13538 matches found
Asus ASUSWRT Command Injection (CVE-2018-14714)
A command injection vulnerability exists in Asus ASUSWRT. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Atlassian Confluence Server Information Disclosure (CVE-2019-3394)
A local file inclusion vulnerability exists in Atlassian Confluence Server. This vulnerability is due to improper validation of file path. A remote, authenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitation could lead to...
Jenkins build-metrics Plugin Cross-Site Scripting (CVE-2019-10475)
A cross-site scripting vulnerability exists in Jenkins build-metrics Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the effected system...
OMRON CX-One CX-Protocol CMessage Type Confusion (CVE-2018-19027)
A type confusion vulnerability exists in OMRON CX-One CX-Protocol. This vulnerability occurs due to improper parsing of the project file...
Zoom Client Webcam Hijacking (CVE-2019-13450)
A Webcam Hijacking vulnerability exists in Zoom Client for macOS. A machine remains vulnerable if the Zoom Client was installed in the past and then uninstalled. A remote attacker can force a user to join a video call with the video camera active...
Microsoft Windows RPCSS Elevation of Privilege (CVE-2019-1089)
...
NoneCMS ThinkPHP Remote Code Execution (CVE-2018-20062)
A remote code execution vulnerability exists in NoneCMS ThinkPHP framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Rockwell Automation CompactLogix 5370 Buffer Overflow Denial of Service (CVE-2019-10954)
A denial of service vulnerability exists in Rockwell Automation CompactLogix 5370 PLCs. A remote, unauthenticated attacker could send crafted SMTP configuration packets to cause denial of service conditions...
Apache HTTP Server File Upload Privilege Escalation (CVE-2019-0211)
A privilege escalation vulnerability exists in Apache HTTP Server. A remote attacker may exploit this vulnerability to execute arbitrary code with administrator privileges...
Microsoft Windows CSRSS Elevation of Privilege (CVE-2019-0735)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-0665)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
AirLink101 SkyIPCam Command Injection (CVE-2015-2280)
A command execution vulnerability exists in Airlink101 Skyipcam1620W Wireless N Mpeg4Gpp Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Rockwell Automation Allen-Bradley CompactLogix Cross-Site Scripting (CVE-2016-2279)
A cross site scripting vulnerability has been reported in Rockwell Scada System. The vulnerability is due to lack of sanitization of user supplied input data. A remote attacker can exploit this vulnerability to execute arbitrary HTML and script code in a browser session in the context of the...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-8467)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows ALPC Elevation of Privilege (CVE-2018-8440)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2018-8353)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
vBulletin cacheTemplates Remote Code Execution (CVE-2017-17672)
A remote code execution vulnerability exists in the vBulletin software package. The vulnerability is due to improper validation of user input .Successful exploitation of this vulnerability will allow execution of arbitrary code on a target system...
Systemd resolved dns_packet_read_type_window Infinite Loop (CVE-2017-15908)
A denial-of-service vulnerability exists in the dnspacketreadtypewindow function of systemdresolved component in the systemd project. This vulnerability is due to the incorrectly parsing of NSEC records in a DNS response. A malicious DNS server could exploit this vulnerability by sending a crafte...
Systemd resolved dns_packet_new Heap Buffer Overflow (CVE-2017-9445)
A heap buffer overflow vulnerability exists in the dnspacketnew function of systemd-resolved. This vulnerability is due to the allocation of a heap buffer of insufficient size when handling DNS responses. A malicious DNS server can exploit this vulnerability by sending a crafted DNS response...
Joomla Core Sterilizer Cross-Site Scripting Filter Privilege Escalation (CVE-2017-7985)
A privilege escalation vulnerability exists in Joomla Core. Unauthorized remote attackers may leverage this vulnerability to gain administrative access to the vulnerable server...
Microsoft Windows Eclipsedwing RPC Buffer Overflow (CVE-2008-4250)
A remote code execution vulnerability exist in Microsoft Remote Procedure Call RPC. The vulnerability is due to the way RPC service handles certain requests. The Fuzzbunch tool allows attackers to execute this exploit. An attacker who successfully exploits this vulnerability can execut arbitrary...
Microsoft Windows Graphics Component Remote Code Execution (MS16-097: CVE-2016-3304)
A remote code execution vulnerability exists in Microsoft Graphics Component. The vulnerability is due to the way Microsoft Windows improperly handles specially crafted EMF files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted EMF files...
Microsoft DirectShow Heap Corruption Remote Code Execution (MS16-007: CVE-2016-0015)
A remote code execution vulnerability has been reported in Microsoft DirectShow. The vulnerability is due to the way Microsoft DirectShow improperly validates input. A remote attacker could exploit this vulnerability by enticing a target user to open a specially crafted file...
Microsoft Scripting Engine Memory Corruption (MS15-124: CVE-2015-6136)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
Advantech WebAccess Webdobj ActiveX UpdateProject Stack Buffer Overflow (CVE-2014-9208)
A stack buffer overflow vulnerability exists in Advantech's WebAccess SCADA software. The vulnerability is due to insufficient input validation of one of the UpdateProject's arguments in the Webdobj ActiveX control. A remote, unauthenticated attacker can exploit this vulnerability by enticing a...
Weak SSL RC4 Cipher Suites (CVE-2013-2566; CVE-2015-2808)
RC4 is a widely supported stream cipher, often preferred by TLS servers and other servers using encrypted sessions. It has long been known to have a variety of cryptographic weaknesses. Recent cryptanalysis results, one of which is the "Bar Mitzvah attack", exploit biases in the RC4 keystream to...
