13538 matches found
WordPress Fastest Cache Plugin Arbitrary File Deletion (CVE-2019-6726)
An arbitrary file deletion vulnerability exists in WordPress Fastest Cache Plugin. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target system...
Microsoft Edge Security Feature Bypass (CVE-2019-0612)
A security bypass vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...
OMRON CX-One SBA File Parsing Buffer Overflow (CVE-2018-7514)
A heap-based overflow exists in OMRON CX-One SBA File Parsing. The vulnerability is due to input validation error when processing the SBA configuration file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
TP-Link HTTP server ping address remote code execution (CVE-2018-3950)
An exploitable remote code execution vulnerability exists in TP-Link TL-R600VPN http server. A specially crafted IP address can cause a stack overflow, resulting in remote code execution. An attacker can send a single authenticated HTTP request to trigger this vulnerability...
Microsoft Edge and Internet Explorer Chakra Out of Bounds Read (CVE-2018-8145)
An out of bounds read vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
HPE Intelligent Management Center DBMan RestoreDBase MySQL Command Injection (CVE-2017-5819)
A command injection vulnerability exists in the dbman component of HPE Intelligent Management Center. The vulnerability exists due to missing validation when handling MySQL databases commands...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-0994)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-0980)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Use After Free (APSB18-02: CVE-2018-4911)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-0860)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Nitro Pro PDF Reader JavaScript API Remote Code Execution (CVE-2017-7442)
A Remote Code Execution Vulnerability exists in JavaScript API of Nitro and Nitro Pro PDF Reader. The vulnerability is due to the use of trusted function which provides certain privileges that allows overwriting objects. A remote attacker can exploit this vulnerability by enticing the user to ope...
Microsoft Device Guard Code Integrity Policy Security Feature Bypass (CVE-2017-0215)
A security feature bypass vulnerability exists in Microsoft Windows Device Guard. The vulnerability is due to the way Device Guard improperly validates certain elements of a signed PowerShell script. A remote attacker could exploit this vulnerability by enticing a target user to open a specially...
Red Hat JBoss BPM Suite BRMS Tasks List Cross-Site Scripting (CVE-2017-2674)
A cross-site scripting vulnerability exists in Red Hat JBoss BPM Suite and JBoss BRMS. The vulnerability is due to insufficient validation of user supplied input within the Tasks List component of business-central. An authenticated attacker can exploit this vulnerability by creating a malicious...
Winamp Maki File Buffer Overflow (CVE-2009-1831)
A buffer overflow vulnerability has been reported in Nullsoft Winamp. The vulnerability is due to an incorrect type cast while parsing a .maki file, causing a buffer overflow. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...
CakePHP Cache Corruption Code Execution (CVE-2010-4335)
A remote code execution vulnerability exists in CakePHP. The vulnerability is due to the way the security component of CakePHP fails to validate user input. A remote attacker can exploit this issue by sending a specially crafted HTTP request...
Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0072)
A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...
Trend Micro Smart Protection Server admin_notification.php Command Injection (CVE-2016-6267)
A remote code execution vulnerability exists in the adminnotification.php script of Trend Micro Smart Protection Server. The vulnerability is due to insufficient validation of user-supplied input. A remote, authenticated attacker could exploit this vulnerability by providing crafted input to the...
Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7240)
A memory corruption vulnerability exists in Microsoft Edge. The vulnerability is due to the way Chakra JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...
Symantec Antivirus Decomposer Engine dec2lha Library Remote Stack Buffer Overflow (CVE-2016-2210)
A stack buffer overflow vulnerability exist in the Symantec Antivirus Decomposer Engine dec2lha Library. This vulnerability is due to incorrect decompression of the LZH and LHA archives...
Microsoft Edge Memory Corruption (MS16-068: CVE-2016-3222)
A memory corruption vulnerability has been reported in Microsoft Edge. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit the vulnerability by enticing the target user to open a specially crafted web page. Successful exploitation could lead to...
DotNetNuke Administration Authentication Bypass (CVE-2015-2794)
An authentication bypass vulnerability exists in DotNetNuke. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...
Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6152)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
GnuTLS DistinguishedName Decoding Double Free (CVE-2015-6251)
A double-free vulnerability has been reported in GnuTLS. The vulnerability is due to an error within gnutlsx509dntostring while processing very long Distinguished Name values in X.509 certificates. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted certificate ...
Websense Triton Content Manager handle_debug_network Stack Buffer Overflow (CVE-2015-5718)
A stack buffer overflow vulnerability exists in Websense Triton Content Manager. The vulnerability is due to calling "strcpy" without boundary checking. A remote unauthenticated attacker can overflow the "dest" buffer in "handledebugnetwork"...
Oracle Database Client System Analyzer Arbitrary File Upload Code Execution (CVE-2010-3600)
A directory traversal and remote code-execution vulnerability exists in Oracle Database Server 11 and Enterprise Manager Grid Control 10. The vulnerability is found in a JSP application and permits a directory traversal. Successful exploit will allow a remote attacker to execute arbitrary code on...
ManageEngine Multiple Products Multiple SQL Injections (CVE-2014-7868)
An SQL injection vulnerability exists in ManageEngine OpManager, Social IT Plus and IT360. The vulnerability is due to insufficient input validation of the OPMBVNAME parameter when processing requests using the APMBVHandler servlet. A remote attacker can exploit this vulnerability to inject and...
Microsoft Windows GDI+ GIF Parsing Buffer Overflow (MS08-052) - Ver2 (CVE-2008-3013)
Graphics Interchange Format GIF images are 8-bit files that support transparency, compression, interlacing, and multiple-image pictures animated GIFs. A remote code execution vulnerability has been discovered in the way GDI+ parses GIF images. The vulnerability is due to a buffer overrun when GDI...
ManageEngine Multiple Products Multiple Directory Traversal (CVE-2014-7866)
A directory traversal vulnerability exists in ManageEngine OpManager, Social IT Plus and IT360. The vulnerability is due to lack of authentication and insufficient input validation in HTTP requests. A remote unauthenticated attacker can exploit this vulnerability by uploading arbitrary files to...
Microsoft Windows MS-DOS Device Name Elevation of Privilege (MS15-038; CVE-2015-1644)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is caused when Microsoft Windows fails to properly validate and enforce impersonation levels. A remote attacker can exploit this issue by logging on to the system and running a specially crafted application...
Samsung iPOLiS Device Manager WriteConfigValue Stack Buffer Overflow (CVE-2015-0555)
A stack-based buffer overflow vulnerability exists in Samsung iPOLiS Device Manager. The vulnerability is due to insufficient input validation of a parameter passed to WriteConfigValue of the XnsSdkDeviceIpInstaller ActiveX control. A remote attacker can exploit this vulnerability by enticing a...
Microsoft IIS 5.0 ISAPI Internet Printing Protocol Extension Buffer Overflow - Ver2 (CVE-2001-0241)
A buffer overflow in this extension IIS 5.0 can permit remote attackers to execute arbitrary code on the web server with the same privileges as the web server. The ISAPI .printer extension permits the submitting and controlling of print jobs over HTTP. There exists an unchecked buffer in the Host...
Microsoft Internet Explorer Memory Corruption (MS15-009: CVE-2015-0050)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
ManageEngine Multiple Products File Attachment Directory Traversal (CVE-2014-5301)
A directory traversal vulnerability exists in ManageEngine ServiceDesk Plus, AssetExplorer, SupportCenter and IT360. The vulnerability is due to insufficient input validation of the "module" parameter sent in HTTP requests to the server. A remote authenticated attacker can upload or delete...
Advantech ADAMView Conditional Bitmap Remote Code Execution (CVE-2014-8386)
A stack-buffer overflow has been reported in Advantech ADAMView. The vulnerability is due to insufficient validation of conditional bitmaps from a file...
Microsoft Windows Directory Traversal Elevation of Privilege (MS15-004; CVE-2015-0016)
An elevation of privilege vulnerability exists in Windows Components. The vulnerability is caused when Windows fails to properly sanitize file paths. An attacker can exploit this vulnerability by tricking a user into downloading a specially crafted application...
