Ipswitch IMail Server Imailsec.dll Heap Buffer Overflow (CVE-2007-2795)

Ipswitch IMail server is a messaging service suite that supports numerous Internet standard electronic mail exchanging protocols. The IMail IMAP server is a server-side implementation of the IMAP protocol. There exists a heap overflow vulnerability in Ipswitch IMail Server IMAP component. The...

Nullsoft Winamp CAF File Processing Integer Overflow (CVE-2009-0186)

Nullsoft Winamp is a multimedia player application that is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files as well as numerous other formats. It is also capable of reading CAF media file which has file extension .caf. A...

WordPerfect Multiple Vendor libwpd WP3TablesGroup Heap Overflow (CVE-2007-0002)

WordPerfect documents have common file extensions ".WP" and ".WPD", which is used by Corel's proprietary word processing application, WordPerfect. Its popularity was based on the fact that it had been available for a wide variety of computers and operation systems, including Mac OS, Linux, and...

Preemptive Protection against Microsoft Internet Information Services FTP Server Remote Buffer Overflow Vulnerability (MS09-053)

A remote code execution vulnerability has been discovered in Microsoft Internet Information Services IIS. IIS is a collection of Internet services packaged with several versions of the Windows operating system. IIS includes a FTP server service for exchanging and manipulating files over a TCP...

Invalid IIS ASP.Net URI Character Request (CVE-2009-1536)

A denial of service vulnerability has been reported in ASP.NET. ASP.NET is a collection of technologies within the.NET Framework that enable developers to build Web applications and XML Web Services. A remote attacker may exploit this issue to cause a vulnerable server to become non-responsive...

Internet Explorer Memory Corruption (MS09-034; CVE-2009-1917)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in the way that Internet Explorer handles a memory object. When Internet Explorer attempts to access an object that has been deleted, memory may be corrupted in such a way that an...

Update Protection against Oracle BEA WebLogic Server Plug-ins Certificate Buffer Overflow

A buffer overflow vulnerability was reported in BEA WebLogic Server, an Application Server platform for large enterprise web applications. The vulnerability is due to a boundary error while parsing SSL certificates. A remote unauthenticated attacker can exploit this vulnerability by sending a...

Windows Executable (PE) Files (CVE-2008-1437; CVE-2010-0233)

The Microsoft Malware Protection Engine provides the scanning, detection and cleaning capabilities for the following antivirus and antispyware clients: Windows Live OneCare, Microsoft Forefront Security, Microsoft Antigen, and Windows Defender. A denial of service vulnerability has been reported ...

Update Protection against Multiple Trend Micro ServerProtect Buffer Overflow Vulnerabilities

Trend Micro ServerProtect is prone to multiple buffer overflow vulnerabilities. Trend Micro ServerProtect is a centrally managed virus protection console for enterprise-class servers. A remote attacker may exploit these issues to execute arbitrary code on a vulnerable system via a specially craft...

Preemptive Protection against Ipswitch IMail Server IMAP SUBSCRIBE Command Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Ipswitch IMail Server IMAP component. Ipswitch IMail server is a messaging service suite that supports numerous mail exchanging protocols, including the Internet Message Access Protocol IMAP. IMAP is a standard protocol for accessing e-mail from a local...

Internet Explorer COM Object Instantiation Memory Corruption (MS07-033; CVE-2007-0218; CVE-2007-2222)

COM objects are used to enable data exchange between processes and the creation of dynamic object in different programming languages.Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer and in Microsoft Speech COM objects.A remote attacker could exploit...

MS-RPC Programs Lookup (CVE-2006-1314)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

Update Protection against Microsoft Outlook Express Windows Address Book File Vulnerability (MS06-016)

Microsoft Outlook Express is a commonly used email application. A vulnerability has been discovered in the file which contains the address book of Outlook Express, potentially allowing a malicious attacker to take control of the affected machine...

Tenda AC10 Command Injection (CVE-2022-32054)

A command injection vulnerability exists in Tenda AC10 router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Super Flexible Software Syncovery Cross-site Scripting (CVE-2022-36533)

A cross-site scripting vulnerability exists in Super Flexible Software Syncovery. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Delta Industrial Automation DIAEnergie Cross-Site Scripting (CVE-2021-44471)

A stored cross-site scripting vulnerability exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to input validation error when processing name parameter in HandlerAlarmGroup.ashx endpoint...

H3C GR-1200W Router Command Injection (CVE-2022-37070)

A command injection vulnerability exists in H3C GR-1200W Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

D-Link DIR882 Command Injection (CVE-2022-28895; CVE-2022-28896)

A command injection vulnerability exists in D-Link DIR882. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Adobe ColdFusion Arbitrary File Read And Deletion (APSB22-44: CVE-2022-38424)

A arbitrary file read and deletion vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Bonitasoft Bonita Web Authorization Bypass (CVE-2022-25237)

An authorization bypass vulnerability exists in Bonitasoft Bonita Web. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary code...

