SAP NetWeaver Remote Code Execution (CVE-2018-2380)

A remote code execution vulnerability exists in SAP NetWeaver. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Gridpro Request Management Remote Code Execution (CVE-2021-40371)

A remote code execution vulnerability exists in Gridpro Request Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Mercury Router Command Injection (CVE-2020-22724)

A command injection vulnerability exists in Mercury Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Buffalo Routers Directory Traversal (CVE-2021-20090; CVE-2021-20091)

A directory traversal vulnerability exists in Buffalo routers. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

libEBML Use After Free (CVE-2015-8789)

A use-after-free vulnerability exists in libEBML. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

InoERP Remote Code Execution (CVE-2020-28870)

A remote code execution vulnerability exists in InoERP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

phpList Remote Code Execution (CVE-2021-3188)

A remote code execution vulnerability exists in phpList. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

TerraMaster TOS Command Injection (CVE-2020-28188)

A command injection vulnerability exists in TerraMaster TOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Joomla Remote Code Execution (CVE-2020-11890)

A remote code execution vulnerability exists in Joomla. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

HP Insight Diagnostics Online Edition Cross-Site Scripting (CVE-2010-4111)

A script injection vulnerability exists in HP Insight Diagnostics. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Microsoft Browser Scripting Engine Memory Corruption (CVE-2020-17052)

A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

FFmpeg Heap-based Buffer Overflow (CVE-2020-12284)

A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Wechat Brodcast Project Directory Traversal (CVE-2018-16283)

A directory traversal vulnerability exists in wechat brodcast project wechat brodcast x=1.2.0. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Localize My Post Project Directory Traversal (CVE-2018-16299)

A directory traversal vulnerability exists in localize my post project localize my post. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Zen Load Balancer Remote Code Execution (CVE-2019-7301)

A remote code execution vulnerability exists in Zen Load Balancer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft VBScript Remote Code Execution (CVE-2020-1035)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Win32k Elevation of Privilege (CVE-2020-0956)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco Data Center Network Manager Command Injection (CVE-2019-15978; CVE-2019-15979)

A command injection vulnerability exists in Cisco Data Center Network Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

rConfig Command Injection (CVE-2020-10221)

A command injection vulnerability exists in rConfig. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary commands on the affected system...

Fusionpbx Command Execution (CVE-2019-15029)

A command execution vulnerability exists in Fusionpbx. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Office Information Disclosure (CVE-2019-0560)

An information disclosure vulnerability exists in a component of Microsoft Office. This vulnerability is due to improper handling of an object. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information...

Nagios Xi Remote Command Execution (CVE-2019-9164)

A command execution vulnerability exists in nagios nagios xi r1.0. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows Graphics Device Interface Information Disclosure (CVE-2019-0802)

An information disclosure vulnerability exists in Microsoft Graphics Device Interface of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. Successful exploitation could result in disclosure of information which could be used to further compromise the target...

Microsoft Win32k Elevation of Privilege (CVE-2019-1364)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Pulse Connect Secure Stack Buffer Overflow (CVE-2019-11542)

A stack buffer overflow vulnerability exists in Pulse Connect Secure SSL VPN. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the effected system...

Microsoft SharePoint Remote Code Execution (CVE-2019-1296)

A remote code execution vulnerability exists in Microsoft Microsoft SharePoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Sierra Wireless AirLink Remote Code Execution (CVE-2018-4063)

A remote code execution vulnerability exists in Sierra Wireless AirLink. An authenticated attacker can send A specially crafted HTTP request to upload a file, resulting in executable code being uploaded to the target host...

TP-Link TL-WR Buffer Overflow Remote Code Execution (CVE-2019-6989)

An arbitrary code execution vulnerability exists in TP-LINK TL-WR940N and TL-WR941ND. A remote attacker can exploit this vulnerability by sending a maliciously crafted packet to the target server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...

PHPCMS 2008 type.php Code Injection (CVE-2018-19127)

A code injection vulnerability exists in PHPCMS 2008. An attacker could write arbitrary content to a website cache file with a controllable filename. Successful exploitation of this vulnerability could lead to arbitrary code execution...

