13538 matches found
OMRON CX-One Buffer Overflow (CVE-2022-21137)
A stack-based overflow exists in OMRON CX-One CX-FLnet module. The vulnerability is due to input validation error when processing a parameter...
Fortinet FortiOS Cross Site Scripting (CVE-2018-13380)
A cross site scripting vulnerability exists in Fortinet FortiOS. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
Zimbra Collaboration Directory Traversal (CVE-2022-27925; CVE-2022-37042)
A Directory Traversal vulnerability exists in Zimbra Collaboration. Successful exploitation of this vulnerability could allow a remote attacker to disclose or access arbitrary files on the vulnerable server...
Mitel MiVoice Connect Command Injection (CVE-2022-29499)
A command injection vulnerability exists in Mitel MiVoice Connect. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
SonicWall SMA 100 Command Injection (CVE-2021-20039)
A command injection vulnerability exists in SonicWall SMA 100. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
GitLab Community and Enterprise Cross-Site Scripting (CVE-2021-22241)
A stored cross-site scripting vulnerability exists in the Community edition and Enterprise edition of GitLab. The vulnerability is due to improper input validation of the default branch name...
Delta Electronics DIAEnergie SQL Injection (CVE-2021-38391)
An SQL injection exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to an input validation error when processing the type parameter in the AMHandler.ashx endpoint...
Microsoft Exchange Server Remote Code Execution (CVE-2021-42321)
A remote code execution vulnerability exists in Microsoft Exchange Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Wuzhi CMS SQL Injection (CVE-2021-40674)
An SQL injection vulnerability exists in Wuzhi CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Apache HTTP Server Directory Traversal (CVE-2021-41773; CVE-2021-42013)
A directory traversal vulnerability exists in Apache HTTP Server. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
Advantech iView CommandServlet Directory Traversal (CVE-2021-22656)
A directory traversal vulnerability exists in the Advantech iView. The vulnerability is due to improper validation of user-supplied path when processing the request in CommandServlet Java class...
Microsoft Windows Kernel Elevation of Privilege (CVE-2021-31979)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
HongCMS Directory Traversal (CVE-2020-18178)
A directory traversal vulnerability exists in HongCMS. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
Zen Cart IT-Recht Kanzlei Plugin SQL Injection (CVE-2020-6577)
An SQL injection vulnerability exists in Zen Cart IT-Recht Kanzlei Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Acunetix Web Scanner Privilege Escalation (CVE-2015-4027)
A privilege escalation vulnerability exists in Acunetix Web Vulnerability Scanner. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Kronos Web Time And Attendance Privilege Escalation (CVE-2020-8495)
A privilege escalation vulnerability exists in Kronos Web Time And Attendance. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Advantech iView exportTaskMgrReport Directory Traversal (CVE-2020-16245)
A directory traversal vulnerability exists in Advantech iView. The vulnerability is due to improper validation of user-supplied path before using in exportTaskMgrReport method...
SourceCodester Online Clothing Store SQL Injection (CVE-2020-28138)
An SQL injection vulnerability exists in SourceCodester Online Clothing Store. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Szuray Video Encoder Firmware Command Injection (CVE-2020-24217)
A command injection vulnerability exists in Szuray Video Encoder Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Softdatepro SameDate Pro SQL Injection (CVE-2017-15971)
An SQL injection vulnerability exists in Softdatepro SameDate Pro. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Telerik UI Arbitrary File Upload (CVE-2017-11317; CVE-2017-11357)
An arbitrary file upload vulnerability exists in Telerik UI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
phpFileManager Remote Code Execution (CVE-2015-5958)
A remote code execution vulnerability exists in phpFileManager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress Pie Register Plugin SQL Injection (CVE-2018-10969)
A command execution vulnerability exists in WordPress. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Trend Micro Apex One and OfficeScan Directory Traversal (CVE-2020-8599)
A directory traversal vulnerability exists in Trend Micro Apex One and OfficeScan. The vulnerability is due to improper validation of user-supplied file name in the request...
Microsoft Win32k Elevation of Privilege (CVE-2020-0956)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cisco Data Center Network Manager Command Injection (CVE-2019-15978; CVE-2019-15979)
A command injection vulnerability exists in Cisco Data Center Network Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Dovecot Denial Of Service (CVE-2019-11499; CVE-2020-7046)
A denial-of-service vulnerability exists in Dovecot. Successful exploitation of this vulnerability could cause a denial of service condition on the affected system...