Novell ZENworks Configuration Management UploadServlet Directory Traversal (CVE-2015-0779)
A directory traversal vulnerability exists in Novell ZENworks Configuration Management. The vulnerability is due to insufficient input validation within the ZENworks Server's UploadServlet. Remote unauthenticated attackers can leverage this vulnerability to upload malicious files anywhere onto th...
Microsoft Windows EMF Processing Remote Code Execution (MS15-035; CVE-2015-1645)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way Windows improperly processes specially crafted Enhanced Metafile EMF image format files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted EMF...
SOAPUI Remote Code Execution - Ver2 (CVE-2014-1202)
A code execution vulnerability has been reported in Eviware SoapUI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Procyon Core Server HMI Memory Corruption SCADA Remote Code Execution - Ver2 (CVE-2011-3322)
A remote stack overflow vulnerability has been reported in Procyon Core Server HMI service. The vulnerability is due to a boundary check error. A remote attacker may exploit this issue by sending specially crafted messages to the target server. Successful exploitation could allow an attacker to...
WellinTech KingSCADA kxNetDispose.dll Stack Buffer Overflow (CVE-2014-0787)
A stack buffer overflow vulnerability has been reported in WellinTech KingSCADA. The vulnerability is due to insufficient validation on the size of the data. A remote unauthenticated attacker could exploit this vulnerability by sending a malicious packet to the KingSCADA server...
Apache Struts ParametersInterceptor ClassLoader Security Bypass (CVE-2014-0094; CVE-2014-0112; CVE-2014-0113; CVE-2014-0114)
A security bypass vulnerability exists in Apache Struts. The vulnerability is due to inadequate validation of data processed by ParametersInterceptor allowing for manipulation of the ClassLoader. A remote attacker could exploit this vulnerability by providing a class parameter in a request...
PoPToP PPTP Negative Read Overflow Buffer Overflow - Ver2 (CVE-2003-0213)
A buffer overflow vulnerability has been reported in Poptop Pptp Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Word Malformed Data Structures Memory Corruption - Ver2 (CVE-2006-6456)
A memory corruption vulnerability has been reported in Microsoft Office Word. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Autodesk AutoCAD Insecure FAS Loading (CVE-2014-0818)
A code execution vulnerability has been reported in AutoCAD. The vulnerability is due to using improper search path when loading FAS files. A remote attacker could exploit this vulnerability by enticing a user to process an FAS file from a malicious source...
HP Managed printing Administration jobAcct Remote Command Execution - Ver2 (CVE-2011-4166)
A command execution vulnerability has been reported in Hp Managed Printing Administration. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Veritas Backup Exec Server Remote Registry Access Code Execution - Ver2 (CVE-2005-0771)
A code execution vulnerability has been reported in Veritas Backup Exec Server. Successful exploitation of this vulnerability could allow a remote attacker to modify the registry and execute arbitrary methods via RPC on the affected system...
IBM Forms Viewer XFDL Form Processing Stack Buffer Overflow - Ver2 (CVE-2013-5447)
A buffer overflow vulnerability has been reported in IBM Forms Viewer. The vulnerability is due to an error when processing XFDL forms and can be exploited to cause a stack-based buffer overflow. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
Microsoft Office Embedded TIFF Image Remote Code Execution (CVE-2013-3906)
A remote code execution vulnerability has been reported in a graphic rendering library used by Microsoft Office products...
HP Intelligent Management Center BIMS bimsDownload Information Disclosure (CVE-2013-4823)
An information disclosure vulnerability has been reported in the BIMS add-in module of HP Intelligent Management Center.The vulnerability is due to lack of authentication and insufficient input validation in the bimsDownload servlet when processing HTTP request parameters. Remote attackers can...
Microsoft .NET Framework Array Access Violation (MS13-052; CVE-2013-3131; CVE-2013-3134)
A remote code execution vulnerability exists in the way the .NET Framework handles multidimensional arrays of small structures. The vulnerability is caused when the .NET Framework improperly handles multidimensional arrays of small structures. An attacker who successfully exploited this...
Ektron XSLT Transform Remote Code Execution (CVE-2012-5357)
A remote code execution vulnerability has been reported in Ektron CMS in XslCompiledTransform class...
Microsoft RPC Services Path Canonicalization Remote Code Execution (CVE-2008-4250)
A remote code execution vulnerability has been reported in applications based on the SMB protocol...
Internet Explorer HTML Object access Memory Corruption (MS13-047; CVE-2013-3120)
A use after free vulnerability has been reported in Internet Explorer...
Mutiny FrontEnd Arbitrary File Read and Delete (CVE-2013-0136)
A directory traversal vulnerability has been reported in EditDocument servlet from the frontend on the Mutiny 5 appliance. Commands for UPLOAD, DELETE, CUT and COPY are all vulnerable to directory traversal attacks...
Microsoft .NET XML Digital Signature Spoofing (MS13-040; CVE-2013-1336)
A spoofing vulnerability has been reported when the Microsoft .NET Framework fails to properly validate the signature of specially crafted XML files. Successful exploitation would allow an attacker to modify the contents of an XML file without invalidating the signature associated with the file...
BigAnt Server DUPF Command Arbitrary File Upload (CVE-2012-6274)
An arbitrary file upload vulnerability exists in BigAnt Server. The vulnerability is due to lack of authentication and a directory traversal weakness in processing a DUPF command. Remote unauthenticated attackers can exploit this vulnerability by sending malicious requests to the target server...
Internet Explorer Shift JIS Character Encoding (MS13-009; CVE-2013-0015)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer...