Preemptive Protection against Apache Tomcat JK Web Server Connector Long URL Stack Overflow Vulnerability

A stack overflow vulnerability was reported in Apache Tomcat JK Web Server Connector. Apache Tomcat is an implementation of the Java Servlet and JavaServer Pages technologies. A remote attacker may exploit this issue to execute arbitrary code on an affected system...

Update Protection against Microsoft Internet Explorer DirectAnimation Path (daxctle.ocx) Vulnerabilities (MS06-067)

Microsoft Internet Explorer IE contains heap overflow vulnerabilities. The vulnerabilities exist in Microsoft DirectAnimation Path ActiveX Control DirectAnimation.PathControl that is included in the COM object daxctle.ocx. DirectAnimation is a component of the DirectX family of APIs that provide...

Update Protection against Microsoft Exchange Vulnerability (MS06-019)

A vulnerability exists in Microsoft Exchange Server that could allow an attacker to take complete control of the affected system. To exploit the vulnerability, an attacker would have to construct a specially crafted message that could potentially allow remote code execution when an Exchange Serve...

WordPress Booking Calendar Plugin SQL Injection (CVE-2018-20556)

A command execution vulnerability exists in WordPress Plugin Booking Calendar . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

WordPress SVG Icons Plugin Arbitrary File Upload (CVE-2022-0863)

An arbitrary file upload vulnerability exists in WordPress SVG Icons plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

D-Link GO-RT-AC750 Command Injection (CVE-2022-37057)

A command injection vulnerability exists in D-Link GO-RT-AC750. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Cisco Unity Express Insecure Deserialization (CVE-2018-15381)

An insecure deserialization vulnerability exists in Cisco Unity Express. Successful exploitation of this vulnerability would allow remote attackers to send a specially crafted serialized object to the vulnerable server...

Razer Sila Gaming Router Command Injection (CVE-2022-29013)

A command injection vulnerability exists in Razer Sila gaming router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Zoho ManageEngine ApplicationManager Command Injection (CVE-2018-7890)

A command injection vulnerability exists in Zoho ManageEngine ApplicationManager. The vulnerability is due to improper validation of the user supplied parameters. A remote attacker can exploit this vulnerability by sending crafted parameters to the target system...

Oracle MySQL Cluster Stack Buffer Overflow (CVE-2022-21280)

A buffer overflow vulnerability exists in Oracle MySQL Cluster. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Emerson Dixell Arbitrary File Write (CVE-2021-45420)

An arbitrary file write vulnerability exists in Emerson Dixell. Successful exploitation of this vulnerability could result in denial of service and potentially code execution on the affected system...

Apache Druid Information Disclosure (CVE-2021-36749)

An information disclosure vulnerability exists in Apache Druid. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Sophos XG Firewall SQL Injection (CVE-2020-12271)

An SQL injection vulnerability exists in Sophos XG Firewall. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Eyoucms Server Side Request Forgery (CVE-2021-39497)

A sever-side request forgery vulnerability exists in Eyoucms. The vulnerability is due to a lack of validation on the subdomain parameter in HTTP requests. Successful exploitation of this vulnerability could allow an unauthenticated attacker to make a request to any internal and external server...

Mimosa PTP Devices Stored Cross Site Scripting (CVE-2020-25205)

A cross-site scripting vulnerability exists in Mimosa PTP Devices. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Pyres Termod4 Remote Code Execution (CVE-2020-23160)

A remote code execution vulnerability exists in Pyres Termod4. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco Small Business Routers Denial Of Service (CVE-2021-1167)

A denial of service vulnerability exists in Cisco Small Business routers. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Web Servers Memory Corruption Attempt (CVE-2020-12000; CVE-2020-13934; CVE-2020-3239; CVE-2020-9490)

A memory corruption vulnerability can be exploited by malicious actors. Successful exploitation could cause damage to target systems...

Nagios XI mibs.php Command Injection (CVE-2020-5791)

A command injection vulnerability exists in Nagios XI. This vulnerability is due to insufficient validation of the input parameters in the mibs.php...

WordPress NextGEN Gallery Plugin Cross-Site Scripting (CVE-2010-1186)

A script injection vulnerability exists in Alex rabe nextgen gallery 0.33. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Microsoft .NET Framework XPS File Parsing Remote Code Execution (CVE-2020-0605)

A remote code execution vulnerability exists in Microsoft .NET Framework XPS File Parsing. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Foxit Reader and PhantomPDF Integer Overflow (CVE-2020-8844)

An integer overflow vulnerability exists in Foxit Reader and PhantomPDF. This vulnerability is due to improper parsing of image files within ConvertToPDF. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Office Remote Code Execution (CVE-2017-0261)

A remote code execution vulnerability exists in Encapsulated PostScript EPS of Microsoft Office. The vulnerability is due to the way that Microsoft Office does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing ...

Quest KACE System Management Appliance Unauthorized Access (CVE-2018-11138)

A command execution vulnerability exists in Quest kace system management appliance 8.0.318. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

DrayTek Vigor Stack Buffer Overflow (CVE-2020-10824; CVE-2020-10825)

A stack buffer overflow vulnerability exists in DrayTek Vigor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Symphony CMS SQL Injection (CVE-2013-2559)

An SQL injection vulnerability exists in the Symphony CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Adobe Font Manager Library Remote Code Execution Vulnerability (CVE-2020-1020)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Advantech WebAccess Remote Code Execution (CVE-2019-10987)

A remote code execution vulnerability exists in Advantech WebAccess. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Advantech WebAccess Stack-based Buffer Overflow (CVE-2018-18999)

A stack-based buffer overflow vulnerability exists in Advantech WebAccess. The vulnerability is due to a lack of boundary checks while copying user-supplied data into a stack-based buffer within BwPAlarm.dll. A remote, unauthenticated attacker could exploit this vulnerability by sending a...

