13538 matches found
DotNetNuke DNNArticle Module SQL Injection (CVE-2013-5117)
TODO...
Apache Struts ParametersInterceptor ClassLoader Security Bypass (CVE-2014-0094; CVE-2014-0112; CVE-2014-0113; CVE-2014-0114)
A security bypass vulnerability exists in Apache Struts. The vulnerability is due to inadequate validation of data processed by ParametersInterceptor allowing for manipulation of the ClassLoader. A remote attacker could exploit this vulnerability by providing a class parameter in a request...
Microsoft Windows File Handling Component Remote Code Execution (MS14-019; CVE-2014-0315)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is caused by Windows improperly restricting the path used for processing .bat and .cmd files. A remote attacker could trigger this flaw by placing a malicious executable in the working directory e.g. a...
Multiple SonicWALL Products Authentication Bypass - Ver2 (CVE-2013-1359)
An authentication bypass vulnerability has been reported in SonicWALL Products. The vulnerability is due to authentication bypass in the Web Administration interface. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
Internet Explorer JavaScript window() Memory Corruption (MS05-054) - Ver2 (CVE-2005-1790)
Microsoft Internet Explorer is a web browser capable of displaying HTML encoded pages, downloading files, etc. This application has a built-in JavaScript interpreter. It is also capable of using Document Object Model DOM objects, in particular by providing access to them through JavaScript. A...
Microsoft Office Text Converter Integer Underflow Code Execution - Ver2 (CVE-2009-0087)
A code execution vulnerability has been reported in Microsoft Office Word. The vulnerability is due to a memory corruption error when WordPad and Office Text Converters parse a specially crafted file that includes malformed data. A remote attacker could exploit this vulnerability by convincing a...
Microsoft Indexing Service ActiveX Memory Corruption (MS09-057) - Ver2 (CVE-2009-2507)
The Microsoft Windows Indexing Service is a base service that extracts content from files and constructs an indexed catalog to facilitate efficient and rapid searching. A remote code execution vulnerability has been reported in the Microsoft Indexing Service. The vulnerability is caused by an...
GnuTLS DANE dane.c Heap Buffer Overflow (CVE-2013-4466)
A heap buffer overflow vulnerability has been reported in GnuTLS...
PhpMyAdmin Sweky Remote Code Injection Exploit (CVE-2011-2506)
A Code Injection vulnerability has been reported in PhpMyAdmin...
HP LoadRunner WriteFileString Directory Traversal - ver 2 (CVE-2013-4798)
A directory traversal and file overwrite vulnerability exists in HP LoadRunner. The vulnerability is due to insufficient input sanitization, which permits directory traversal in theWriteFileString method. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to visi...
Ektron XSLT Transform Remote Code Execution (CVE-2012-5357)
A remote code execution vulnerability has been reported in Ektron CMS in XslCompiledTransform class...
Csound Hetro File Handling Stack Buffer Overflow (CVE-2012-0270)
A stack buffer overflow vulnerability has been reported in Csound. The vulnerability is due to the improper validation of specially crafted hetro files. A remote attacker can exploit this issue by enticing the victim to accept and open a specially crafted file. Successful exploitation would resul...
Citect SCADA ODBC Overflow Attempt (CVE-2008-2639)
...
Novell ZENworks Configuration Management PreBoot Opcode Buffer Overflow (CVE-2011-3176)
A stack buffer overflow vulnerability has been reported in Novell ZENworks Configuration Management...
Adobe Flex SDK Flex-Generated SWF File Cross-Site Scripting (APSB11-25; CVE-2011-2461)
A Cross-site scripting vulnerability has been reported in Adobe Flex SDK. The vulnerability is due to an error in the way Flex-generated SWF files accept arguments. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malformed SWF file...
Internet Explorer Windows Help and Support Center Remote Code Execution (CVE-2010-1885)
The Help and Support Center HSC is a feature in Windows that provides help on a variety of topics. HSC enables users to learn about Windows features, download and install software updates, get assistance from Microsoft and so forth. A remote attacker could exploit this issue by convincing a user ...
Microsoft SMB Server Null Pointer Denial of Service (MS10-012; CVE-2010-0022; CVE-2010-0023)
The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A denial of service vulnerability has been reported in the Microsoft Windows Server Message Block SMB implementation. The vulnerability is due to insufficient validation by the Microsoft SMB Protocol...
CA Products Discovery Service Buffer Overflow (CVE-2006-5143)
Computer Associates' CA BrightStor ARCserve Backup and Business Protection Suite families of software offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distribution operations including Backup/Restore, Data...
Adobe ColdFusion Server Cross-Site Request Forgery (APSB09-12; CVE-2009-1872)
Multiple Cross Site Scripting XSS and Cross-Site Request Forgery XSRF vulnerabilities have been discovered in Adobe ColdFusion server. Adobe ColdFusion is an application server for developing dynamically generated Web sites. A remote attacker could exploit this issue to execute a cross-site...
Microsoft Telnet Services Credential Reflection Code Execution (MS09-042; CVE-2009-1930)
Telnet is a bidirectional communications protocol that allows for command line remote administration over the TCP protocol. A remote code execution vulnerability has been reported in the way Microsoft Windows Telnet Service handles NTLM credentials. The vulnerability is due to an error in the...
Update Protection against HP OpenView Network Node Manager rping Stack Buffer Overflow
A buffer overflow vulnerability exists in HP Network Node Manager, a software application designed for management, maintenance and monitoring of networks and network devices. The flaw is due to a boundary error when processing crafted packets sent to the server. Remote attackers could exploit thi...
Microsoft Excel Object Record Memory Corruption (MS09-021; CVE-2009-0557)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to a memory corruption error in Microsoft Excel when loading specially crafted Excel files that include a malformed record object. A...
Microsoft PowerPoint Data Out of Bounds Stack Buffer Overflow (MS09-017; CVE-2009-1128; CVE-2009-1131)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A stack buffer overflow vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading data that is too large from...
Security Best Practice: Familiarize Yourself with the Max Ping Size Protection
Ping is a computer network administration utility used to test whether a particular host is reachable across an IP network and to measure the round-trip time for packets sent from the local host to a destination computer, including the local host's own interfaces.Ping operates by sending Internet...
Internet Explorer Multiple COM Objects Memory Corruption (MS07-027; CVE-2007-0942; CVE-2007-0944; CVE-2007-0945; CVE-2007-2221)
Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...
Microsoft Netware Client Service Memory Corruption (MS06-066; CVE-2006-4688)
Client Services for NetWare CSNW provides a Windows workstation with access to NetWare file, print, and directory services. This gives users the ability to store and retrieve documents from NetWare file servers, print to NetWare print queues, and log on to Novell Directory Services NDS. By...
TP-Link TL-WR840N Command Injection (CVE-2022-25064)
A command injection vulnerability exists in TP-Link TL-WR840N. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
KeySight N6854A and N6841A RF Sensor Directory Traversal (CVE-2022-1661)
A directory traversal vulnerability exists in KeySight N6854A and N6841A RF Sensor. This vulnerability is due to incomplete input sanitization in Java class UserFirmwareRequestHandler...
Owl Labs Meeting Owl Authentication Bypass (CVE-2022-31460)
An authentication bypass vulnerability exists in Owl Labs Meeting Owl. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary code...
Draytek Vigor Command Injection (CVE-2021-43118)
A command injection vulnerability exists in Draytek Vigor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Trend Micro Deep Security Agent Code Injection (CVE-2022-23120)
A code injection vulnerability exists in Trend Micro Deep Security Agent. Successful exploitation of this issue can lead to local privilege escalation...
TOTOLINK EX200 Command Injection (CVE-2021-43711)
A command injection vulnerability exists in TOTOLINK EX200. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Oracle Business Intelligence Enterprise Edition Information Disclosure (CVE-2020-14864)
An information disclosure vulnerability exists in Oracle Business Intelligence Enterprise Edition. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Zoho ManageEngine Network Configuration Manager SQL Injection (CVE-2021-41081)
An SQL injection vulnerability exists in Zoho ManageEngine Network Configuration Manager. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Millken Doyocms SQL Injection (CVE-2021-26739)
An SQL injection vulnerability exists in Millken Doyocms. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Sourcecodester E-Negosyo System SQL Injection (CVE-2021-41674)
An SQL injection vulnerability exists in Sourcecodester E-Negosyo System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
FlatCore CMS Remote Code Execution (CVE-2021-39608)
A remote code execution vulnerability exists in FlatCore CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
FUEL CMS SQL Injection (CVE-2021-38727)
A SQL injection vulnerability exists in FUEL CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Compro Technology IP Camera Denial Of Service (CVE-2021-40378)
A denial of service vulnerability exists in Compro Technology IP Camera. Successful exploitation of this vulnerability could result in denial of service conditions...
GoAhead Web Server Authentication Bypass (CVE-2020-15688)
An authentication bypass vulnerability exists in GoAhead Web Server. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
Inspur ClusterEngine Remote Code Execution (CVE-2020-21224)
A remote code execution vulnerability exists in Inspur ClusterEngine. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Oracle iPlanet Web Server Authentication Bypass (CVE-2020-9315)
An authentication bypass vulnerability exists in Oracle iPlanet Web Server. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...
ASUS RT-AX86U Buffer Overflow (CVE-2020-36109)
A buffer overflow vulnerability exists in Fortinet ASUS RT-AX86U. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...
CASAP Automated Enrollment System Authentication Bypass (CVE-2021-26201)
An authentication bypass vulnerability exists in CASAP Automated Enrollment System. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
PRTG Network Monitor Remote Code Execution (CVE-2018-9276)
A remote code execution vulnerability exists in PRTG Network Monitor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Micro Focus Secure Messaging Gateway Command Injection (CVE-2020-11852)
A command injection vulnerability exists in Micro Focus Secure Messaging Gateway. The vulnerability is due to improper validation of SaveData parameter within managedomainssavedata.json.php...
Pandora FMS Cross-Site Scripting (CVE-2020-11749)
A cross-site scripting vulnerability exists in Pandora FMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft Windows Server Information Disclosure (CVE-2016-3371)
An information disclosure vulnerability exists in Microsoft Windows Server. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
CactuShop invoice.asp Cross-Site Scripting (CVE-2010-1486)
A cross-site scripting vulnerability exists in Cactushop cactushop 3. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Cisco Unified IP Conference Station Privilege Escalation (CVE-2020-16137)
A Privilege Escalation vulnerability exists in Cisco Unified IP Conference Station. Successful exploitation of this vulnerability could allow a remote attacker to create new users with elevated privileges and by that damage the affected system...