13538 matches found
Multiple Vendors AgentX receive_agentx Stack Buffer Overflow (CVE-2010-1318)
AgentX++ is a C++ object API written by Frank Fock. It is an implementation of the AgentX protocol which is used in multiple applications; including RealNetworks Helix Server and Helix Mobile Server. A stack buffer overflow vulnerability has been reported in multiple products that use the AgentX+...
Microsoft DirectShow MJPEG Crafted Segments Code Execution (MS10-033; CVE-2010-1880)
Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. Audio Video Interleave AVI is a file type that is used with applications that capture, edit, and play back audio-video sequences. A remo...
Internet Explorer iepeers.dll Remote Code Execution (CVE-2010-0806)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer handles specific attributes. To trigger this issue, an attacker may create a maliciou...
Digium Asterisk IAX2 Call Number Denial Of Service (CVE-2009-2346)
A resource exhaustion based denial of service vulnerability exists in Digium's Asterisk. The vulnerability is due to a design weakness in the way Asterisk associates messages with the calls they belong to. An unauthenticated, remote attacker can exploit this vulnerability by sending a large numbe...
Microsoft Data Analyzer ActiveX Control Remote Code Execution (MS10-008; CVE-2010-0252)
Microsoft Data Analyzer is a data analysis software for Microsoft Office XP. Microsoft Data Analyzer allows analyzing and visualizing data and data trends, and is integrated with SQL Server Analysis Services. Reports and graphs generated could be saved as Excel or PowerPoint files. A remote code...
Unisys Business Information Server Stack Buffer Overflow (CVE-2009-1628)
The Unisys Business Information Server is a business information management solution that provides data access, analysis and reporting in an open, enterprise-wide computing environment. Business Information Server transforms corporate data into information that is made available throughout the...
IBM Access Support ActiveX GetXMLValue Method Buffer Overflow (CVE-2009-0215)
IBM Access Support is part of a suite of several tools used by IBM to provide support to its customers having IBM/Lenovo Laptops and Desktop systems. This product is used by the vendor to remotely examine the product and collect information in order to address any problems or distribute updates. ...
Microsoft IIS ASP Scripts Source Code Disclosure (CVE-2005-2678)
The Internet Information Server IIS is a Web server packaged with several versions of the Windows operating system. The server is capable of serving static, as well as dynamic content. The server is equipped with the Active Server Pages ASP technology which is utilized for dynamic content...
Microsoft Windows LoadImage API Function Integer Overflow (CVE-2004-1049)
In terms of Microsoft Windows technology, a resource is binary data that can be added to the executable file of a Windows-based application. Graphical images such as icons, cursors and bitmaps are example of standard resources. Windows-based applications support loading and rendering of graphical...
Microsoft Windows Kernel NULL Pointer Dereferencing (MS09-058; CVE-2009-2516)
The Windows kernel is the core of the operating system. It provides system level services, allocates processor time to processes, and manages error handling. An elevation of privilege vulnerability has been discovered in the Windows kernel. The vulnerability is due to an error in the Windows kern...
Preemptive Protection against Microsoft Exchange IMAP Literals Remote Code Execution Vulnerability (MS07-026)
A denial of service vulnerability exists in Microsoft Exchange Server. Microsoft Exchange Server is a mail server product that supports various email access and exchange protocols, including the Internet Message Access Protocol IMAP. IMAP is a standard protocol for accessing e-mail from a local...
Update Protection against Workstation Service Buffer Overflow Vulnerability (MS06-070)
A denial of service vulnerability was detected in Microsoft Windows Workstation service. The workstation service manages the routing of system requests. The workstation service library file wkssvc.dll is used by windows when working with shared network drives and printers. A remote attacker could...
Internet Explorer VML Rect Fill Method Buffer Overflow (MS06-055; CVE-2006-4868)
Microsoft Internet Explorer is the most widely used Internet browser. Microsoft Internet Explorer fails to handle Vector Markup Language VML tags. VML is a set of XML tags for drawing vector graphics. A remote attacker may trigger this vulnerability to execute arbitrary code on the target system...
Microsoft Server Service MailSlot Heap Overflow (MS06-035; CVE-2006-1314)
...
SSL - General Settings (CVE-2003-0719; CVE-2004-0826)
SSL Protections use a SSL protocol parser which uses a default port of TCP/443, but this port can be reconfigured...
Seacms Remote Code Execution (CVE-2022-27336)
A remote code execution vulnerability exists in Seacms. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Delta Industrial Automation DIAEnergie SQL Injection (CVE-2022-1378)
An SQL injection exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to an input validation error...
OpenSSL c_rehash Script Command Injection (CVE-2022-1292)
A command injection vulnerability has been reported in the OpenSSL. The vulnerability is due to improper validation of input characters. Successful exploitation could result in command execution within the context of the target user...
Horde Groupware Command Injection (CVE-2017-7413)
A command injection vulnerability exists in Horde Groupware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft Windows HTTP.sys Elevation of Privilege (CVE-2022-41057)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Jenkins GitLab Plugin Cross-Site Scripting (CVE-2022-34777)
A stored cross-site scripting vulnerability exists in Jenkins GitLab Plugin. This vulnerability is due to insufficient validation of user provided fields in the build cause of webhook triggered builds...
