SAP NetWeaver Directory Traversal (CVE-2016-3976)

A directory traversal vulnerability exists in SAP NetWeaver. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Gridpro Request Management Remote Code Execution (CVE-2021-40371)

A remote code execution vulnerability exists in Gridpro Request Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Ampache Cross Site Scripting (CVE-2021-32644)

A cross site scripting vulnerability exists in Ampache. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Sourcecodester Online Covid Vaccination Scheduler Arbitrary File Upload (CVE-2021-36622)

An arbitrary file upload vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Iteris Vantage Velocity Command Injection (CVE-2020-9020)

A command injection vulnerability exists in Iteris Vantage Velocity. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

TOTVS Fluig Platform Directory Traversal (CVE-2020-29134)

A directory traversal vulnerability exists in TOTVS Fluig Platform. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Online Bus Booking System SQL Injection (CVE-2020-25889)

An SQL injection vulnerability exists in Online Bus Booking System Project . Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Paginator Elixir Remote Code Execution (CVE-2020-15150)

A remote code execution vulnerability exists in Paginator Elixir . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

TP-Link TL-WR849N Routers Remote Code Execution (CVE-2020-9374)

A command execution vulnerability exists in Tplink tlwr849n firmware 0.9.1 4.16. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Veeam ONE SSRSReport XML External Entity Injection (CVE-2020-15418)

An XML external entity injection vulnerability exists in Veeam ONE. The vulnerability is due to insufficient handling of XML external entities in requests submitted to the server...

FFmpeg Heap-based Buffer Overflow (CVE-2020-12284)

A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

ATutor SQL Injection (CVE-2016-2555)

An SQL injection vulnerability exists in ATutor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

We-Com Municipality Portal CMS SQL Injection (CVE-2020-15539)

An SQL injection vulnerability exists in We-Com municipality portal CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

DrayTek Buffer Overflow (CVE-2020-14993)

A buffer overflow vulnerability exists in DrayTek. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Internet Explorer Memory Corruption(CVE-2019-1194)

A memory corruption vulnerability exists in microsoft internet explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

NGINX NJS Denial of Service (CVE-2019-11837)

A denial of service DoS vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

IBM Data Risk Manager Authentication Bypass (CVE-2020-4429)

An authentication bypass vulnerability exists in IBM Data Risk Manager. The vulnerability is due to the presence of previously unknown default credentials. A remote attacker can exploit this vulnerability by authenticating to the system using the default credentials. Successful exploitation resul...

Zyxel Cloud CNM SecuManager Remote Code Execution (CVE-2020-15348)

A remote code execution vulnerability exists in Zyxel Cloud CNM SecuManager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2020-0832)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

TurboVNC Fence Message Stack-based Buffer Overflow (CVE-2019-15683)

A stack-based buffer overflow exists in TurboVNC server. The vulnerability is due to improper handling Fence message and lack of stack frame protection. A remote attacker can exploit this vulnerability by sending malicious packets to the Server. Successful exploitation of this vulnerability could...

Microsoft Office Excel Information Disclosure (CVE-2019-1110)

An information disclosure vulnerability exists in Microsoft Office Excel. Successful exploitation of this vulnerability could result in the disclosure of sensitive user information...

Apache Olingo OData XML External Entity Injection (CVE-2019-17554)

An XML external entity injection vulnerability exists in Apache Olingo OData. The vulnerability is due to a failure to properly handle external entity references in XML files. A successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...

Facebook Fizz Integer Overflow Denial of Service (CVE-2019-3560)

A denial-of-service vulnerability exists in Facebook Fizz. The vulnerability is due to an integer overflow in the handling of TLS 1.3 early data requests. A successful attack could create a denial of service condition to the Discovery service...

Microsoft Office Information Disclosure (CVE-2019-0560)

An information disclosure vulnerability exists in a component of Microsoft Office. This vulnerability is due to improper handling of an object. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information...

phpMyAdmin Navigation-Tree Stored Cross-Site Scripting (CVE-2018-19970)

A stored cross-site scripting vulnerability exists in phpMyAdmin. The vulnerability is due to insufficient input validation in the web-based management interface. Successful exploitation could result in execution of arbitrary script on the affected system...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1366)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Internet Explorer Use After free (CVE-2019-1367)

A use-after-free vulnerability exists in Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Flash Player Same Origin Method Execution (APSB19-46: CVE-2019-8069)

A vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Microsoft Windows NTFS Elevation of Privilege (CVE-2019-1170)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Zoom Client Webcam Hijacking (CVE-2019-13450)

A Webcam Hijacking vulnerability exists in Zoom Client for macOS. A machine remains vulnerable if the Zoom Client was installed in the past and then uninstalled. A remote attacker can force a user to join a video call with the video camera active...

