13538 matches found
D-Link DNS-320 Command Injection (CVE-2020-25506)
A command injection vulnerability exists in D-Link DNS-320. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Sourcecodetester Daily Tracker System SQL Injection (CVE-2020-24193)
An SQL injection vulnerability exists in Sourcecodetester Daily Tracker System. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
DrayTek Vigor Stack Buffer Overflow (CVE-2020-10823)
A stack buffer overflow vulnerability exists in DrayTek Vigor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Win32k Elevation of Privilege (CVE-2020-1207)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Asus ASUSWRT Command Injection (CVE-2018-14714)
A command injection vulnerability exists in Asus ASUSWRT. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Atlassian Confluence Server Information Disclosure (CVE-2019-3394)
A local file inclusion vulnerability exists in Atlassian Confluence Server. This vulnerability is due to improper validation of file path. A remote, authenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitation could lead to...
Microsoft Windows Common Log File System Driver Information Disclosure (CVE-2020-0658; CVE-2020-0657)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Wordpress Simple Membership Plugin Cross-Site Request Forgery (CVE-2019-14328)
A cross-site request forgery vulnerability exists in Wordpress Simple Membership Plugin. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user with administrator privileges to visit a page which sends a request to Simple Membership Plugin...
Advantech WebAccess Denial of Service (CVE-2019-6554)
A denial-of-service vulnerability exists in Advantech WebAccess. The vulnerability is due to improper access control while invoking a command line from user-supplied data. Successful exploitation could result in WebAccess being uninstalled and denial-of-service condition...
Microsoft Win32k Elevation of Privilege (CVE-2019-1393)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Rockwell Automation CompactLogix 5370 Buffer Overflow Denial of Service (CVE-2019-10954)
A denial of service vulnerability exists in Rockwell Automation CompactLogix 5370 PLCs. A remote, unauthenticated attacker could send crafted SMTP configuration packets to cause denial of service conditions...
AirLink101 SkyIPCam Command Injection (CVE-2015-2280)
A command execution vulnerability exists in Airlink101 Skyipcam1620W Wireless N Mpeg4Gpp Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft NTFS Elevation of Privilege (CVE-2018-8411)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Desktop Bridge Elevation of Privilege (CVE-2018-0880)
A vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Microsoft Windows EOT Font Engine Information Disclosure (CVE-2018-0755)
An information disclosure vulnerability has been reported in the EOT component of Microsoft Windows operating systems. The vulnerability is due to improper handling of objects in the Windows EOT Font Engine. A remote attacker could exploit this vulnerability by enticing a user to open specially...
Joomla Core HTML Attributes Cross-Site Scripting Filter Privilege Escalation (CVE-2017-7986)
A privilege escalation vulnerability exists in Joomla Core. Unauthorized remote attackers may leverage this vulnerability to gain administrative access to the vulnerable server...
Adobe Flash Player Memory Corruption (APSB17-10: CVE-2017-3060)
A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
Microsoft Office DLL Loading (CVE-2017-0197)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is caused due to an incorrect link to a dynamic-link library file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file which will lead to arbitrary code execution...
WordPress Symposium Plugin SQL Injection (CVE-2015-6522)
An SQL injection vulnerability exists in the WordPress Symposium Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...
WebNMS Framework Server Arbitrary File Upload (CVE-2016-6600)
An Arbitrary File Upload vulnerability exists in WebNMS Framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft DirectShow Heap Corruption Remote Code Execution (MS16-007: CVE-2016-0015)
A remote code execution vulnerability has been reported in Microsoft DirectShow. The vulnerability is due to the way Microsoft DirectShow improperly validates input. A remote attacker could exploit this vulnerability by enticing a target user to open a specially crafted file...
Microsoft Scripting Engine Memory Corruption (MS15-124: CVE-2015-6136)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
Microsoft Internet Explorer Scripting Engine Information Disclosure (MS15-124: CVE-2015-6135)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way VBScript engine manipulates BSTR objects. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...
Sun Solaris DHCP Daemon Code Execution (CVE-2007-5365)
Multiple vulnerabilities have been reported in the Sun Solaris DHCP daemon that could be exploited by remote attackers to execute arbitrary code over the vulnerable system. The vulnerabilities are due to an insecure design in the DHCP in.dhcpd server while handling DHCP requests. Remote attackers...
Microsoft Windows Media Center Remote Code Execution (MS15-100: CVE-2015-2509)
A flaw has been reported in Windows Media Center when parsing MCL files. This flaw could allow malicious users to execute arbitrary code on a target Windows system by enticing the victim to open a specially crafted Media Center file...
Tembria Server Monitor Denial of Service (CVE-2010-1316)
A buffer overflow vulnerability has been reported in Tembria Server Monitor. The vulnerability is due to unknown function of the file index.asp. The manipulation with an unknown input leads to a buffer overflow vulnerability...
WebGate Multiple Products WESPPlaybackCtrl Two Stack Buffer Overflow (CVE-2015-2094)
Two stack buffer overflow vulnerabilities exist in WebGate Multiple Products. The vulnerabilities are due to insufficient input validation on the length of the parameter passed to the PlaySiteAllChannel and StopSiteAllChannel methods of the WESPPLAYBACK.WESPPlaybackCtrl control. A remote attacker...
CCProxy Telnet Ping Hostname Buffer Overflow - Ver2 (CVE-2004-2416)
A buffer overflow vulnerability has been reported in Youngzsoft Ccproxy. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Weak SSL RC4 Cipher Suites (CVE-2013-2566; CVE-2015-2808)
RC4 is a widely supported stream cipher, often preferred by TLS servers and other servers using encrypted sessions. It has long been known to have a variety of cryptographic weaknesses. Recent cryptanalysis results, one of which is the "Bar Mitzvah attack", exploit biases in the RC4 keystream to...
