13538 matches found
Doufox Arbitrary File Upload (CVE-2022-38621)
An arbitrary file upload vulnerability exists in Doufox. Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the vulnerable system with administrative privileges...
Jenkins Selenium HTML Report Plugin XML External Entity Injection (CVE-2021-21672)
An XML external entity injection vulnerability exists in Jenkins Selenium HTML Report Plugin. Successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...
GraphicsMagic WMF Use After Free (CVE-2017-12936)
A use-after-free vulnerability exists in GraphicsMagick. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Delta Industrial Automation DIAEnergie Cross-Site Scripting (CVE-2021-44471)
A stored cross-site scripting vulnerability exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to input validation error when processing name parameter in HandlerAlarmGroup.ashx endpoint...
Advantech iView Directory Traversal (CVE-2022-2139)
A directory traversal vulnerability exists in Advantech iView. The vulnerability is due to improper validation of user-supplied path before using in findCfgDeviceListDetailsExport method...
ImageMagick ReadXBMImage Information Disclosure (CVE-2018-16323)
An information disclosure vulnerability exists in ImageMagick. The vulnerability is due to improper handling of memory buffer by ReadXBMImage. A remote attacker could exploit this vulnerability by having an affected application that implements ImageMagick process a maliciously crafted file...
Microsoft DirectX Graphics Kernel Elevation of Privilege (CVE-2022-37954)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Tenda M3 Router Buffer Overflow (CVE-2022-32036)
A buffer overflow vulnerability exists in Tenda M3 Router. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...
Cisco IOx Command Injection Command Injection (CVE-2021-1384)
A command injection vulnerability exists in Cisco IOx . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
WhatsApp Desktop Cross Site Scripting (CVE-2019-18426)
A cross site scripting vulnerability exists in WhatsApp Desktop. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
Microsoft Windows Network File System Remote Code Execution (CVE-2022-24497)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
SonicWall SMA100 SQL Injection (CVE-2019-7481)
An SQL injection vulnerability exists in SonicWall SMA100. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Dnnsoftware DotNetNuke Remote Code Execution (CVE-2018-15811)
A Remote Code Execution vulnerability exists in Dnnsoftware DotNetNuke. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Moxa Multiple Products Command Injection (CVE-2021-39279)
A command injection vulnerability exists in Multiple Moxa Products. Successful exploitation of this vulnerability could allow a remote, authenticated attacker to execute arbitrary commands on the affected system...
Dut Computer Control Engineering PLC Denial Of Service (CVE-2020-18757)
A denial-of-service vulnerability exists in Dut Computer Control Engineering PLC. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Google Chrome Heap Corruption (CVE-2019-13764)
A heap corruption vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Belkin Linksys Denial Of Service (CVE-2020-35716)
A denial-of-service vulnerability exists in Belkin Linksys. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
WordPress Hotel Booking Plugin Remote Code Execution (CVE-2020-29047)
A remote code execution vulnerability exists in WordPress Hotel Booking Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Zeroshell type Parameter Command Execution (CVE-2009-0545)
ZeroShell is a small Linux distribution for servers and embedded devices. A vulnerability exists in Zeroshell that could be exploited by remote attackers to compromise a vulnerable system. The vulnerability is due to an input validation error in the "cgi-bin/kerbynet" script that does not validat...
Microsoft Defender Remote Code Execution (CVE-2021-1647)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Sharepoint Remote Code Execution (CVE-2020-1210)
A remote code execution vulnerability exists in Microsoft Sharepoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Libbpg Project Out of Bounds Write (CVE-2016-8710)
A remote code execution vulnerability exists in Libbpg project Libbpg. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress WooCommerce Plugin Authentication Bypass (CVE-2020-11497)
An authentication bypass vulnerability exists in WordPress WooCommerce Plugin. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...
Telmat Remote Code Execution (CVE-2020-16148)
A remote code execution vulnerability exists in Telmat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Hoosk CMS Remote Code Execution (CVE-2020-26041)
A remote code execution vulnerability exists in Hoosk CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Easycorp Zentao Pro Command Injection (CVE-2020-7361)
A command injection vulnerability exists in Easycorp Zentao Pro. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Zivif Webcams Information Disclosure (CVE-2017-17106)
An information disclosure vulnerability exists in Zivif Webcams. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
iXsystems FreeNAS Denial of Service (CVE-2020-11650)
A denial of service vulnerability exists in iXsystems FreeNAS. A remote unauthenticated attacker can exploit this vulnerability to cause a denial of service condition on an affected system...
