13538 matches found
Adobe Flash Player Same Origin Method Execution (APSB19-46: CVE-2019-8069)
A vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Cisco Elastic Services Controller REST API Authentication Bypass (CVE-2019-1867)
An authentication bypass vulnerability exists in the REST API of Cisco Elastic Services Controller. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code with administrative privileges on the target machine...
IBM Identity Governance and Intelligence SQL Injection (CVE-2018-1756)
An SQL injection vulnerability exists in IBM Identity Governance and Intelligence. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1139)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1062)
...
Microsoft MS XML Remote Code Execution (CVE-2019-0793)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Security Feature Bypass (CVE-2019-0612)
A security bypass vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...
Pivotal Spring Framework spring-messaging Module STOMP Remote Code Execution (CVE-2018-1270)
A remote code execution vulnerability has been reported in Pivotal Spring Framework. The vulnerability is due to improper handling of user-supplied input to a STOMP broker in the spring-messaging module. A remote, unauthenticated attacker could exploit this vulnerability by sending maliciously...
OMRON CX-One CX-Position module Buffer Overflow (CVE-2018-18993)
A stack-based overflow exists in OMRON CX-One CX-Position module. A remote attacker could exploit this vulnerability by enticing a target user into opening a maliciously crafted project file. Successful exploitation could result in arbitrary code execution...
Zoho ManageEngine Desktop Central Arbitrary File Deletion (CVE-2018-12999)
An arbitrary file deletion vulnerability exists in Zoho ManageEngine Desktop Central. The vulnerability is due to insufficient input validation in requests handled by AgentTrayIconServlet...
Microsoft Edge Memory Corruption (CVE-2018-8111)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-0980)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-0994)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Google Chrome Type Confusion (CVE-2018-6064)
A type confusion vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Viscom Software Movie Player Pro SDK ActiveX Buffer Overflow (CVE-2010-0356)
A buffer overflow vulnerability has been reported in Viscom Software Movie Player Pro SDK. The vulnerability is due to mishandling of an overly long string. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cesanta Mongoose DNS Compressed Name Denial of Service (CVE-2017-2909)
An infinite loop vulnerability exists in the DNS server functionality of Cesanta Mongoose. The vulnerability is due to insufficient handling of compressed names in DNS queries and responses. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted DNS query or respon...
Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-8524)
A remote code execution Vulnerability exists in Microsoft Edge and Internet Explorer 11. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a speciall...
Microsoft Office Remote Code Execution (CVE-2017-8509)
A remote code execution vulnerability exists in Microsoft Office software. The vulnerability is due to Office software failing to properly handle objects in memory. An attacker can successfully exploit this vulnerability by enticing a user to open a specially crafted file, enabling arbitrary...
Joomla com_fields Component SQL Injection (CVE-2017-8917)
An SQL injection vulnerability exists in Joomla comfields Component. Remote attackers may leverage this vulnerability to gain arbitrary code execution over the vulnerable server...
Aerospike Database Server Stack Buffer Overflow (CVE-2016-9052; CVE-2016-9054)
A memory corruption vulnerability has been reported in Aerospike Database Server. This vulnerability is due to improper bounds checking of user-supplied variable. A remote attacker could exploit these vulnerabilities by sending a maliciously crafted packet to the vulnerable server...
Microsoft Office Security Feature Bypass (MS16-148: CVE-2016-7262)
A security feature bypass vulnerability exists in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this vulnerability by enticing a victim to open a specially...
VideoCharge Software Watermark Master (CVE-2013-6935)
A stack based buffer overflow vulnerability was found in Watermark Master 2.2.23. The vulnerability is due to an error when Watermark Master improperly handles a specially crafted WCF file. Remote attackers can exploit this vulnerability and execute arbitrary code on the target machine by enticin...
Microsoft Edge Memory Corruption (MS16-068: CVE-2016-3222)
A memory corruption vulnerability has been reported in Microsoft Edge. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit the vulnerability by enticing the target user to open a specially crafted web page. Successful exploitation could lead to...
WordPress Simple Ads Manager Plugin Arbitrary File Inclusion (CVE-2015-2825)
A File Inclusion vulnerability exists in WordPress Simple Ads Manager Plugin. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...
Juniper Networks ScreenOS Authentication Bypass (CVE-2015-7755)
An authentication bypass vulnerability exists in Juniper Networks ScreenOS. The vulnerability is due to the presence of a default administrative account with a hard-coded password. A remote, unauthenticated attacker could exploit this vulnerability to gain administrative access to the target...
Sun Solaris DHCP Daemon Code Execution (CVE-2007-5365)
Multiple vulnerabilities have been reported in the Sun Solaris DHCP daemon that could be exploited by remote attackers to execute arbitrary code over the vulnerable system. The vulnerabilities are due to an insecure design in the DHCP in.dhcpd server while handling DHCP requests. Remote attackers...
ManageEngine Multiple Products Multiple SQL Injections (CVE-2014-7868)
An SQL injection vulnerability exists in ManageEngine OpManager, Social IT Plus and IT360. The vulnerability is due to insufficient input validation of the OPMBVNAME parameter when processing requests using the APMBVHandler servlet. A remote attacker can exploit this vulnerability to inject and...
Samsung iPOLiS Device Manager WriteConfigValue Stack Buffer Overflow (CVE-2015-0555)
A stack-based buffer overflow vulnerability exists in Samsung iPOLiS Device Manager. The vulnerability is due to insufficient input validation of a parameter passed to WriteConfigValue of the XnsSdkDeviceIpInstaller ActiveX control. A remote attacker can exploit this vulnerability by enticing a...
