Oracle Database Server Workspace Manager Multiple SQL Injection (CVE-2008-3982)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

Update Protection against IBM Tivoli Storage Manager Client CAD Service Buffer Overflow

A buffer overflow vulnerability exists in IBM Tivoli Storage Manager Client software, a backup designed to protect data from failures and other errors by storing backups and archiving data. The vulnerability is due to a boundary error in the Client Acceptor Daemon CAD service while processing a...

Microsoft Active Directory Federation Services Code Execution (MS09-070; CVE-2009-2509)

Active Directory provides central authentication and authorization services for Windows-based systems. Active Directory Federation Services ADFS helps the client to use single sign-on by securely sharing digital identity and entitlement rights across security and enterprise boundaries. A remote...

Microsoft Media Player HeaderExtensionObject Heap Overflow (MS09-052; CVE-2009-2527)

A remote code execution vulnerability exists in the way that Windows Media Player 6.4 handles specially crafted ASF files. Windows Media Player is an application for Windows that supports numerous video, audio, and image formats. ASF Advanced Systems Format is a file format that stores audio and...

Nullsoft Winamp Ultravox Streaming Metadata Parsing Stack Buffer Overflow (CVE-2008-0065)

NullSoft Winamp is a multimedia player that is capable of playing back many audio/video formats and streaming protocols. Winamp supports the Ultravox media streaming format, a proprietary streaming media protocol developed by AOL. There exists a buffer overflow vulnerability in Nullsoft Winamp...

Ipswitch WhatsUp Web Interface SQL Injection (CVE-2005-1250)

WhatsUp Professional 2005 is a network monitoring and resource management solution. WhatsUp Professional uses a relational database to store the information about user accounts and network devices that are monitored by the application. The relational databases supported by WhatsUp Professional ar...

Microsoft Windows MP3 File Media Playback Memory Corruption (MS09-047; CVE-2009-2499)

MPEG-1 Audio Layer 3 MP3 is a file format which uses lossy compression to compress audio information. A remote code execution vulnerability has been reported in the way Microsoft Windows handles specially crafted MP3 media files. The vulnerability is due the Windows component responsible for...

Internet Explorer Memory Corruption (MS09-034; CVE-2009-1917)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in the way that Internet Explorer handles a memory object. When Internet Explorer attempts to access an object that has been deleted, memory may be corrupted in such a way that an...

IBM Lotus Domino Web Server HTTP Header Buffer Overflow (CVE-2008-2240)

IBM Lotus Domino is a server product that provides enterprise-grade e-mail, collaboration capabilities, and custom application platform. A stack buffer overflow vulnerability was reported in the IBM Lotus Domino Web Server application. The vulnerability is due to an error in the IBM Lotus Domino...

Update Protection against Multiple Trend Micro ServerProtect Buffer Overflow Vulnerabilities

Trend Micro ServerProtect is prone to multiple buffer overflow vulnerabilities. Trend Micro ServerProtect is a centrally managed virus protection console for enterprise-class servers. A remote attacker may exploit these issues to execute arbitrary code on a vulnerable system via a specially craft...

Microsoft Windows Malformed RTF Handling Code Execution (MS07-011; CVE-2006-1311; CVE-2007-0025; CVE-2007-0026)

Rich Text Format RTF provides a format for text and graphics interchange that can be used with different operating systems. OLE is the technology that applications use to create and edit compound documents. By using OLE technology, an application can provide embedding and linking support. By...

MS-RPC Programs Lookup (CVE-2006-1314)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

Update Protection against Microsoft Outlook Express Windows Address Book File Vulnerability (MS06-016)

Microsoft Outlook Express is a commonly used email application. A vulnerability has been discovered in the file which contains the address book of Outlook Express, potentially allowing a malicious attacker to take control of the affected machine...

Netgear R6200v2 Command Injection (CVE-2022-30079)

A command injection vulnerability exists in Netgear R6200v2. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Nagios IM SQL Injection (CVE-2019-9204)

An SQL injection vulnerability exists in Nagios IM. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Adobe ColdFusion Information Disclosure (APSB22-44: CVE-2022-38422)

An information disclosure vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Adobe ColdFusion Improper Restriction of XML External Entity (APSB22-44: CVE-2022-42341)

An Improper Restriction of XML External Entity vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Datalust Seq Authentication Bypass (CVE-2018-8096)

An authentication bypass vulnerability exists in Datalust Seq. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Microsoft SharePoint Server Remote Code Execution (CVE-2022-38053)

A remote code execution vulnerability exists in Microsoft SharePoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

ImageMagick ReadXBMImage Information Disclosure (CVE-2018-16323)

An information disclosure vulnerability exists in ImageMagick. The vulnerability is due to improper handling of memory buffer by ReadXBMImage. A remote attacker could exploit this vulnerability by having an affected application that implements ImageMagick process a maliciously crafted file...