Microsoft Windows NFS ONCRPC XDR Driver Information Disclosure (CVE-2022-21993)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Point-to-Point Tunneling Protocol Remote Code Execution (CVE-2022-23270)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Nagios XI Remote Code Execution (CVE-2021-40344)

A remote code execution vulnerability exists in Nagios XI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-36955)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Aruba Instant Access Point Remote Code Execution (CVE-2021-25155)

A remote code execution vulnerability exists in Aruba Instant Access Point. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CRMEB Arbitrary File Upload (CVE-2020-21787)

An arbitrary file upload vulnerability exists in CRMEB. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Jenkins Credentials Plugin Cross-Site Scripting (CVE-2021-21648)

A reflected cross-site scripting vulnerability exists in Jenkins Credentials Plugin. This vulnerability is due to insufficient validation of user-controlled information on the upload certificate view provided by Credentials plugin...

Course Registration Management System Cross Site Scripting (CVE-2021-29663)

A cross-site scripting vulnerability exists in Course Registration Management System. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

InoERP Remote Code Execution (CVE-2020-28870)

A remote code execution vulnerability exists in InoERP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Belkin Linksys RE6500 Remote Code Execution (CVE-2020-35713)

A remote code execution vulnerability exists in Belkin Linksys RE6500. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

TerraMaster TOS Command Injection (CVE-2020-28188)

A command injection vulnerability exists in TerraMaster TOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Grandstream GXP1600 Remote Code Execution (CVE-2020-5738)

A remote code execution vulnerability exists in Grandstream GXP1600. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Node.js Express Fileupload Remote Code Execution (CVE-2020-7699)

A remote code execution vulnerability exists in Node.js express-fileupload package. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Elasticsearch Privilege Escalation (CVE-2020-7014)

A privilege escalation vulnerability exists in Elasticsearch. An attacker who is able to generate an API key and an authentication token can perform a series of steps that result in an authentication token being generated with elevated privileges...

Oracle Hospitality Simphony Remote Code Execution (CVE-2018-2636)

A vulnerability exists in Oracle Hospitality Simphony. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Kibana Elasticsearch Server Side Request Forgery (CVE-2019-7616)

A server side request forgery vulnerability exists in Kibana Elasticsearch. Successful exploitation of this vulnerability could possibly lead to an attacker accessing external URL resources as the Kibana process on the host system...

Wechat Brodcast Project Directory Traversal (CVE-2018-16283)

A directory traversal vulnerability exists in wechat brodcast project wechat brodcast x=1.2.0. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Zen Load Balancer Remote Code Execution (CVE-2019-7301)

A remote code execution vulnerability exists in Zen Load Balancer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Internet Explorer Memory Corruption(CVE-2019-1194)

A memory corruption vulnerability exists in microsoft internet explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft VBScript Remote Code Execution (CVE-2020-1035)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

HPE Intelligent Management Center Remote Code Execution (CVE-2019-11942)

A remote code execution vulnerability exists in HPE Intelligent Management Center. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Nagios Xi Remote Command Execution (CVE-2019-9164)

A command execution vulnerability exists in nagios nagios xi r1.0. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

StrongSwan OpenSSL Plugin FIPS Mode Denial-of-Service (CVE-2018-10811)

A denial-of-service vulnerability exists in StrongSwan. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft Office Remote Code Execution (CVE-2018-0798)

A stack-based buffer overflow vulnerability exists in Microsoft Office. A remote, unauthenticated attacker can exploit this vulnerability by supplying a maliciously crafted OLE file to the affected target...

Zoom Client Webcam Hijacking (CVE-2019-13450)

A Webcam Hijacking vulnerability exists in Zoom Client for macOS. A machine remains vulnerable if the Zoom Client was installed in the past and then uninstalled. A remote attacker can force a user to join a video call with the video camera active...

TP-Link TL-WR Buffer Overflow Remote Code Execution (CVE-2019-6989)

An arbitrary code execution vulnerability exists in TP-LINK TL-WR940N and TL-WR941ND. A remote attacker can exploit this vulnerability by sending a maliciously crafted packet to the target server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...

LG SuperSign EZ CMS 2.5 Remote Code Execution (CVE-2018-17173)

A remote code execution vulnerability is exist in LG SuperSign EZ CMS. Successful exploitation could result in arbitrary code execution on the target system...

Microsoft Edge Security Feature Bypass (CVE-2019-0612)

A security bypass vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...

OMRON CX-One SBA File Parsing Buffer Overflow (CVE-2018-7514)

A heap-based overflow exists in OMRON CX-One SBA File Parsing. The vulnerability is due to input validation error when processing the SBA configuration file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

TP-Link HTTP server ping address remote code execution (CVE-2018-3950)

An exploitable remote code execution vulnerability exists in TP-Link TL-R600VPN http server. A specially crafted IP address can cause a stack overflow, resulting in remote code execution. An attacker can send a single authenticated HTTP request to trigger this vulnerability...