Advantech WebAccess Arbitrary File Deletion (CVE-2018-7495)

An arbitrary file deletion vulnerability exists in Advantech WebAccess. The vulnerability is due to insufficient validation on user supplied paths before using them in file operations. Successful exploitation results in the deletion of arbitrary files...

Dahuasecurity Smartpss Firmware Authentication Bypass (CVE-2017-6343)

An authentication bypass vulnerability exists in Dahuasecurity Smartpss Firmware. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Microsoft Windows ALPC Elevation of Privilege (CVE-2018-8584)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Edge and Internet Explorer Chakra Out of Bounds Read (CVE-2018-8145)

An out of bounds read vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Buffer Errors (APSB18-21: CVE-2018-5043)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Microsoft Browser Scripting Engine Memory Corruption (CVE-2018-8288)

A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft HIDParser Elevation of Privilege (CVE-2018-8169)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-0860)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

IBM Lotus Notes encodeURI DOS (CVE-2017-1129)

A denial of service vulnerability exists in IBM Lotus Notes. A remote attacker can exploit this vulnerability by sending a specially crafted message to an affected system...

Digium Asterisk app_minivm Caller-ID Command Execution (CVE-2017-14100)

A command execution vulnerability exists in Digium Asterisk. The vulnerability is due to insufficient validation of Caller-IDs within SIP requests when the MinivmNotify dialplan function is used with an external notification program. A remote, authenticated attacker could exploit this vulnerabili...

WordPress REST API Plugin Information Disclosure (CVE-2017-5487)

An information disclosure vulnerability exists in WordPress REST API Plugin. Successful exploitation could result in the disclosure of sensitive user information...

Symantec Messaging Gateway performRestore Command Injection (CVE-2017-6327)

A command injection vulnerability exists in Symantec Messaging Gateway. The cause of the vulnerability due to combination of an authentication bypass in LoginAction and a lack of sanitization on user input...

Nginx ngx_http_range_filter_module Integer Overflow (CVE-2017-7529)

An integer overflow vulnerability exists in Nginx. The vulnerability is due to insufficient validation of requested byte ranges...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-0236)

A memory corruption vulnerability exists in Microsoft Edge. The Vulnerability is due to the JScript and VBScript engines improperly handling objects in memory in. Successful exploitation of this vulnerability could allow an unauthenticated user to run arbitrary code with the same rights as the...

ManageEngine Applications Manager Apache Commons Collections Insecure Deserialization (CVE-2016-9498)

An insecure deserialization vulnerability exists in ManageEngine Applications Manager. This vulnerability is due to the inclusion of the vulnerable version of Apache Commons Collections library in the classpath combined with insecure deserialization. A remote, unauthenticated attacker can exploit...

Zinf Audio Player PLS File Stack Buffer Overflow (CVE-2004-0964)

A stack buffer overflow vulnerability exists in Zinf Audio Player 2.2.1. The vulnerability is due to insufficient bounds checking on a PLS file. A remote attacker could exploit this vulnerability by enticing a victim to open a specially crafted PLS file. Successful exploitation could lead to...

Adobe Flash Player Use After Free Code Execution (APSB17-10: CVE-2017-3063)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0072)

A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...

Altap Salamander 2.5 PE Viewer Buffer Overflow (CVE-2007-3314)

A buffer overflow exists in Altap Salamander. A remote attacker could trigger this vulnerability by creating a malicious file and convincing a user to view the file with the Portable Executable Viewer plugin within a vulnerable version of Salamander. Successful exploitation would allow remote...

Microsoft Browser Information Disclosure (MS16-105 : CVE-2016-3325)

An out-of-bounds read vulnerability was discovered within Microsoft Edge. The vulnerability is due to an error in the way Microsoft Office improperly handles double response in the same buffered inputs. A remote attacker can exploit this issue by sending double response in the same buffered input...

Microsoft Office Information Disclosure (MS16-070: CVE-2016-3234)

An out of bound memory access vulnerability was discovered within Microsoft office word. The root cause comes from wwlib.dll sub components that could lead to an out of bound memory read when processing a malformed rtf document...