13538 matches found
Internet Explorer CStyleSheet Uninitialized Memory Corruption (MS10-035; CVE-2010-1259; CVE-2010-1262)
Multiple memory corruption vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To trigger this issue, an attacker may create a malicious web page...
Borland StarTeam Multicast Service HTTP Handling Buffer Overflow (CVE-2008-0311)
StarTeam is a revision control and SCM software system, originally produced by Starbase Corporation, and acquired by Borland in 2003. The system is backed by a relational database, that retains all changes made to a project during its evolution. Borland StarTeam can be installed as a component of...
Adobe Acrobat Reader (Unix) Shell Metacharacter Code Execution (CVE-2004-0630)
Portable Document Format PDF is a file format for documents based on the PostScript description language. One of the products that is widely used to read PDF files is Adobe Acrobat Reader. This product is available on different platforms, including many versions of UNIX and Linux. There is a...
SHOUTcast Filename Format String - ver 2 (CVE-2004-1373)
SHOUTcast is a free distributed streaming audio system developed by Nullsoft. It is widely used by Internet-based radio stations. The SHOUTcast server implements a subset of the HTTP protocol to communicate with clients. A client-server session starts with the client requesting an audio stream fr...
CA Products ActiveX Control ListCtrl AddColumn Buffer Overflow (CVE-2008-1472)
Computer Associates CA provides a group of security and management products for enterprise as well as individual clients. A buffer overflow vulnerability was reported in CA multiple products. The vulnerability is due to boundary errors in the CA products ActiveX control while handling crafted...
Update IPS-1 with a Protection against Apple QuickTime and Apple QuickDraw Vulnerabilities
Several vulnerabilities have been identified within various versions of Apple QuickTime and Apple QuickDraw that, if exploited, would allow a remote attacker to execute arbitrary code on a vulnerable system...
Borland Interbase Database Service Create-Request Buffer Overflow (CVE-2007-3566)
Borland InterBase is a SQL-92 compliant relational database management system for Linux, Microsoft Windows, and Solaris operating systems. A buffer overflow vulnerability has been reported in Borland InterBase. The vulnerability is due to a boundary error in Borland InterBase that fails to proper...
Internet Explorer Multiple COM Objects Memory Corruption (MS07-027; CVE-2007-0942; CVE-2007-0944; CVE-2007-0945; CVE-2007-2221)
Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...
Preemptive Protection against Microsoft Windows Animated Cursor Remote Code Execution Vulnerability (MS07-017)
A remote code execution vulnerability has been reported in the animated cursor code in Microsoft Windows. A remote attacker can exploit this vulnerability via a specially crafted ANI file. Animated cursors files ANI allow a series of frames to appear at the mouse pointer location instead of a...
Update Protection against Microsoft Internet Explorer Memory Corruption Vulnerabilities (MS06-042)
Microsoft Internet Explorer is prone to multiple memory corruption vulnerabilities. The application fails to properly handle un-initialized COM objects and chained Cascading Style Sheets CSS. This flaw allows attackers to cause denial of service and possibly to execute arbitrary code by convincin...
IMAP Servers LIST Command Buffer Overflow (CVE-2005-4267)
...
Microsoft Media Player BMP File Handling Buffer Overflow (MS06-005; CVE-2006-0006)
...
MS-RPC over CIFS Inspection Properties (CVE-2003-0533)
DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...
Oracle E-Business Cross-Site Scripting (CVE-2021-2198)
A stored cross-site scripting vulnerability exists in the Knowledge Management component of Oracle E-Business Suite. The vulnerability is due to the use of untrusted user input...
D-Link DIR810LA1 Command Injection (CVE-2022-34974)
A command injection vulnerability exists in D-Link DIR810LA1. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Jenkins Selenium HTML Report Plugin XML External Entity Injection (CVE-2021-21672)
An XML external entity injection vulnerability exists in Jenkins Selenium HTML Report Plugin. Successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...
Delta Industrial Automation DIAEnergie Cross-Site Scripting (CVE-2021-44471)
A stored cross-site scripting vulnerability exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to input validation error when processing name parameter in HandlerAlarmGroup.ashx endpoint...
H3C GR-1200W Router Command Injection (CVE-2022-37070)
A command injection vulnerability exists in H3C GR-1200W Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Adobe ColdFusion Authentication Bypass (APSB22-44: CVE-2022-38420)
An authentication bypass vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage the user's system...
Fortinet FortiOS Cross Site Scripting (CVE-2018-13380)
A cross site scripting vulnerability exists in Fortinet FortiOS. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
dotCMS Arbitrary File Upload (CVE-2022-26352; CVE-2018-5445)
An arbitrary file upload vulnerability exists in dotCMS. Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the vulnerable system with administrative privileges...
Bonitasoft Bonita Web Authorization Bypass (CVE-2022-25237)
An authorization bypass vulnerability exists in Bonitasoft Bonita Web. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary code...
