13538 matches found
ImageMagick ReadXBMImage Information Disclosure (CVE-2018-16323)
An information disclosure vulnerability exists in ImageMagick. The vulnerability is due to improper handling of memory buffer by ReadXBMImage. A remote attacker could exploit this vulnerability by having an affected application that implements ImageMagick process a maliciously crafted file...
Palo Alto Networks Multiple Products Command Injection (CVE-2021-3060)
A command injection vulnerability exists in multiple Palo Alto Networks products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Moodle Directory Traversal (CVE-2022-35650)
A Directory Traversal vulnerability exists in Moodle. Successful exploitation of this vulnerability could allow a remote attacker to disclose or access arbitrary files on the vulnerable server...
D-Link DAP-1860 Command Injection (CVE-2019-19597)
A command injection vulnerability exists in D-Link DAP-1860. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Tenda M3 Router Buffer Overflow (CVE-2022-32035)
A buffer overflow vulnerability exists in Tenda M3 Router. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...
Adobe Acrobat and Reader Access of Uninitialized Pointer (APSB22-32: CVE-2022-34228)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
SonicWall SMA100 SQL Injection (CVE-2019-7481)
An SQL injection vulnerability exists in SonicWall SMA100. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Tenda AC15 Buffer Overflow (CVE-2021-44352)
A buffer overflow vulnerability exists in Tenda AC15. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...
Microsoft Windows Ancillary Function Driver for WinSock Elevation of Privilege (CVE-2022-24507)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Dnnsoftware DotNetNuke Remote Code Execution (CVE-2018-15811)
A Remote Code Execution vulnerability exists in Dnnsoftware DotNetNuke. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
SAP NetWeaver Directory Traversal (CVE-2016-3976)
A directory traversal vulnerability exists in SAP NetWeaver. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
Gridpro Request Management Remote Code Execution (CVE-2021-40371)
A remote code execution vulnerability exists in Gridpro Request Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
DRK Odenwaldkreis Testerfassung Command Injection (CVE-2021-35062)
A command injection vulnerability exists in NETGEAR. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Sourcecodester Online Covid Vaccination Scheduler Arbitrary File Upload (CVE-2021-36622)
An arbitrary file upload vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Advantech iView deleteZtpConfig SQL Injection (CVE-2021-32932)
A SQL injection vulnerability exists in the Advantech iView. The vulnerability is due to improper validation of user-supplied input when processing the request in method in Java class...
WordPress Hotel Booking Plugin Remote Code Execution (CVE-2020-29047)
A remote code execution vulnerability exists in WordPress Hotel Booking Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Iteris Vantage Velocity Command Injection (CVE-2020-9020)
A command injection vulnerability exists in Iteris Vantage Velocity. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
TOTVS Fluig Platform Directory Traversal (CVE-2020-29134)
A directory traversal vulnerability exists in TOTVS Fluig Platform. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
Online Bus Booking System SQL Injection (CVE-2020-25889)
An SQL injection vulnerability exists in Online Bus Booking System Project . Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Paginator Elixir Remote Code Execution (CVE-2020-15150)
A remote code execution vulnerability exists in Paginator Elixir . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Veeam ONE SSRSReport XML External Entity Injection (CVE-2020-15418)
An XML external entity injection vulnerability exists in Veeam ONE. The vulnerability is due to insufficient handling of XML external entities in requests submitted to the server...
Joomla Remote Code Execution (CVE-2020-11890)
A remote code execution vulnerability exists in Joomla. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Hoosk CMS Remote Code Execution (CVE-2020-26041)
A remote code execution vulnerability exists in Hoosk CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Atos Magento Command Injection (CVE-2020-13404)
A command injection vulnerability exists in Atos Magento. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
We-Com Municipality Portal CMS SQL Injection (CVE-2020-15539)
An SQL injection vulnerability exists in We-Com municipality portal CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
DrayTek Buffer Overflow (CVE-2020-14993)
A buffer overflow vulnerability exists in DrayTek. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Zivif Webcams Information Disclosure (CVE-2017-17106)
An information disclosure vulnerability exists in Zivif Webcams. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Cacti Cross-Site Scripting (CVE-2020-13231)
A cross site scripting vulnerability exists in Cacti. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...
Microsoft VBScript Remote Code Execution (CVE-2020-1216)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
NGINX NJS Denial of Service (CVE-2019-11837)
A denial of service DoS vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Zyxel Cloud CNM SecuManager Remote Code Execution (CVE-2020-15348)
A remote code execution vulnerability exists in Zyxel Cloud CNM SecuManager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2020-0832)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
TurboVNC Fence Message Stack-based Buffer Overflow (CVE-2019-15683)
A stack-based buffer overflow exists in TurboVNC server. The vulnerability is due to improper handling Fence message and lack of stack frame protection. A remote attacker can exploit this vulnerability by sending malicious packets to the Server. Successful exploitation of this vulnerability could...
Microsoft Office Excel Information Disclosure (CVE-2019-1110)
An information disclosure vulnerability exists in Microsoft Office Excel. Successful exploitation of this vulnerability could result in the disclosure of sensitive user information...
Malwarebytes Anti-Malware Remote Code Execution (CVE-2019-6739)
A remote code execution vulnerability exists in Malwarebytes Anti-Malware. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option regarding the DLL loading path. A remote attacker could exploit the vulnerability by enticing a us...
Redmine SQL Injection (CVE-2019-18890)
An SQL injection vulnerability exists in Redmine. Successful exploitation of this vulnerability could lead to arbitrary SQL code execution...
Apache Olingo OData XML External Entity Injection (CVE-2019-17554)
An XML external entity injection vulnerability exists in Apache Olingo OData. The vulnerability is due to a failure to properly handle external entity references in XML files. A successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...
Facebook Fizz Integer Overflow Denial of Service (CVE-2019-3560)
A denial-of-service vulnerability exists in Facebook Fizz. The vulnerability is due to an integer overflow in the handling of TLS 1.3 early data requests. A successful attack could create a denial of service condition to the Discovery service...
Microsoft Office Information Disclosure (CVE-2019-0560)
An information disclosure vulnerability exists in a component of Microsoft Office. This vulnerability is due to improper handling of an object. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information...
phpMyAdmin Navigation-Tree Stored Cross-Site Scripting (CVE-2018-19970)
A stored cross-site scripting vulnerability exists in phpMyAdmin. The vulnerability is due to insufficient input validation in the web-based management interface. Successful exploitation could result in execution of arbitrary script on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1366)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Elevation of Privilege (CVE-2019-1341)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1196)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0993)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Office Remote Code Execution (CVE-2019-0801)
A remote code execution vulnerability exists in Microsoft Office. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows LUAFV Elevation of Privilege (CVE-2019-0805)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0812)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Advantech WebAccess Arbitrary File Deletion (CVE-2018-7495)
An arbitrary file deletion vulnerability exists in Advantech WebAccess. The vulnerability is due to insufficient validation on user supplied paths before using them in file operations. Successful exploitation results in the deletion of arbitrary files...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0567)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Advantech WebAccess SCADA BwPSLinkZip Stack-based Buffer Overflow (CVE-2018-7499)
A stack-based buffer overflow vulnerability exists in the webvrpcs service of Advantech WebAccess. The vulnerability is due to a lack of boundary checks while copying user-supplied data into a stack-based buffer...