Microsoft IIS 5.0 ISAPI Internet Printing Protocol Extension Buffer Overflow - Ver2 (CVE-2001-0241)
A buffer overflow in this extension IIS 5.0 can permit remote attackers to execute arbitrary code on the web server with the same privileges as the web server. The ISAPI .printer extension permits the submitting and controlling of print jobs over HTTP. There exists an unchecked buffer in the Host...
HP Universal CMDB JMX Console Authentication Bypass (CVE-2014-7883)
An authentication bypass vulnerability exists in HP Universal CMDB. The vulnerability is in the JMX Console web application. The vulnerability is due to a design weakness in processing HTTP requests that are neither GET nor POST. A remote unauthenticated attacker can exploit this vulnerability by...
TCPDUMP ISAKMP Payload Handling DoS (CVE-2004-0183)
Tcpdump parses and displays, and optionally records packets received on a network interface matching a user provided filter. Two vulnerabilities exist in the Tcpdump ISAKMP payload handling module, which can be exploited to cause a DoS Denial of Service by sending packets with specially crafted...
Microsoft Host Integration Server Remote Command Execution (MS08-059) - Ver2 (CVE-2008-3466)
Microsoft Host Integration Server HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging, and security systems. . A remote code execution vulnerability has been...
Microsoft .NET Framework S.DS.P Namespace Method Buffer Overflow - Ver2 (CVE-2013-0003)
A buffer overflow exists in the System.DirectoryServices.Protocols S.DS.P namespace method in the .NET framework. The vulnerability is due to an error in the validation of the size of objects in memory prior to copying them into an array.An attacker can remotely exploit this vulnerability by...
Joomla Component com_projectfork Local File Inclusion (CVE-2009-2100)
A file inclusion vulnerability has been reported in Joomlapraise Com Projectfork. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
HP Sprinter Tidestone Formula One ActiveX Multiple Memory Corruption (CVE-2014-2635)
Multiple vulnerabilities exist in HP Sprinter. The vulnerabilities are in methods AttachToSS, CopyRange, CopyRangeEx, and SwapTables within the Tidestone Formula One ActiveX control. A remote, unauthenticated attacker could exploit this vulnerability by enticing an unsuspecting victim to follow a...
ManageEngine Multiple Products multipartRequest Directory Traversal (CVE-2014-6036)
A directory traversal vulnerability exists in ManageEngine OpManager, Social IT Plus and IT360. The vulnerability is due to lack of authentication and insufficient input validation on parameters sent to "/servlets/multipartRequest" in HTTP requests. A remote unauthenticated attacker can delete...
HP Network Virtualization toServerObject Directory Traversal (CVE-2014-2626)
A directory traversal vulnerability exists in HP Network Virtualization software. The vulnerability is due to insufficient input validation of user parameters passed to "toServerObject" method. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted HTTP requests to...
Microsoft Internet Explorer Memory Corruption (MS14-035; CVE-2014-0282)
A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...
SePortal staticpages SQL Injection (CVE-2008-5191)
An SQL injection vulnerability has been reported in SePortal. A remote attacker may exploit this issue by executing arbitrary SQL commands via the pollid parameter to pool.php and the spid parameter to staticpages.php. Successful exploitation could cause an SQL statement execution on the server,...
GnuTLS X.509 Version 1 Intermediate Certificate Policy Bypass (CVE-2014-1959)
A policy-bypass vulnerability has been found in GnuTLS. The vulnerability is due to an error in lib/x509/verify.c where an X.509 version 1 certificate is incorrectly treated as an intermediate CA certificate. A remote attacker could exploit this vulnerability to bypass certificate validation...
CA ERwin Web Portal ConfigServiceProvider Information Disclosure (CVE-2014-2210)
An information disclosure vulnerability exists in CA ERwin Web Portal. Upon executing a successful attack, the server will give access to XML files which normally should not be accessible to external users. This vulnerability is due to lack of authentication and insufficient input validation in t...
Microsoft Word Section Table Array Buffer Overflow - Ver2 (CVE-2007-0515)
A buffer overflow vulnerability has been reported in Microsoft Office Word. The vulnerability is due to a flaw in the Section Table entry inside the Table Stream structure. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
HP Data Protector CRS Multiple Stack Buffer Overflows (CVE-2013-6195)
Multiple stack buffer overflows exist in HP Data Protector. The vulnerabilities are due to a lack of input sanitization on Strings provided with various opcodes. The strings are not validated for length before being copied into a fixed-size stack buffer. A remote unauthenticated attacker could...
Microsoft Office Smart Tag WordCount Memory Corruption - Ver2 (CVE-2008-2244)
A memory corruption vulnerability has been reported in July. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows ANI File Parsing Buffer Overflow - Ver2 (CVE-2004-1049)
A buffer overflow vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
B-net Software Content Management System shout.php name Parameter XSS - Ver2 (CVE-2006-0078)
A cross-site scripting vulnerability has been reported in Haddad Said B-net Software 1.0. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Cisco Prime Data Center Network Manager processImageSave.jsp Arbitrary File Upload (CVE-2013-5486)
An arbitrary file upload vulnerability exists in Cisco Prime Data Center Network Manager...
Suspicious Javascript Containing Overly Long Strings (CVE-2013-2551)
Javascript may contain variables assigned with overly long strings. This behavior may indicate an exploitation attempt...