SAP NetWeaver Information Disclosure (CVE-2016-2388)
An information disclosure vulnerability exists in SAP NetWeaver. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Selenium Grid Cross-Site Request Forgery (CVE-2022-28108)
A cross-site request forgery vulnerability exists in Selenium Grid. Successful exploitation of this vulnerability could result in code execution on the affected system...
Oracle Business Intelligence Enterprise Edition Information Disclosure (CVE-2020-14864)
An information disclosure vulnerability exists in Oracle Business Intelligence Enterprise Edition. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Delta Electronics DIAEnergie SQL Injection (CVE-2021-32983)
An SQL injection exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to input validation error when processing keyword parameter in HandlerCFG.ashx endpoint...
SAP NetWeaver Directory Traversal (CVE-2016-3976)
A directory traversal vulnerability exists in SAP NetWeaver. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
Millken Doyocms Arbitrary File Upload (CVE-2021-26740)
An arbitrary file upload vulnerability exists in Millken Doyocms. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Sumavision Enhanced Multimedia Router Cross Site Request Forgery (CVE-2020-10181)
A cross site request forgery vulnerability exists in Sumavision Enhanced Multimedia Router. Successful exploitation of this vulnerability can result in the execution of arbitrary code on the affected system...
Nuance Winscribe Dictation SQL Injection (CVE-2021-37599)
An SQL injection vulnerability exists in Nuance Winscribe Dictation. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CRMEB Arbitrary File Upload (CVE-2020-21787)
An arbitrary file upload vulnerability exists in CRMEB. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Jenkins Claim Plugin Cross-Site Scripting (CVE-2021-21619)
A stored cross-site scripting vulnerability exists in Jenkins Claim plugin. This vulnerability is due to insufficient validation of the displayName shown in claims...
Invigo Automatic Device Management Command Injection (CVE-2020-10583)
A command injection vulnerability exists in Invigo Automatic Device Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Inspur ClusterEngine Remote Code Execution (CVE-2020-21224)
A remote code execution vulnerability exists in Inspur ClusterEngine. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Belkin Linksys RE6500 Remote Code Execution (CVE-2020-35713)
A remote code execution vulnerability exists in Belkin Linksys RE6500. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
PHP Arbitrary File Upload (CVE-2020-12255; CVE-2020-23828)
Malicious PHP files can be uploaded to a server due to improper validation. Successful exploitation could result in execution of arbitrary code on the target system...
Pandora FMS Cross-Site Scripting (CVE-2020-11749)
A cross-site scripting vulnerability exists in Pandora FMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary commands on the affected system...
Cayin CMS Command Injection (CVE-2020-7357)
A command injection vulnerability exists in Cayin CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
CutePHP Cutenews Remote Code Execution (CVE-2019-11447)
A remote code execution vulnerability exists in CutePHP CuteNews. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Softdatepro SameDate Pro SQL Injection (CVE-2017-15971)
An SQL injection vulnerability exists in Softdatepro SameDate Pro. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Apache ShardingSphere Insecure Deserialization (CVE-2020-1947)
An insecure deserialization vulnerability exists in Apache ShardingSphere incubator. Successful exploitation of this vulnerability could result in arbitrary code execution with the privileges of the application...
Advantech WebAccess SCADA Policy Bypass (CVE-2019-13552)
A policy bypass vulnerability exists in Advantech WebAccess. Successful exploitation of this vulnerability could allow the disclosure of sensitive information...
D-Link DIR-859 Remote Code Execution (CVE-2019-17621; CVE-2022-36756; CVE-2022-37053)
A remote code execution vulnerability exists in D-Link DIR-859. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Wordpress Simple Membership Plugin Cross-Site Request Forgery (CVE-2019-14328)
A cross-site request forgery vulnerability exists in Wordpress Simple Membership Plugin. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user with administrator privileges to visit a page which sends a request to Simple Membership Plugin...
Jenkins build-metrics Plugin Cross-Site Scripting (CVE-2019-10475)
A cross-site scripting vulnerability exists in Jenkins build-metrics Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the effected system...
OMRON CX-One CX-Protocol CMessage Type Confusion (CVE-2018-19027)
A type confusion vulnerability exists in OMRON CX-One CX-Protocol. This vulnerability occurs due to improper parsing of the project file...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1141)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Eclipse Foundation Mosquitto Pattern Based ACL Bypass (CVE-2017-7650)
An ACL bypass vulnerability has been reported in Eclipse Foundation Mosquitto. A remote user can exploit this vulnerability by sending a crafted request to the target server...
Zoom Client Webcam Hijacking (CVE-2019-13450)
A Webcam Hijacking vulnerability exists in Zoom Client for macOS. A machine remains vulnerable if the Zoom Client was installed in the past and then uninstalled. A remote attacker can force a user to join a video call with the video camera active...