Microsoft Windows DHCP Client Code Execution (CVE-2019-0547)
A remote code execution vulnerability exists in Microsoft DHCP Client. The vulnerability is due to improper processing of DHCP response messages, causing memory corruption. A remote attacker could exploit this vulnerability by sending maliciously crafted DHCP responses to a vulnerable target...
Apache Solr Remote Code Execution (CVE-2019-12409; CVE-2019-17558)
A remote code execution vulnerability exists in Apache Solr. Successful exploitation could result in execution of arbitrary code on the affected system...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-1429)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Pulse Connect Secure Stack Buffer Overflow (CVE-2019-11542)
A stack buffer overflow vulnerability exists in Pulse Connect Secure SSL VPN. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the effected system...
IBM Identity Governance and Intelligence SQL Injection (CVE-2018-1756)
An SQL injection vulnerability exists in IBM Identity Governance and Intelligence. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the affected system...
IBM WebSphere Remote Code Execution (CVE-2019-4279; CVE-2019-8352)
A remote code execution vulnerability exists within IBM WebSphere. Successful exploitation could lead to arbitrary code execution on the targeted device...
Sierra Wireless AirLink Remote Code Execution (CVE-2018-4063)
A remote code execution vulnerability exists in Sierra Wireless AirLink. An authenticated attacker can send A specially crafted HTTP request to upload a file, resulting in executable code being uploaded to the target host...
PHPCMS 2008 type.php Code Injection (CVE-2018-19127)
A code injection vulnerability exists in PHPCMS 2008. An attacker could write arbitrary content to a website cache file with a controllable filename. Successful exploitation of this vulnerability could lead to arbitrary code execution...
Pivotal Spring Framework spring-messaging Module STOMP Remote Code Execution (CVE-2018-1270)
A remote code execution vulnerability has been reported in Pivotal Spring Framework. The vulnerability is due to improper handling of user-supplied input to a STOMP broker in the spring-messaging module. A remote, unauthenticated attacker could exploit this vulnerability by sending maliciously...
Microsoft Windows COM Elevation of Privilege (CVE-2019-0552)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-8617)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
IBM QRadar SIEM Authentication Bypass (CVE-2018-1418)
An authentication bypass exists in IBM QRadar SIEM. This vulnerability is due to a combination of lack of authentication. remote attackers to obtain sensitive information and gain unauthorized access into the affected system...
Microsoft Windows Registry Elevation of Privilege (CVE-2018-8410)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Word Memory Corruption (CVE-2018-0797)
An Office RTF remote code execution vulnerability exists in Microsoft Office software. The vulnerability is due to an error in the way the Office software handles RTF files. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-0774)
A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way that the scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the curre...
Systemd resolved dns_packet_read_type_window Infinite Loop (CVE-2017-15908)
A denial-of-service vulnerability exists in the dnspacketreadtypewindow function of systemdresolved component in the systemd project. This vulnerability is due to the incorrectly parsing of NSEC records in a DNS response. A malicious DNS server could exploit this vulnerability by sending a crafte...
Microsoft Device Guard Security Feature Bypass (CVE-2017-11823)
A security feature bypass vulnerability has been reported in Microsoft Windows Device Guard. The vulnerability is due to the way Device Guard improperly validates certain elements of a signed PowerShell script. A remote attacker could exploit this vulnerability by enticing a target user to open a...
Microsoft Edge Chakra Eval Integer Overflow (CVE-2017-8641)
An integer overflow vulnerability exists in Microsoft Edge Chakra JavaScript Engine. The vulnerability is due to an overly large size of the eval function argument. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...
Microsoft Office Remote Code Execution (CVE-2017-8509)
A remote code execution vulnerability exists in Microsoft Office software. The vulnerability is due to Office software failing to properly handle objects in memory. An attacker can successfully exploit this vulnerability by enticing a user to open a specially crafted file, enabling arbitrary...
Microsoft Windows Kernel Information Disclosure (CVE-2017-0175)
An information disclosure vulnerability exists within Microsoft Windows. The vulnerability is caused when Microsoft Windows kernel improperly handles objects in memory. Successfully exploiting this vulnerability can result in Elevation-of-Privilege...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-0236)
A memory corruption vulnerability exists in Microsoft Edge. The Vulnerability is due to the JScript and VBScript engines improperly handling objects in memory in. Successful exploitation of this vulnerability could allow an unauthenticated user to run arbitrary code with the same rights as the...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-0234)
A Memory Corruption Vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...
Rockwell Automation Logix Controller Stack Buffer Overflow (CVE-2016-9343)
A stack buffer overflow vulnerability exists in Rockwell Automation Logix Controllers. The vulnerability is due to insufficient bounds checking. A successful exploitation could lead to arbitrary code execution...