Microsoft Win32k Elevation of Privilege (CVE-2019-1132)

...

Microsoft Office Remote Code Execution (CVE-2019-0801)

A remote code execution vulnerability exists in Microsoft Office. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows LUAFV Elevation of Privilege (CVE-2019-0805)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Advantech WebAccess Arbitrary File Deletion (CVE-2018-7495)

An arbitrary file deletion vulnerability exists in Advantech WebAccess. The vulnerability is due to insufficient validation on user supplied paths before using them in file operations. Successful exploitation results in the deletion of arbitrary files...

Advantech WebAccess SCADA BwPSLinkZip Stack-based Buffer Overflow (CVE-2018-7499)

A stack-based buffer overflow vulnerability exists in the webvrpcs service of Advantech WebAccess. The vulnerability is due to a lack of boundary checks while copying user-supplied data into a stack-based buffer...

Microsoft Chakra Scripting Engine Memory Corruption (CVE-2018-8384)

A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-0834)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows ITS Protocol Information Disclosure (CVE-2017-11927)

An information disclosure vulnerability exists in Microsoft Windows. The vulnerability is due to improper parsing of the InfoTech Storage ITS protocol requests. A remote attacker could exploit this vulnerability by enticing a user to open a malicious webpage or URL...

Trend Micro OfficeScan Memory Corruption (CVE-2017-14089)

A memory corruption vulnerability exists in Trend Micro's OfficeScan. A remote unauthorized attacker may exploit this issue by accessing the OfficeScan server and targeting cgiShowClientAdm.exe to cause memory corruption issues...

Digium Asterisk app_minivm Caller-ID Command Execution (CVE-2017-14100)

A command execution vulnerability exists in Digium Asterisk. The vulnerability is due to insufficient validation of Caller-IDs within SIP requests when the MinivmNotify dialplan function is used with an external notification program. A remote, authenticated attacker could exploit this vulnerabili...

WordPress REST API Plugin Information Disclosure (CVE-2017-5487)

An information disclosure vulnerability exists in WordPress REST API Plugin. Successful exploitation could result in the disclosure of sensitive user information...

Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-8524)

A remote code execution Vulnerability exists in Microsoft Edge and Internet Explorer 11. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a speciall...

Microsoft Office Security Feature Bypass (MS16-148: CVE-2016-7262)

A security feature bypass vulnerability exists in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this vulnerability by enticing a victim to open a specially...

Distinct TFTP Writable Directory Traversal Execution (CVE-2012-6664)

A vulnerability exists in Distinct TFTP servers. The software contains a directory traversal vulnerability that allows authorized users to upload malicious files to the server. A remote attacker can exploit this vulnerability by uploading an arbitrary, executable file and executing it under the...

Adobe ColdFusion OOXML XXE Information Disclosure (CVE-2016-4264)

An XML external entity XXE processing vulnerability has been reported in the Office Open XML OOXML parsing component of Adobe ColdFusion. The vulnerability is due to a lack of validation on user-supplied input when parsing OOXML documents. A remote attacker could exploit this vulnerability by...

VideoCharge Software Watermark Master (CVE-2013-6935)

A stack based buffer overflow vulnerability was found in Watermark Master 2.2.23. The vulnerability is due to an error when Watermark Master improperly handles a specially crafted WCF file. Remote attackers can exploit this vulnerability and execute arbitrary code on the target machine by enticin...

Microsoft Windows Graphics Component Information Disclosure (MS16-055: CVE-2016-0168)

A Vulnerability was discovered within Internet explorer when handling a spcially crafted EMF file allowing an information disclosure about the user filesystem. The root cause of the vulnerability is related to the CreateColorSpaceW function that tries to build a file path checking of its existanc...

Apache Jetspeed Remote Code Execution (CVE-2016-0709)

A code execution vulnerability exists Apache Jetspeed. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

AWStats Totals awstatstotals.php sort Parameter Code Execution (CVE-2008-3922)

A code execution vulnerability has been reported in AWStats Totals. The vulnerability is due to insufficient sanitization of the "sort" parameter in the "awstatstotals.php". A remote attacker could exploit this vulnerability by dynamically creating an anonymous PHP function...

WordPress Simple Ads Manager Plugin Arbitrary File Inclusion (CVE-2015-2825)

A File Inclusion vulnerability exists in WordPress Simple Ads Manager Plugin. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...