CA ARCserve Backup Tape Engine Denial of Service - Ver2 (CVE-2008-4398)
There exists a denial of service vulnerability in CA BrightStor ARCserve Backup Tape Engine service. The vulnerability is due to insufficient input validation in the ClientCreateJobHandle library function. A remote unauthenticated attacker may exploit this vulnerability by sending a crafted messa...
CA ERwin Web Portal ConfigServiceProvider Information Disclosure (CVE-2014-2210)
An information disclosure vulnerability exists in CA ERwin Web Portal. Upon executing a successful attack, the server will give access to XML files which normally should not be accessible to external users. This vulnerability is due to lack of authentication and insufficient input validation in t...
Microsoft Outlook AttachMethods Remote Code Execution - Ver2 (CVE-2010-0266)
A code execution inclusion vulnerability has been reported in Microsoft Office Outlook. The vulnerability is due to an error in Microsoft Office Outlook that fails to properly verify the file extension of an attachment in a specially crafted e-mail message. Successful exploitation of this...
Zavio IP Camera Firmware 1.6.03 Authentication Bypass - Ver2 (CVE-2013-2567)
An authentication bypass vulnerability has been reported in the Zavio IP Camera firmware. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...
Apple Products SSLVerifySignedServerKeyExchange Security Feature Bypass (CVE-2014-1266)
There exists a security feature bypass vulnerability in Apple products. The vulnerability is due to the SSLVerifySignedServerKeyExchange function in the Secure Transport feature not checking the signature in a TLS Server Key Exchange message. This vulnerability allows man-in-the-middle attackers ...
Microsoft Works WPS File Field Length Handling Stack Overflow (MS08-011) - Ver2 (CVE-2008-0108)
Microsoft Works is home productivity software suite with fewer features than the Microsoft Office suite. The Microsoft Works Converter allows the user to open, edit, and save files in the Microsoft Works file format. CVE-2007-0216: The vulnerability is due to an error in the Microsoft Works...
Novell Client EnumPrinters Buffer Overflow - Ver2 (CVE-2008-0639)
A buffer overflow vulnerability has been reported in Novell Client. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Indexing Service Loop Counter Underwrap Code Execution - Ver2 (CVE-2009-2507)
A remote code execution vulnerability has been reported in the Microsoft Indexing Service. A remote attacker could exploit this vulnerability by enticing a user to visit a malicious Web page. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on...
OPENi-CMS Plugin index.php oi_dir Parameter PHP Code Execution - Ver2 (CVE-2007-0881)
A code execution vulnerability has been reported inSeitenschutz plugin for OPENi-CMS 1.0. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Office PNG File Parsing Buffer Overflow (MS13-051; CVE-2013-1331) - ver 2
A remote code execution vulnerability has been reported in Microsoft Office...
Microsoft Windows RAS Manager Registry Corruption (CVE-2006-2371)
A buffer overflow vulnerability has been reported in Microsoft Routing and Remote Access Service. The flaw is caused by improper boundary checking of user-supplied data to the Routing and Remote Access service. A remote attacker may leverage this vulnerability by sending a crafted request to the...
Microsoft Windows SMB Client Repeated Negotiation Responses (MS10-006) - High Confidence (CVE-2010-0017)
A remote code execution vulnerability has been reported in the Microsoft Server Message Block SMB Protocol. The vulnerability is due to a race condition in the Microsoft SMB implementation that fails to properly handle specially crafted SMB responses. A remote attacker could exploit this flaw by...
EMC AlphaStor Device Manager Buffer Overflow (CVE-2013-0930)
A stack-based buffer overflow vulnerability has been reported in EMC AlphaStor Device Manager. The vulnerability is due to a lack of boundary checking when processing certain opcode messages in rrobotd.exe. Unauthenticated attackers can exploit this vulnerability to execute arbitrary code in the...
Microsoft .NET Framework WinForms Information Disclosure (CVE-2013-0001)
A remote code execution vulnerability has been reported in the Microsoft .NET Framework. The vulnerability is due to the way WinForms handles pointers to unmanaged memory locations.A remote, unauthenticated attacker can exploit this vulnerability by either enticing a user to visit a maliciously...