NGINX NJS Heap-Based Buffer Overflow (CVE-2019-12208)
A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
HPE Intelligent Management Center Remote Code Execution (CVE-2019-5370)
An expression language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter by the IctTableExportToCSVBean class...
Apache James Server Command Injection (CVE-2015-7611)
A command injection vulnerability exists in Apache James server. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary commands on the affected system...
Microsoft VBScript Remote Code Execution (CVE-2019-1485)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1139)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1196)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Google Chrome Race Condition Denial Of Service (CVE-2019-5796; CVE-2019-5797)
A denial-of-service vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to create a denial of service condition on the affected system...
Microsoft Windows Security Feature Bypass (CVE-2019-0732)
A security bypass vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...
Telerik Web UI Information Disclosure (CVE-2017-9248)
A security bypass vulnerability exists in Telerik Web UI. Successful exploitation of this vulnerability can lead to cross-site scripting, arbitrary file uploads and downloads, leak of MachineKey and compromise of the ASP.NET ViewState on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0567)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
QNAP Qcenter Virtual Appliance Information Disclosure (CVE-2018-0706)
An Information disclosure vulnerability exists in QNAP Qcenter Virtual Appliance web console. Successful exploitation of this vulnerability would allow an authenticated user to obtain sensitive information...
Microsoft Edge Out Of Bounds Read (CVE-2018-8139)
A out of bounds read vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-8279)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apache httpd FilesMatch Directive Security Restriction Bypass (CVE-2017-15715)
A security policy bypass vulnerability exists in Apache httpd. A remote attacker can exploit this vulnerability by sending a HTTP request with crafted URI to the remote HTTP server. Successful exploitation could result security policy bypass and arbitrary file upload...
Google Chrome Type Confusion (CVE-2018-6064)
A type confusion vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Schneider Electric U.motion Builder loadtemplate.php SQL Injection (CVE-2017-7973)
An SQL injection vulnerability exists in Schneider Electric U.motion Builder. The vulnerability is due to insufficient validation of the tpl HTTP parameter of the loadtemplate.php request. A remote, unauthenticated user can exploit this vulnerability by sending a crafted HTTP request to the...
Jenkins CI Server Multiple Cross-Site Request Forgery (CVE-2017-1000356)
Multiple Cross-Site Request Forgery vulnerabilities exists in Jenkins CI. The vulnerabilities are due to a lack of CSRF protections on certain types of requests. A remote, unauthenticated attacker can exploit these vulnerabilities by enticing an authenticated user to click a maliciously crafted...
Microsoft Malware Protection Engine Remote Code Execution (CVE-2017-8541)
A memory corruption vulnerability has been reported in Microsoft Malware Protection Engine. A remote attacker can exploit this issue by enticing a target user to open a specially crafted file. A successful exploitation could lead to arbitrary code execution...
Joomla com_fields Component SQL Injection (CVE-2017-8917)
An SQL injection vulnerability exists in Joomla comfields Component. Remote attackers may leverage this vulnerability to gain arbitrary code execution over the vulnerable server...
ManageEngine Applications Manager Apache Commons Collections Insecure Deserialization (CVE-2016-9498)
An insecure deserialization vulnerability exists in ManageEngine Applications Manager. This vulnerability is due to the inclusion of the vulnerable version of Apache Commons Collections library in the classpath combined with insecure deserialization. A remote, unauthenticated attacker can exploit...
Microsoft Win32k Elevation of Privilege (MS17-018: CVE-2017-0079; CVE-2017-0078)
An elevation of privilege vulnerability exists in the Windows kernel-mode driver. The vulnerability is due to the way the driver fails to properly handle objects in memory. An attacker can exploit this vulnerability by logging on to the system and running a specially crafted application...
Microsoft Browser Memory Corruption (MS17-006: CVE-2017-0037)
A type confusion vulnerability exists in Microsoft Internet Explorer and Microsoft Edge. The vulnerability is due to an error in Microsoft Internet Explorer and Microsoft Edge while handling a specially crafted HTML file. A remote attacker can exploit this vulnerability by enticing a target user ...