Microsoft DirectX Graphics Kernel Elevation of Privilege (CVE-2022-37954)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

D-Link DAP-1860 Command Injection (CVE-2019-19597)

A command injection vulnerability exists in D-Link DAP-1860. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Tenda M3 Router Buffer Overflow (CVE-2022-32035)

A buffer overflow vulnerability exists in Tenda M3 Router. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

Adobe Acrobat and Reader Access of Uninitialized Pointer (APSB22-32: CVE-2022-34228)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

ShopWind Remote Code Execution (CVE-2022-30453)

A remote code execution vulnerability exists in ShopWind. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Win32k Elevation of Privilege (CVE-2022-24542)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

GitLab Community and Enterprise Cross-Site Scripting (CVE-2021-22241)

A stored cross-site scripting vulnerability exists in the Community edition and Enterprise edition of GitLab. The vulnerability is due to improper input validation of the default branch name...

Wuzhi CMS SQL Injection (CVE-2020-20122)

An SQL injection vulnerability exists in Wuzhi CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Advantech iView CommandServlet Directory Traversal (CVE-2021-22656)

A directory traversal vulnerability exists in the Advantech iView. The vulnerability is due to improper validation of user-supplied path when processing the request in CommandServlet Java class...

Google Chrome Heap Corruption (CVE-2019-13764)

A heap corruption vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Advantech iView deleteZtpConfig SQL Injection (CVE-2021-32932)

A SQL injection vulnerability exists in the Advantech iView. The vulnerability is due to improper validation of user-supplied input when processing the request in method in Java class...

Microsoft .NET Framework Privilege Escalation (CVE-2015-2504)

A privilege escalation vulnerability exists in Microsoft .NET Framework. The vulnerability is due to an issue with the way that the .NET Framework validates the number of objects in memory before copying those objects into an array. A remote attacker code exploit this vulnerability by enticing a...

VMware vSphere Client Remote Code Execution (CVE-2021-21972; CVE-2021-21973)

A remote code execution vulnerability exists in VMware vSphere Client. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress Core Cross Site Scripting (CVE-2019-16223)

A cross site scripting vulnerability exists in WordPress Core. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

FasterXML jackson-databind Remote Code Execution (CVE-2020-14645; CVE-2020-24616; CVE-2020-8840)

FasterXML jackson-databind is a java library that contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor, under the right conditions, exploit Java applications performing unsafe deserialization of objects. Successful exploitation of unsafe deserializatio...

Libbpg Project Out of Bounds Write (CVE-2016-8710)

A remote code execution vulnerability exists in Libbpg project Libbpg. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Gonitro Nitro Pro Integer Overflow (CVE-2020-6092)

An integer overflow vulnerability exists in Gonitro Nitro Pro. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Szuray Video Encoder Firmware Command Injection (CVE-2020-24217)

A command injection vulnerability exists in Szuray Video Encoder Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Node.js Express Fileupload Remote Code Execution (CVE-2020-7699)

A remote code execution vulnerability exists in Node.js express-fileupload package. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Elasticsearch Privilege Escalation (CVE-2020-7014)

A privilege escalation vulnerability exists in Elasticsearch. An attacker who is able to generate an API key and an authentication token can perform a series of steps that result in an authentication token being generated with elevated privileges...

WordPress 10Web Photo Gallery Plugin Cross Site Scripting (CVE-2020-9335)

A cross site scripting vulnerability exists in WordPress 10Web Photo Gallery plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Zyxel Cloud CNM SecuManager Remote Code Execution (CVE-2020-15348)

A remote code execution vulnerability exists in Zyxel Cloud CNM SecuManager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows DHCP Client Code Execution (CVE-2019-0547)

A remote code execution vulnerability exists in Microsoft DHCP Client. The vulnerability is due to improper processing of DHCP response messages, causing memory corruption. A remote attacker could exploit this vulnerability by sending maliciously crafted DHCP responses to a vulnerable target...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2020-0634)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

StrongSwan OpenSSL Plugin FIPS Mode Denial-of-Service (CVE-2018-10811)

A denial-of-service vulnerability exists in StrongSwan. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1366)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Elevation of Privilege (CVE-2019-1341)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Internet Explorer Use After free (CVE-2019-1367)

A use-after-free vulnerability exists in Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Flash Player Same Origin Method Execution (APSB19-46: CVE-2019-8069)

A vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Cisco Elastic Services Controller REST API Authentication Bypass (CVE-2019-1867)

An authentication bypass vulnerability exists in the REST API of Cisco Elastic Services Controller. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code with administrative privileges on the target machine...