13538 matches found
Foxit PhantomPDF Use After Free (CVE-2020-8845)
A use-after-free vulnerability exists in Foxit PhantomPDF. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress SeedProd Plugin Persistent Cross-Site Scripting (CVE-2020-15038)
A persistent cross site scripting vulnerability exists in WordPress SeedProd Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
TecRail Responsive Filemanager Directory Traversal (CVE-2018-15535)
A directory traversal vulnerability exists in tecrail responsive filemanager x9.13.4. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
D-Link DIR-859 Remote Code Execution (CVE-2019-20215)
A remote code execution vulnerability exists in D-Link DIR-859. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
SonicWall SMA100 Directory Traversal (CVE-2019-7483)
A directory traversal vulnerability exists in SonicWall SMA100 system. Successful exploitation of this vulnerability could lead to disclosure of file contents accessible by the unauthenticated user...
Advantech WebAccess Buffer Overflow (CVE-2019-10991)
A stack-based buffer overflow vulnerability exists in Advantech WebAccess. The vulnerability is due to a lack of boundary checks while copying user-supplied data into a stack-based buffer within giffconv.exe. A remote, unauthenticated attacker could exploit this vulnerability by sending a...
Advantech WebAccess SCADA Policy Bypass (CVE-2019-13552)
A policy bypass vulnerability exists in Advantech WebAccess. Successful exploitation of this vulnerability could allow the disclosure of sensitive information...
VMWare OpenSLP Heap Buffer Overflow (CVE-2019-5544; CVE-2021-21974)
A heap buffer overflow vulnerability exists in OpenSLP. The vulnerability is due to improperly checking the bounds of a buffer before copying data to it. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to OpenSLP service on port 427...
YouPHPTube Remote Code Execution (CVE-2019-16124)
A remote code execution vulnerability exists in the checkConfiguration.php script of YouPHPTube. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system...
Broadcom CA Privileged Access Manager Remote Command Execution (CVE-2018-9021; CVE-2018-9022)
A remote code execution vulnerability exists in Broadcom CA Privileged Access Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
OMRON CX-One CX-Protocol CMessage Type Confusion (CVE-2018-19027)
A type confusion vulnerability exists in OMRON CX-One CX-Protocol. This vulnerability occurs due to improper parsing of the project file...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1307)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1195)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1141)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Schneider Electric Modicon Multiple Authentication Bypass Vulnerabilities (CVE-2018-7809; CVE-2018-7810; CVE-2018-7811)
Multiple authentication bypass vulnerabilities exist in Schneider Electric Modicon. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted HTTP request to the affected page. Successful exploitation results in the attacker being able to change the password for...
Microsoft Windows User Profile Service Elevation of Privilege (CVE-2019-0986)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Sierra Wireless AirLink Command Injection (CVE-2018-4061)
A command injection vulnerability exists in Sierra Wireless AirLink. An authenticated attacker can send A specially crafted HTTP request to the affected target host and trigger arbitrary command execution...
Microsoft MS XML Remote Code Execution (CVE-2019-0793)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
NTPsec ntpd ctl_getitem Out of Bounds Read (CVE-2019-6443)
An out of bounds read vulnerability has been reported in NTPsec ntpd. The vulnerability is due to insufficient validation of the length of a message in a NTP packet. A remote unauthenticated user can exploit this vulnerability by sending a crafted packet to the target server...
Dovecot Out of Bounds Read (CVE-2017-14461)
An out of bounds read vulnerability exists in Dovecot IMAP server. This vulnerability is due to incorrect indexing of specially crafted emails. Successful exploitation may result in information disclosure or denial of service conditions...
Node.js Foundation Node.js TLS Denial of Service (CVE-2018-7162)
A denial of service vulnerability has been reported in Node.js. The vulnerability is due to improper handling of TLS by the node process. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted message to the target server during a TLS handshake...
BMC Remedy Privilege Escalation (CVE-2018-19505)
A privilege escalation vulnerability exists in BMC Remedy. The vulnerability is due to a lack of validation in USERNAMETOCHANGE. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
HPE System Management Homepage Issue (CVE-2017-12544) - Ver2
A vulnerability exists in HPE System Management Homepage. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Apache Portals Pluto Remote Code Execution (CVE-2018-1306)
A vulnerability exists in Apache Portals Pluto, The vulnerability is due to improper handling of http methods. A remote attacker can exploit this vulnerability by submitting a crafted request to the target server...
Zyxel EMG2926 Router OS Command Injection (CVE-2017-6884)
A command injection vulnerability exists in Zyxel EMG2926. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the router...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-8355)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Browser Scripting Engine Memory Corruption (CVE-2018-8288)
A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Asustor ADM Command Injection (CVE-2018-11510)
A remote command injection vulnerability exists in Asustor ADM. Successful exploitation would allow an attacker to execute arbitrary code on the target machine...
Microsoft HIDParser Elevation of Privilege (CVE-2018-8169)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Information Disclosure (CVE-2018-0891)
An information disclosure vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-0777)
A remote code execution vulnerability has been reported in Microsoft Edge. The vulnerability is due to an Out-of-Bounds write in the JavaScript engine. A remote attacker can exploit this issue by enticing a victim to open a specially crafted web page that could cause memory corruption in a way th...
Symantec Messaging Gateway performRestore Command Injection (CVE-2017-6327)
A command injection vulnerability exists in Symantec Messaging Gateway. The cause of the vulnerability due to combination of an authentication bypass in LoginAction and a lack of sanitization on user input...
