFTP Arbitrary File Upload (CVE-2018-15379)

An arbitrary file upload vulnerability exists in Cisco Prime Infrastructure. The vulnerability is due to the presence of a symbolic link permitting the upload of files into a location where they can be later executed. Successful exploitation could result in the execution of arbitrary code in the...

WordPress GDPR Compliance Plugin Privilege Escalation (CVE-2018-19207)

A privilege escalation vulnerability exists in WordPress GDPR Compliance Plugin. The vulnerability is due to a missing authorization at the "userscanregister" action. A remote authenticated attacker may exploit this vulnerability to gain administrator privileges...

Netgear Multiple Products Command Injection (CVE-2016-1555)

A command Injection vulnerability exists in multiple Netgear routers. A remote attacker can exploit this issue by sending a specially crafted request to the victim. Successful exploitation would allow an attacker to execute arbitrary code on the target machine...

MikroTik RouterOS Winbox Authentication Bypass (CVE-2018-14847)

An authentication bypass vulnerability exists in the Winbox component of Mikrotik RouterOS. A remote attacker could exploit this flaw by sending specially crafted packets to the affected server. Successful exploitation of this vulnerability would allow a remote attacker to hijack a user's session...

Microsoft Malware Protection Engine Remote Code Execution (CVE-2018-0986)

A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption .An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the Local Syst...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8601)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way Microsoft Edge handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system...

Microsoft Windows Graphics Component Remote Code Execution (MS17-013: CVE-2017-0108)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way the Windows Uniscribe handles objects in memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted website...

Joomla Object Injection Remote Command Execution (CVE-2015-8562)

A remote command execution vulnerability has been reported in Joomla platforms. The vulnerability is due to lack of validation over input objects that can lead to remote code execution. A remote attacker could exploit this vulnerability by sending a malicious request to the victim. Successful...

PowerDNS Nameserver Label Decompression Denial of Service (CVE-2015-1868)

A denial of service vulnerability exists in PowerDNS. The vulnerability is due to a design weakness in PowerDNS label decompression code causing excessive looping. A remote attacker can exploit these vulnerabilities by sending a request to a vulnerable server to consume CPU resource...

Internet Explorer DHTML Object Memory Corruption (MS05-020) - Ver2 (CVE-2005-0553)

The Microsoft Internet Explorer application is primarily used for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, etc. This application has a built in functionality to interpret JavaScript and VBScript code. It is also capable of using the Document...

Ericom AccessNow Server Stack Buffer Overflow (CVE-2014-3913)

A stack buffer overflow vulnerability exists in Ericom AccessNow Server. The vulnerability is due to improper handling of specially crafted HTTP requests for non-existent files. A remote attacker can exploit this vulnerability by sending a crafted HTTP request...

NETGEAR ReadyNAS np_handler Code Execution (CVE-2013-2751)

A security vulnerability was found in FrontView web interface in NETGEAR ReadyNAS RAIDiator. The vulnerability is due to the nphandler.pl script failing to sanitize input. A remote attacker can exploit this weakness by execute arbitrary Perl code via a crafted request...

Microsoft Publisher Function Pointer Overwrite (MS11-091) - Ver2 (CVE-2011-1508)

A memory corruption vulnerability has been reported in Microsoft Publisher. The vulnerability is due to the way Microsoft Publisher does not properly handle memory for function pointers while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by enticing a...

Microsoft Excel OBJ Record Stack Overflow (MS10-038) - Ver2 (CVE-2010-0822)

Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...

Microsoft DirectShow QuickTime Movie Parser Filter Code Execution - Ver2 (CVE-2009-1537)

Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. The QuickTime Movie Parser filter splits Apple QuickTime data into audio and video streams. The vulnerability is due to the way Microsof...

Poster Software PUBLISH-iT PUI File Processing Buffer Overflow (CVE-2014-0980)

A stack buffer overflow vulnerability exists in Poster Software PUBLISH-iT. The vulnerability is due to insufficient validation on the length of entry names in a "styl" record when processing PUI files. A remote unauthenticated attacker can exploit this vulnerability by enticing a user to open a...

Microsoft Excel Axisparent Record Index Handling Code Execution (MS08-043) - Ver2 (CVE-2008-3004)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the way Microsoft Excel handles index values. The vulnerability is due to an error in Microsoft Excel that fails to properly validate index values when loading Excel files into memor...

Belkin Linksys WRT54G / WRT54GS apply.cgi POST Request Buffer Overflow (CVE-2005-2799)

A stack buffer overflow vulnerability has been reported in Belkin Linksys WRT54G and WRT54GS wireless routers...

ARC PcVue ActiveX Control SCADA Remote Code Execution (CVE-2011-4042; CVE-2011-4043 ; CVE-2011-4044; CVE-2011-4045)

A buffer overflow vulnerability has been reported in SCADA ARC PcVue...

Oracle AutoVue AutoVueX ActiveX Control SetMarkupMode Stack Buffer Overflow (CVE-2012-0549)

A stack buffer overflow vulnerability has been reported in Oracle AutoVue...

Microsoft Data Access Components ADO Cachesize Heap Overflow (MS12-045; CVE-2012-1891)

A remote code execution vulnerability has been reported in Microsoft Data Access Components MDAC...

Trend Micro Control Manager CmdProcessor.exe AddTask Stack Buffer Overflow (CVE-2011-5001)

A stack buffer overflow vulnerability has been reported in Trend Micro Control Manager...

IBM Lotus Notes LZH Attachment Viewer Stack Buffer Overflow (CVE-2011-1213)

A code execution vulnerability has been reported in IBM Lotus Notes. The vulnerability is due to an error while parsing the headers of LZH files. A remote attacker may exploit this vulnerability by enticing a target user to open an email containing a specially crafted LZH file. Successful...

Oracle Java Applet2ClassLoader Remote Code Execution (CVE-2010-4452)

Java Technology is a programming platform which aims to provide a system for developing and deploying cross-platform applications. It is distributed in the form of various tools such as Java Runtime Environment JRE and Java Development Kit JDK. A remote code execution vulnerability has been...

Trend Micro Internet Security Pro ActiveX extSetOwner Remote Code Execution (CVE-2010-3189)

Trend Micro's Internet Security Pro 2010 is a PC security suite which includes a large suite of features such as antivirus and antispyware protection, a firewall, keylogger detection, and more. The suite also includes remote backup and restore capabilities in addition to smart phone protection. A...

Preemptive Protection against HP OpenView Network Node Manager webappmon.exe execvp_nc Buffer Overflow

A vulnerability has been reported in HP OpenView Network Node Manager NNM. The vulnerability is due to a boundary error when processing maliciously crafted HTTP requests. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted HTTP request to a target server,...

Microsoft Internet Explorer 7 HTML Object Memory Corruption (CVE-2007-0947)

Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, etc. Extensions to the basic HTML standa...