13538 matches found
IBM Lotus Sametime Server Multiplexer Stack Buffer Overflow (CVE-2008-2499)
IBM Lotus Sametime is an enterprise instant messaging and web conferencing application created by the Lotus Software division of IBM. Lotus Sametime provides enterprise instant messaging functionality, presence information, and web conferencing using standard protocols. The Lotus Sametime server...
SHOUTcast Filename Format String - ver 2 (CVE-2004-1373)
SHOUTcast is a free distributed streaming audio system developed by Nullsoft. It is widely used by Internet-based radio stations. The SHOUTcast server implements a subset of the HTTP protocol to communicate with clients. A client-server session starts with the client requesting an audio stream fr...
Microsoft Indexing Service ActiveX Memory Corruption (MS09-057; CVE-2009-2507)
The Microsoft Windows Indexing Service is a base service that extracts content from files and constructs an indexed catalog to facilitate efficient and rapid searching. A remote code execution vulnerability has been reported in the Microsoft Indexing Service. The vulnerability is caused by an...
Oracle Secure Backup NDMP CONNECT_CLIENT_AUTH Command Buffer Overflow (CVE-2008-5444)
Oracle Database Server is an enterprise-level relational database application suite. Oracle Secure Backup is a backup solution allowing for single point of management of data present on network attached storage NAS devices and distributed hosts. Oracle Secure Backup is using NDMP protocol to...
Update IPS-1 with a Protection against Apple QuickTime and Apple QuickDraw Vulnerabilities
Several vulnerabilities have been identified within various versions of Apple QuickTime and Apple QuickDraw that, if exploited, would allow a remote attacker to execute arbitrary code on a vulnerable system...
Update Protection against Multiple PHP-based Vulnerabilities
ADOdb is a database abstraction library for PHP. A vulnerability was detected in ADOdb due to the presence pf an insecure ADOdb script that can be exploited by remote attackers to execute malicious PHP commands on the target system. The 'Defacing Tool 2.0 by r3v3ng4ns' is a suite of php based...
Oracle E-Business Suite Sales Offline Denial of Service (CVE-2021-2190)
A denial of service vulnerability exists in the Sales Offline component of Oracle E-Business Suite. The vulnerability is due to improper handling of requests by the authentication component of Sales Offline...
Bolt CMS Arbitrary File Upload (CVE-2022-36532)
An arbitrary file upload vulnerability exists in Bolt CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Ivanti Avalanche EnterpriseServer Service setUser Authentication Bypass (CVE-2021-42128)
A authentication bypass vulnerability exists in the Ivanti Avalanche Enterprise Server. The vulnerability is due to lack of authentication for certain functionality...
TOTOLink 720R Command Injection (CVE-2022-38534; CVE-2022-38535)
A command injection vulnerability exists in TOTOLink 720R. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Selenium Grid Cross-Site Request Forgery (CVE-2022-28108)
A cross-site request forgery vulnerability exists in Selenium Grid. Successful exploitation of this vulnerability could result in code execution on the affected system...
ShopWind Remote Code Execution (CVE-2022-30453)
A remote code execution vulnerability exists in ShopWind. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
TOTOLink A3100R Command Injection (CVE-2022-25077)
A command injection vulnerability exists in TOTOLink A3100R. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Jenkins Artifact Repository Parameter Plugin Cross-Site Scripting (CVE-2021-21622)
A stored cross-site scripting vulnerability exists in Jenkins Artifact Repository Parameter plugin. This vulnerability is due to insufficient validation of the name and description parameters in the ArtifactRepoParamDefinition class...
WordPress Core Cross Site Scripting (CVE-2019-16223)
A cross site scripting vulnerability exists in WordPress Core. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
Netgear Smart WiFi Router Authentication Bypass (CVE-2019-17137)
An authentication bypass vulnerability exists in Netgear Smart WiFi Router. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
PHP Arbitrary File Upload (CVE-2020-12255; CVE-2020-23828)
Malicious PHP files can be uploaded to a server due to improper validation. Successful exploitation could result in execution of arbitrary code on the target system...
Apache Dubbo Remote Code Execution (CVE-2020-1948)
A remote code execution vulnerability exists in Apache Dubbo. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Trend Micro InterScan Web Security Virtual Appliance Stack Overflow (CVE-2020-28578; CVE-2020-28579)
A stack overflow vulnerability exists in Trend Micro InterScan Web Security Virtual Appliance. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Nitro Pro PDF Use After Free (CVE-2020-6074)
A use-after-free vulnerability exists in Nitro Pro PDF. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Android Out Of Bounds Write Remote Code Execution (CVE-2019-2107)
A remote code execution vulnerability exists in Android. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Eclipse Foundation Mosquitto Pattern Based ACL Bypass (CVE-2017-7650)
An ACL bypass vulnerability has been reported in Eclipse Foundation Mosquitto. A remote user can exploit this vulnerability by sending a crafted request to the target server...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1062)
...
NoneCMS ThinkPHP Remote Code Execution (CVE-2018-20062)
A remote code execution vulnerability exists in NoneCMS ThinkPHP framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Win32k Elevation of Privilege (CVE-2019-0859)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows CSRSS Elevation of Privilege (CVE-2019-0735)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
ZeroMQ libzmq v2_decoder Integer Overflow (CVE-2019-6250)
An integer overflow vulnerability has been reported in ZeroMQ libzmq. The vulnerability is due to improper validation of user-supplied data in the zmq::v2decodert::sizeready function when handling ZMTP version 2 messages...
Microsoft Windows Elevation of Privilege (CVE-2019-0543)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apache Superset 0.23 Remote Code Execution (CVE-2018-8021)
A remote code execution vulnerability exists in the Apache Superset web application. A remote attacker can exploit this vulnerability by sending a specially crafted request. Successful exploitation could lead to execute arbitrary code on the system...
Zoho ManageEngine Desktop Central Arbitrary File Deletion (CVE-2018-12999)
An arbitrary file deletion vulnerability exists in Zoho ManageEngine Desktop Central. The vulnerability is due to insufficient input validation in requests handled by AgentTrayIconServlet...
Rockwell Automation Allen-Bradley CompactLogix Cross-Site Scripting (CVE-2016-2279)
A cross site scripting vulnerability has been reported in Rockwell Scada System. The vulnerability is due to lack of sanitization of user supplied input data. A remote attacker can exploit this vulnerability to execute arbitrary HTML and script code in a browser session in the context of the...
Microsoft Windows ALPC Elevation of Privilege (CVE-2018-8440)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Kernel NtQueryObject Information Disclosure (CVE-2017-11785)
An information disclosure vulnerability exists within Microsoft Windows. The vulnerability is caused when Microsoft Windows kernel improperly handles objects in memory. Successful exploitation allows the attacker to retrieve information that could lead to a Kernel ASLR bypass...
Systemd resolved dns_packet_new Heap Buffer Overflow (CVE-2017-9445)
A heap buffer overflow vulnerability exists in the dnspacketnew function of systemd-resolved. This vulnerability is due to the allocation of a heap buffer of insufficient size when handling DNS responses. A malicious DNS server can exploit this vulnerability by sending a crafted DNS response...
Audiotran 1.4.1 (PLS File) Stack Buffer Overflow (CVE-2009-0476)
A stack-based buffer overflow exists in Audiotran 1.4.1. A remote attacker could trigger this vulnerability by enticing a victim to open a crafted file. Successful exploitation would allow remote attackers to execute arbitrary code via a long string in a playlist .pls file...
Movable Type Web Upgrade Remote Code Execution (CVE-2013-0209)
A script injection and execution vulnerability has been reported in Movable Type. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary Perl code and SQL commands on the affected system...
Microsoft Windows VHDFS Driver Elevation of Privilege (MS16-138: CVE-2016-7226)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is due to insufficient specification for a certain flag. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted executable...