Geutebruck IP Camera GCam Efd2250 Remote Code Execution (CVE-2017-5173; CVE-2017-5174)

A remote code execution vulnerability exists in Geutebruck IP Camera GCam Efd2250 Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Rockwell Automation ControlLogix 5370 Web Portal Denial of Service (CVE-2019-10952)

A denial of service vulnerability exists in Rockwell Automation CompactLogix 5370 PLCs. A remote, unauthenticated attacker could send specific requests to the web server to cause denial of service conditions...

PhpMyAdmin tbl_replace.php Local File Inclusion (CVE-2018-19968)

A local file inclusion vulnerability exists in phpMyAdmin. The vulnerability is due to improper sanitization of a column in the column info table. A remote, authenticated attacker could exploit this vulnerability by sending a request with crafted SQL statements to the target server. Successful...

BusyBox Project BusyBox udhcp Option Out of Bounds Read (CVE-2018-20679)

An out-of-bounds read vulnerability has been reported in the udhcp module of BusyBox. This vulnerability is due to insufficient validation of the length of certain options in a DHCP packets. A remote attacker could exploit this vulnerability by sending maliciously crafted messages to a DHCP clien...

Advantech Webaccess Directory Traversal Remote Code Execution (CVE-2017-16720)

A directory traversal and remote code execution vulnerability exists in Advantech WebAccess software. The vulnerability is due to improper input validation. Successful exploitation could lead to remote code execution on the target...

Rockwell Automation RNADiagReceiver Denial Of Service (CVE-2012-0222)

A denial of service vulnerability exists in Rockwell Automation RNADiagReceiver. A remote attacker could exploit this vulnerability by sending a specially crafted packet to the target system...

Microsoft XmlDocument Elevation of Privilege (CVE-2019-0555)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Browser Scripting Engine Memory Corruption (CVE-2018-8372)

A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Nikto CSV Injection Remote Code Execution (CVE-2018-11652)

A CSV Injection Vulnerability exists in Nikto 2.1.6. A successful attacker could inject arbitrary OS command directly into a CSV report. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Core com_admin Component SQL Injection (CVE-2018-6376)

A SQL injection vulnerability exists in Joomla Core comadmin component. The vulnerability is due to a lack of type casting on a variable used in a SQL statement. A remote attacker can exploit this vulnerability to escalate their privilege...

Kaseya Virtual System Administrator Multiple Vulnerabilities (CVE-2015-6922)

Multiple vulnerabilities exists in Kaseya Virtual System Administrator. These vulnerabilities includes privilege escalation to "Master Admin" and multiple remote code execution vulnerabilities. Successful exploitation of these vulnerabilities could lead to remote execution of arbitrary code under...

Schneider Electric ProClima F1BookView Memory Corruption (CVE-2015-7918; CVE-2015-8561)

A memory corruption vulnerability has been reported in Schneider Electric ProClima. The vulnerability is due to a flaw in some methods of the F1BookView ActiveX control. A remote, unauthenticated attacker could exploit this vulnerability by enticing a victim user to browse to a maliciously crafte...

IBM Tivoli Storage Manager FastBack Server Format String (CVE-2015-1953; CVE-2015-1986)

A format string vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient sanitization on parameters of Opcode 1301 requests.A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to port 11460/TCP.Successf...

ManageEngine OpManager SubmitQuery IntegrationUser SQL Code Execution (CVE-2015-7765; CVE-2015-7766)

An SQL code execution vulnerability exists in ManageEngine OpManager. By sending crafted requests to an affected server, a remote attacker can exploit this vulnerability to execute arbitrary SQL commands with Administrator privileges which can further lead to arbitrary code execution in the...

HP OpenView Network Node Manager Accept-Language Buffer Overflow - Ver2 (CVE-2009-4179)

A stack buffer overflow exists in HP OpenView Network Node Manager NNM CGI program ovalarm.exe. The vulnerability is due to a boundary error when processing the Accept-Language HTTP header and the OvAcceptLang cookie value in a crafted HTTP request. A remote unauthenticated attacker can exploit...

Technicolor DT5130 Router Command Injection (CVE-2014-9144)

A command injection vulnerability has been reported in Technicolor DT5130 Router. Successful exploitation would allow an attacker to execute commands in the security context of the logged on user...

ManageEngine NetFlow Analyzer And IT360 DisplayChartPDF Directory Traversal (CVE-2014-5446)

A directory traversal vulnerability exists in ManageEngine Netflow Analyzer and IT360. The vulnerability is due to lack of authentication and insufficient input validation on the filename parameter sent to the DisplayChartPDF servlet in HTTP requests. A remote unauthenticated attacker can downloa...

HP Data Protector Opcode 305 Directory Traversal (CVE-2014-5160)

A directory traversal vulnerability exists in HP Data Protector. The vulnerability is due to a lack of input sanitization of a file name provided with Opcode 305. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the vulnerable service. Successful...

Microsoft SQL 2000 Slammer Worm Denial of Service (CVE-2002-0649)

Slammer is a memory resident worm targeted to attack Microsoft SQL 2000. By propagating rapidly, the worm can cause a denial of service condition on affected targets...

Microsoft IIS nsiilog.dll ISAPI Overflow Buffer Overflow - Ver2 (CVE-2003-0349)

A buffer overflow vulnerability has been reported in Microsoft IIS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Nullsoft Winamp RIFF INFO Record Heap Buffer Overflow - Ver2 (CVE-2011-3834)

A buffer overflow vulnerability has been reported in Nullsoft Winamp. The vulnerability is due to a heap buffer overflow while handling a malformed AVI file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...