Apache Airflow Command Injection (CVE-2022-24288)
A command injection vulnerability exists in Apache Airflow. This vulnerability is due to improper input validation for parameters for directed acyclic graphs DAGs...
Adobe ColdFusion Authentication Bypass (APSB22-44: CVE-2022-38420)
An authentication bypass vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage the user's system...
SalesAgility SuiteCRM Remote Code Execution (CVE-2022-23940)
A remote code execution vulnerability exists in SalesAgility SuiteCRM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Nokia BTS TRS Web Console Authentication Bypass (CVE-2021-31932)
An authentication bypass vulnerability exists in Nokia BTS TRS Web Console. Successful exploitation of this vulnerability would allow remote attacker to obtain sensitive information and gain unauthorized access into the affected system...
SonicWall SMA100 Multiple Vulnerabilities (CVE-2019-7484; CVE-2019-7485)
Multiple vulnerabilities exist in SonicWall SMA100. Successful exploitation of these vulnerabilities would allow a remote attacker to execute arbitrary commands on the affected system...
D-Link DIR-610 Remote Code Execution (CVE-2020-9377)
A remote code execution vulnerability exists in D-Link DIR-610. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
RaspAP Command Injection (CVE-2021-33357)
A command injection vulnerability exists in RaspAP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
WordPress LearnPress Plugin Cross-Site Scripting (CVE-2021-39348)
A stored cross-site scripting vulnerability exists in LearnPress Plugin for WordPress. The vulnerability is due to insufficient sanitization of user-supplied data in Profile Settings page...
WordPress Duplicate Post Plugin SQL Injection (CVE-2021-43408)
An SQL injection vulnerability exists in WordPress Duplicate Post Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
TOTOLINK Technology Router Authentication Bypass (CVE-2021-35327)
An authentication bypass vulnerability exists in TOTOLINK Technology Router. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
Eyoucms Directory Traversal (CVE-2021-39500)
A directory traversal vulnerability exists in Eyoucms. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Oracle E-Business Suite Sales Offline Denial of Service (CVE-2021-2189)
An infinite loop vulnerability exists in the Sales Offline component of Oracle E-Business Suite. The vulnerability is due to improper handling of requests by the authentication component of Sales Offline...
Microsoft Scripting Engine Memory Corruption (CVE-2021-34480)
A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Jenkins Claim Plugin Cross-Site Scripting (CVE-2021-21619)
A stored cross-site scripting vulnerability exists in Jenkins Claim plugin. This vulnerability is due to insufficient validation of the displayName shown in claims...
EPrints Arbitrary File Read (CVE-2021-3342)
An Arbitrary File Read vulnerability exists in EPrints. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary web script into the effected system...
Trend Micro IMSVA External Entity Injection (CVE-2020-27017)
An XXE vulnerability exists in Trend Micro InterScan Messaging Virtual Appliance. The vulnerability is due to insufficient validation of XML data in the Java class PolicyWSAction...
Atlassian Jira Server Information Disclosure (CVE-2020-14181)
An information disclosure vulnerability exists in Atlassian Jira. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Microsoft Win32k Elevation of Privilege (CVE-2020-16907)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Fortinet FortiOS Cross-Site Scripting (CVE-2017-14186)
A cross-site scripting vulnerability exists in Fortinet fortios x under 5.0. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
WordPress Real-Time Find and Replace Plugin Cross-Site Scripting (CVE-2020-13641)
A cross-site scripting vulnerability exists in WordPress Real-Time Find and Replace Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Securenvoy SecurMail Arbitrary File Upload (CVE-2020-13376)
An arbitrary file upload vulnerability exists in Securenvoy SecurMail. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Pandora FMS Persistent Cross-Site Scripting (CVE-2020-13853)
A persistent cross site scripting vulnerability exists in Pandora FMS. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
Asus ASUSWRT Command Injection (CVE-2018-14714)
A command injection vulnerability exists in Asus ASUSWRT. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Atlassian Confluence Server Information Disclosure (CVE-2019-3394)
A local file inclusion vulnerability exists in Atlassian Confluence Server. This vulnerability is due to improper validation of file path. A remote, authenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitation could lead to...
Wordpress Simple Membership Plugin Cross-Site Request Forgery (CVE-2019-14328)
A cross-site request forgery vulnerability exists in Wordpress Simple Membership Plugin. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user with administrator privileges to visit a page which sends a request to Simple Membership Plugin...
Zoho ManageEngine Applications Manager SQL Injection (CVE-2019-11448)
A SQL injection vulnerability exists in Zoho ManageEngine Applications Manager. The vulnerability is due to improper validation of user-supplied input in PopupSLA.jsp. Successful exploitation could lead to arbitrary SQL code execution...
Jenkins build-metrics Plugin Cross-Site Scripting (CVE-2019-10475)
A cross-site scripting vulnerability exists in Jenkins build-metrics Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the effected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1092)
...
HAProxy Compressed Name Denial of Service (CVE-2018-20103)
A denial-of-service vulnerability has been reported in HAProxy. The vulnerability is due to incorrect handling of compressed pointers. Successful exploitation of this vulnerability could lead to a denial of service condition...