Flexera FlexNet Publisher License Server Buffer Overflow (CVE-2015-8277)
Two buffer overflow vulnerabilities have been discovered in the FlexNet Publisher license server manager. These vulnerabilities are due to improper bounds checking in a custom strncpy function when handling requests received over the network. An attacker could leverage these vulnerabilities by...
PHP ZIP Archive Heap Overflow (CVE-2016-3078)
A heap overflow vulnerability exists in PHP, due to an integer overflow when reading ZIP files. A remote attacker can exploit this vulnerability by sending a crafted ZIP archive to a web application running a vulnerable version of PHP. A successful attack can result in remote code execution under...
Redis Lua Scripting Component getnum Integer Overflow (CVE-2015-8080)
An integer overflow vulnerability has been reported in Redis. This vulnerability is due to the vulnerable server incorrectly parsing specific Lua scripts. A remote authenticated attacker can exploit this vulnerability by sending a specially crafted RESP message to the target server. Successful...
Ca eTrust PestPatrol Antispyware ActiveX Buffer Overflow106 - Ver2 (CVE-2009-4225)
A buffer overflow vulnerability has been reported in Ca Etrust Pestpatrole Ppctl.dll Activex and Computer Associates eTrust PestPatrol. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
WordPress Download Manager Plugin Privilege Escalation (CVE-2014-9260)
A privilege escalation vulnerability has been found in WordPress Download Manager Plugin. An authenticated remote attacker may leverage this vulnerability to gain administrative access to the vulnerable server...
Zavio IP Camera Firmware 1603 OS Command Injection - Ver2 (CVE-2013-2570)
A command injection vulnerability has been reported in Zavio F3105 and F312A IP cameras. The vulnerability is due to an input passed via the 'General.Time.NTP.Server' function, when parameter is not properly sanitized upon submission to the subC8C8 function in /opt/cgi/view/param. Successful...
Rocket Servergraph Admin Center fileRequestor Directory Traversal - Ver2 (CVE-2014-3914)
A code execution vulnerability exists in Rocket Servergraph Admin Center. The vulnerability occurs when making an HTTP POST request to the URI /SGPAdmin/fileRequest with the parameters cmd=writeDataFile, cmd=run, cmd=runClear or cmd=del, which can be present in the Body of the request. A remote...
Oracle Database Server Insecure User Input Stack Buffer Overflow (CVE-2013-3751)
A stack buffer overflow vulnerability has been reported in Oracle Database Server. The vulnerability is due to insufficient validation of user supplied input when parsing XML document data in a SQL/XML query. A remote, authenticated attacker could exploit this vulnerability by sending a malicious...
Internet Explorer VML Buffer Overrun (MS07-004) - Ver2 (CVE-2007-0024)
Microsoft Internet Explorer IE contains a remote code execution vulnerability. The vulnerability exists in Microsoft Vector Markup Language VML. VML is a set of XML tags used for exchange, editing, and delivery of vector graphics on the web. By convincing a user to visit a specially crafted Web...
PoPToP PPTP Negative Read Overflow Buffer Overflow - Ver2 (CVE-2003-0213)
A buffer overflow vulnerability has been reported in Poptop Pptp Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Windows ShellExecute and IE7 URL Handling Code Execution (MS07-061) - Ver2 (CVE-2007-3896)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Windows Internet Explorer 7. The vulnerability occurs when Windows does not correctly handle specially crafted URLs or URIs that are passed to it. There are a...
IBM Forms Viewer XFDL Form Processing Stack Buffer Overflow - Ver2 (CVE-2013-5447)
A buffer overflow vulnerability has been reported in IBM Forms Viewer. The vulnerability is due to an error when processing XFDL forms and can be exploited to cause a stack-based buffer overflow. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
CSNews csNews.cgi setup Parameter Code Execution - Ver2 (CVE-2002-1751)
A code execution vulnerability has been reported in Cgiscript.net Cslivesupport. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...