ESF pfSense status_captiveportal Cross Site Scripting (CVE-2015-2294)
A cross-site scripting vulnerability has been reported in Electric Sheep Fencing pfSense firewall. The vulnerability is due to insufficient validation of the zone variable in the statuscaptiveportal page. A remote attacker can exploit the XSS vulnerability to execute arbitrary scripts in the user...
SOAPUI Remote Code Execution - Ver2 (CVE-2014-1202)
A code execution vulnerability has been reported in Eviware SoapUI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Oracle GlassFish Server Administration Console Authentication Bypass - Ver2 (CVE-2011-1511)
An authentication bypass vulnerability has been reported in the administration console of Oracle GlassFish. The vulnerability is due to an error while processing HTTP TRACE requests. A remote attacker can exploit this vulnerability by sending a crafted TRACE request to the target. Successful...
WordPress Easing Slider Plugin Cross-Site Request Forgery (CVE-2015-1436)
A cross-site request forgery CSRF vulnerability has been reported in WordPress Easing Slider Plugin. An attacker could exploit this vulnerability by convincing the user to follow a malicious link or visit an attacker-controlled website...
Procyon Core Server HMI Memory Corruption SCADA Remote Code Execution - Ver2 (CVE-2011-3322)
A remote stack overflow vulnerability has been reported in Procyon Core Server HMI service. The vulnerability is due to a boundary check error. A remote attacker may exploit this issue by sending specially crafted messages to the target server. Successful exploitation could allow an attacker to...
Microsoft IIS idq.dll IDAIDQ ISAPI Overflow Buffer Overflow - Ver2 (CVE-2001-0500)
A buffer overflow vulnerability has been reported in Microsoft IIS, Microsoft Inbex Server and Microsoft Indexing Service. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Dlink IP Camera Luminance Information Disclosure - Ver2 (CVE-2013-1601)
An information disclosure vulnerability has been reported in Multiple D-Link IP Cameras. An attacker could exploit this vulnerability via direct requests for the md/lums.cgi. Successful exploitation of this vulnerability could allow a remote attacker to gain access to ASCII output of the live vid...
InterNetNews Control Message Handling Buffer Overflow - Ver2 (CVE-2004-0045)
The InterNetNews package INN is a complete Usenet system. It includes innd, an NNTP server, and nnrpd, a newsreading server. A vulnerability exists in the NNTP server component of InterNetNews INN, which can be exploited to compromise a vulnerable system. The vulnerability is caused due to a...
Symantec System Center Alert Management System Arbitrary Command Execution - Ver2 (CVE-2009-1429)
A command execution vulnerability has been reported in Symantec Antivirus Central Quarantine Server, Symantec Antivirus, Symantec Endpoint Protection, Symantec System Center and Symantec Client Security. Successful exploitation of this vulnerability could allow a remote attacker to execute...
NAS4Free exec.php Arbitrary Remote Code Execution (CVE-2013-3631)
A code execution vulnerability has been reported in NAS4Free. The vulnerability is due to "Advanced | Execute Command" feature that allows remote authenticated users to execute arbitrary PHP code via a request to exec.php. A remote unauthenticated attacker can exploit this vulnerability by execut...
Sophos Web Appliance change_password Admin Password Privilege Escalation (CVE-2014-2849)
A privilege escalation vulnerability has been reported in Sophos Web Appliance. The vulnerability is due to errors in a changepassword request when handling user input. A remote authenticated attacker could exploit this vulnerability by placing specially crafted data in a changepassword request...
Apache Struts ParametersInterceptor ClassLoader Security Bypass (CVE-2014-0094; CVE-2014-0112; CVE-2014-0113; CVE-2014-0114)
A security bypass vulnerability exists in Apache Struts. The vulnerability is due to inadequate validation of data processed by ParametersInterceptor allowing for manipulation of the ClassLoader. A remote attacker could exploit this vulnerability by providing a class parameter in a request...
Microsoft Visual Basic FlexGrid ActiveX Control Rows Parameter Memory Corruption - Ver2 (CVE-2008-4254)
A memory corruption vulnerability has been reported in Microsoft Visual Basic. An attacker could exploit this vulnerability crafted Rows and Cols properties to the ExpandAll and CollapseAll methods, related to access of incorrectly initialized objects and corruption of the system state. Successfu...
Microsoft Word Malformed Data Structures Memory Corruption - Ver2 (CVE-2006-6456)
A memory corruption vulnerability has been reported in Microsoft Office Word. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Excel Column Record Handling Memory Corruption (MS07-002) - Ver2 (CVE-2007-0030)
Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...
Adobe Flash Player for Linux ActionScript ASnative Command Execution - Ver2 (CVE-2008-5499)
A command execution vulnerability has been reported in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
MSSQL 2000MSDE Resolution Buffer Overflow - Ver2 (CVE-2002-0649)
A buffer overflow vulnerability has been reported in Microsoft MSDE and Microsoft SQLServer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
WellinTech Multiple Products kxClientDownload ActiveX Remote Code Execution (CVE-2013-2827)
A remote code execution vulnerability exists in WellinTech multiple products. The vulnerability exists in ClientDownload.ocx ActiveX control and is due to insufficient sanitization of ProjectURL property. A remote unauthenticated attacker can leverage this vulnerability to download and load an...
HP Intelligent Management Center BIMS bimsDownload Information Disclosure (CVE-2013-4823)
An information disclosure vulnerability has been reported in the BIMS add-in module of HP Intelligent Management Center.The vulnerability is due to lack of authentication and insufficient input validation in the bimsDownload servlet when processing HTTP request parameters. Remote attackers can...