13538 matches found
RealNetworks RealPlayer Playlist Handling Buffer Overflow (CVE-2007-5601)
RealNetworks RealPlayer and RealOne Player are media player applications that are capable of playing back numerous multimedia file formats. A buffer overflow vulnerability has been reported in RealNetworks RealPlayer application. The vulnerability is due to an error in a RealPlayer ActiveX contro...
Internet Explorer SetSlice Method Buffer Overflow (MS06-057; CVE-2006-3730)
Microsoft Internet Explorer is the most widely used Internet browser. The WebViewFolderIcon object is an ActiveX control that comes with Microsoft Windows. Provided by the file webvw.dll, this control provides support functionality for icons in the Windows Explorer Web view. A vulnerability in...
Security Best Practice: Enforcement of MS-RPC Protections over all TCP Ports
Remote Procedure Call RPC is a protocol that a program can use to request a service from a program located on another computer in a network. Microsoft Remote Procedure Call MS-RPC is Microsoft's implementation of RPC. Microsoft Windows has reported multiple vulnerabilities MS05-039, MS05-043,...
FTP Patterns (CVE-2005-0696; CVE-2005-3683)
...
Symantec Veritas Backup Exec Server Remote Registry Access (CAN-2005-0771)
...
Marval MSM Remote Code Execution (CVE-2022-31885)
A remote code execution vulnerability exists in Marval MSM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
GraphicsMagic WMF Use After Free (CVE-2017-12936)
A use-after-free vulnerability exists in GraphicsMagick. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Advantech iView Directory Traversal (CVE-2022-2139)
A directory traversal vulnerability exists in Advantech iView. The vulnerability is due to improper validation of user-supplied path before using in findCfgDeviceListDetailsExport method...
Apache Commons Text Remote Code Execution (CVE-2022-42889)
A remote code execution vulnerability exists in Apache Commons Text. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe ColdFusion Stack-based Buffer Overflow (APSB22-44: CVE-2022-35710)
A buffer overflow vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Tenda M3 Router Buffer Overflow (CVE-2022-32036)
A buffer overflow vulnerability exists in Tenda M3 Router. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...
Cisco IOx Command Injection Command Injection (CVE-2021-1384)
A command injection vulnerability exists in Cisco IOx . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
RiteCMS Directory Traversal (CVE-2022-24248)
A directory traversal vulnerability exists in RiteCMS. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-24521)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Google Chrome Use After Free (CVE-2022-0609)
A use after free vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Use After Free (APSB22-01: CVE-2021-44704)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Moxa Multiple Products Command Injection (CVE-2021-39279)
A command injection vulnerability exists in Multiple Moxa Products. Successful exploitation of this vulnerability could allow a remote, authenticated attacker to execute arbitrary commands on the affected system...
Dut Computer Control Engineering PLC Denial Of Service (CVE-2020-18757)
A denial-of-service vulnerability exists in Dut Computer Control Engineering PLC. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Google Chrome Heap Corruption (CVE-2019-13764)
A heap corruption vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Belkin Linksys Denial Of Service (CVE-2020-35716)
A denial-of-service vulnerability exists in Belkin Linksys. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Microsoft Windows rsaenh.dll Elevation of Privilege (CVE-2021-31199)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
VMware vSphere Client Remote Code Execution (CVE-2021-21972; CVE-2021-21973)
A remote code execution vulnerability exists in VMware vSphere Client. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
ONLYOFFICE Document Server Remote Code Execution (CVE-2021-3199)
A remote code execution vulnerability exists in ONLYOFFICE Document Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Libbpg Project Out of Bounds Write (CVE-2016-8710)
A remote code execution vulnerability exists in Libbpg project Libbpg. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Dynamics 365 for Finance and Operations Remote Code Execution (CVE-2020-17158)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress Social Photo Gallery Plugin Remote Code Execution (CVE-2019-14467)
A remote code execution vulnerability exists in WordPress Social Photo Gallery Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress WooCommerce Plugin Authentication Bypass (CVE-2020-11497)
An authentication bypass vulnerability exists in WordPress WooCommerce Plugin. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...
HP Insight Diagnostics Online Edition Cross-Site Scripting (CVE-2010-4111)
A script injection vulnerability exists in HP Insight Diagnostics. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Telmat Remote Code Execution (CVE-2020-16148)
A remote code execution vulnerability exists in Telmat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Easycorp Zentao Pro Command Injection (CVE-2020-7361)
A command injection vulnerability exists in Easycorp Zentao Pro. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
iXsystems FreeNAS Denial of Service (CVE-2020-11650)
A denial of service vulnerability exists in iXsystems FreeNAS. A remote unauthenticated attacker can exploit this vulnerability to cause a denial of service condition on an affected system...
NGINX NJS Heap-Based Buffer Overflow (CVE-2019-12208)
A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2020-0968)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
HPE Intelligent Management Center Remote Code Execution (CVE-2019-5370)
An expression language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter by the IctTableExportToCSVBean class...
Apache James Server Command Injection (CVE-2015-7611)
A command injection vulnerability exists in Apache James server. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary commands on the affected system...
OMRON CX-One CX-Programmer Program Use after Free (CVE-2019-6556)
A use-after-free vulnerability exists in OMRON CX-One CX-Programmer module. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Graphics Device Interface Information Disclosure (CVE-2019-0802)
An information disclosure vulnerability exists in Microsoft Graphics Device Interface of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. Successful exploitation could result in disclosure of information which could be used to further compromise the target...
Microsoft Windows Graphics Device Interface Information Disclosure (CVE-2019-0961)
An information disclosure vulnerability exists in Microsoft Graphics Device Interface of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. Successful exploitation could result in disclosure of information which could be used to further compromise the target...
Microsoft Remote Desktop Services Remote Code Execution (CVE-2019-0787)
A remote code execution vulnerability exists in Microsoft Remote Desktop Services ? formerly known as Terminal Services. A remote attacker may exploit this issue by enticing a victim to connect to a malicious RDP server. Successful exploitation of this vulnerability could allow a remote attacker ...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-0988)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Security Feature Bypass (CVE-2019-0732)
A security bypass vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-0752)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Out Of Bounds Read (CVE-2018-8139)
A out of bounds read vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Microsoft Chakra Scripting Engine Memory Corruption (CVE-2018-8298)
A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
RealNetworks RealPlayer Remote Code Execution (CVE-2004-1094) - Ver2
A remote code execution vulnerability exists in RealNetworks RealPlayer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Lotus Domino Denial-of-service - Ver2 (CVE-2007-1675)
A denial-of-service vulnerability exists in Lotus Domino. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Apache httpd FilesMatch Directive Security Restriction Bypass (CVE-2017-15715)
A security policy bypass vulnerability exists in Apache httpd. A remote attacker can exploit this vulnerability by sending a HTTP request with crafted URI to the remote HTTP server. Successful exploitation could result security policy bypass and arbitrary file upload...
Microsoft Internet Explorer Scripting Engine Information Disclosure (CVE-2017-11906)
An information disclosure vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way the scripting engine improperly handles objects in memory in Internet Explorer. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with ...
Microsoft Win32k Graphics Remote Code Execution (CVE-2017-8682)
A remote code execution vulnerability exists in Windows font library. The vulnerability is due to the way Windows font library improperly handles specially crafted embedded fonts. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted TTF file...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8656)
An improper initialization of memory vulnerability exists in Chakra, Microsoft Edge's scripting engine. This vulnerability is due to the incorrect initialization of a variable within the DefineUserVars function due to an error in PreVisitCatch.A remote attacker could exploit this vulnerability by...