Joomla Core SetType Cross-Site Scripting (CVE-2017-9934)
A Cross-Site Scripting vulnerability exists in Joomla Core. The vulnerability is due to improper validation of user data. A remote attacker can exploit this vulnerability by sending a crafted request to the target...
Dell SonicWALL Scrutinizer methodDetail SQL Injection (CVE-2014-4977)
An SQL injection vulnerability exists in Dell SonicWALL Scrutinizer. A remote, authenticated attacker can exploit this vulnerability by sending a crafted request. Successful exploitation of this vulnerability can lead to arbitrary code execution in the context of SYSTEM for windows or as Apache f...
Microsoft Windows Eclipsedwing RPC Buffer Overflow (CVE-2008-4250)
A remote code execution vulnerability exist in Microsoft Remote Procedure Call RPC. The vulnerability is due to the way RPC service handles certain requests. The Fuzzbunch tool allows attackers to execute this exploit. An attacker who successfully exploits this vulnerability can execut arbitrary...
Fatek Automation PLC WinProladder Stack Buffer Overflow (CVE-2016-8377)
A stack-based buffer overflow exists in Fatek Automation PLC WinProladder. The vulnerability is due to improper validation of user supplied data before copying to a stack-based buffer. A remote attacker could exploit this vulnerability by sending a crafted pdw file over a network to the vulnerabl...
Microsoft Windows VHDFS Driver Elevation of Privilege (MS16-138: CVE-2016-7225)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is due to insufficient specification for a certain flag. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted executable...
Microsoft Internet Explorer NetBIOS Spoofing (MS16-063: CVE-2016-3213)
A spoofing vulnerability exists in Microsoft Internet Explorer. The root cause is that an attacker can spoof WAPD requests and force the browser to switch to local Intranet. A remote attacker can exploit this issue by sending a specially crafted meeting request...
Magento API unserialize Remote Code Execution (CVE-2016-4010)
A remote code execution vulnerability exists in the e-commerce platform Magento. The vulnerability is due to deserialization of attacker controlled objects via the checkout API. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted Web API request to the target...
Advantech WebAccess AspVCObj.AspDataDriven ActiveX GetWideStrCpy Stack Buffer Overflow (CVE-2014-9208)
A stack buffer overflow vulnerability exists in Advantech's WebAccess SCADA software. The vulnerability is due to insufficient input validation of an argument to GetWideStrCpy in the AspVCObj.AspDataDriven ActiveX control. A remote, unauthenticated attacker can exploit this vulnerability by...
Advantech WebAccess AspVCObj.AspDataDriven ActiveX Stack Buffer Overflow (CVE-2014-9208)
A stack buffer overflow vulnerability exists in Advantech's WebAccess SCADA software. The vulnerability is due to insufficient input validation of an argument of multiple functions in the AspVCObj ActiveX control. A remote, unauthenticated attacker can exploit this vulnerability by enticing a...
Oracle Endeca Server createDataStore Remote Command Execution - Ver2 (CVE-2013-3763)
A command execution vulnerability exists in Oracle Endeca Server. The vulnerability is due to the controlSoapBinding web service exposing the createDataStore method which contains a flaw that allows for the injection of arbitrary commands. A remote, unauthenticated attacker could exploit this...
ISS ICQ Parsing - Ver2 (CVE-2004-0362)
There is a vulnerability within several ISS security products, including BlackICE, RealSecure, and Proventia, in the way they parse the ICQ messaging protocol. An attacker, exploiting this vulnerability, can cause a buffer overflow, resulting in the termination of a service or execution of...
Monkey HTTPD Server Denial of Service - Ver2 (CVE-2013-3724)
A denial of service vulnerability has been reported in Monkey HTTPD Server. The vulnerability is due to improper bounds checking while parsing headers. A remote attacker can exploit this vulnerability by sending a malicious request to the target server. Successful exploitation of this vulnerabili...
VLC Media Player ABC File Parsing Buffer Overflow - Ver2 (CVE-2013-4233)
A buffer overflow vulnerability has been reported in VLC Media Player's ABC file parsing. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
FreePBX Framework Asterisk Recording Interface unserialize Code Execution (CVE-2014-7235)
A code execution vulnerability exists in FreePBX. The vulnerability is due to an input validation issue in the index.php file of the recordings directory...
Joomla Component com_projectfork Local File Inclusion (CVE-2009-2100)
A file inclusion vulnerability has been reported in Joomlapraise Com Projectfork. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
HP Universal CMDB Default Credentials Arbitrary File Upload (CVE-2014-2617)
A code execution vulnerability exists in HP Universal CMDB. The vulnerability is due to the use of hard-coded credentials when processing HTTP requests. A remote attacker can upload arbitrary files to arbitrary locations using the default credentials...
Microsoft Office PICT Filter Map Structure Memory Corruption - Ver2 (CVE-2008-3021)
A memory corruption vulnerability has been reported in Microsoft Office. The vulnerability is due to a memory corruption error when a malformed PICT file is opened by any of the affected Microsoft Office applications. Successful exploitation of this vulnerability could allow a remote attacker to...
VideoLAN VLC Media Player MMS Plugin Stack Buffer Overflow - ver 2 (CVE-2012-1775)
A stack buffer overflow vulnerability has been reported in VLC Media Player. The vulnerability is due to insufficient bounds checking in the MMS access plugin while copying a hostname into a stack buffer. A remote attacker can exploit this issue by convincing a target user to open a specially...