13538 matches found
Home Owners Collection Management System Arbitrary File Upload (CVE-2022-25094)
An arbitrary file upload vulnerability exists in Home Owners Collection Management System. Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the vulnerable system with administrative privileges...
Jenkins Selenium HTML Report Plugin XML External Entity Injection (CVE-2021-21672)
An XML external entity injection vulnerability exists in Jenkins Selenium HTML Report Plugin. Successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...
WordPress Core Cross-Site Scripting (CVE-2022-21662)
A cross-site scripting vulnerability exists in WordPress. This vulnerability is due to improper input validation...
Datalust Seq Authentication Bypass (CVE-2018-8096)
An authentication bypass vulnerability exists in Datalust Seq. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
Microsoft Windows Internet Key Exchange Remote Code Execution (CVE-2022-34721)
A remote code execution vulnerability exists in Microsoft Windows Internet Key Exchange protocol. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress KingComposer Plugin Cross-site Scripting (CVE-2020-15299)
A cross-site scripting vulnerability exists in WordPress KingComposer plugin. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Docebo Community Edition Arbitrary File Upload (CVE-2022-31362)
An arbitrary file upload vulnerability exists in Docebo Community Edition. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
QNAP FileStation Cross Site Scripting (CVE-2018-19943)
A cross site scripting vulnerability exists in QNAP FileStation. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
Checkbox Survey Remote Code Execution (CVE-2021-27852)
A remote code execution vulnerability exists in Checkbox Survey. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Print Spooler Elevation of Privilege (CVE-2022-29104)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Ubiquiti AirOS Command Injection (CVE-2010-5330)
A command injection vulnerability exists in Ubiquiti AirOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
TOTOLink A3000R Command Injection (CVE-2022-25075)
A command injection vulnerability exists in TOTOLink A3000R. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Zoho ManageEngine Desktop Central Authentication Bypass (CVE-2021-44515)
An authentication bypass vulnerability exists in Zoho ManageEngine Desktop Central. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...
Adobe Acrobat and Reader Use After Free (APSB22-01: CVE-2021-44701)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Mercury Router Command Injection (CVE-2020-22724)
A command injection vulnerability exists in Mercury Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
HomeMatic Remote Code Execution (CVE-2021-33032)
A remote code execution vulnerability exists in Homematic. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Seacms Remote Code Execution (CVE-2021-37358)
A remote code execution vulnerability exists in Seacms. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-36955)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Google Chrome Heap Corruption (CVE-2019-13764)
A heap corruption vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Antenna House DMC HTMLFilter Memory Corruption (CVE-2017-2799)
A remote code execution vulnerability exists in Marklogic. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Micro Focus ArcSight Logger Remote Code Execution (CVE-2020-11851)
A remote code execution vulnerability exists in Micro Focus ArcSight Logger. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Defender Remote Code Execution (CVE-2021-1647)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Kaspersky Internet Security KLIF driver Denial of service (CVE-2016-4305)
A denial-of-service vulnerability exists in Kaspersky Internet Security. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Microsoft Dynamics 365 for Finance and Operations Remote Code Execution (CVE-2020-17158)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Zoho ManageEngine Applications Manager SQL Injection (CVE-2020-27995)
A SQL injection vulnerability exists in the Zoho ManageEngine Applications Manager. The vulnerability is due to improper validation of user-supplied input in processing MyPage.do action...
WordPress WooCommerce Plugin Authentication Bypass (CVE-2020-11497)
An authentication bypass vulnerability exists in WordPress WooCommerce Plugin. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...
Red Lion N-Tron Cross Site Scripting (CVE-2020-16206)
A cross-site scripting vulnerability exists in Red Lion N-Tron. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
ZOHO ManageEngine ADSelfService Plus Information Disclosure (CVE-2010-3272)
An information disclosure vulnerability exists in ZOHO ManageEngine ADSelfService Plus. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Jenkins Stapler Web Framework Code Execution (CVE-2018-1000861)
A remote code execution vulnerability exists in Jenkins Stapler Web Framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2020-1380)
A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Pdfparser ObjReader ReadObj Buffer Overflow (CVE-2018-11128)
A buffer overflow vulnerability exists in Pdfparser ObjReader ReadObj function. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
DrayTek Vigor Buffer Overflow (CVE-2020-14473)
A buffer overflow vulnerability exists in DrayTek Vigor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft VBScript Remote Code Execution (CVE-2020-1058)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Trend Micro Apex One and OfficeScan Directory Traversal (CVE-2020-8599)
A directory traversal vulnerability exists in Trend Micro Apex One and OfficeScan. The vulnerability is due to improper validation of user-supplied file name in the request...
HPE Intelligent Management Remote Rode Execution (CVE-2019-5386)
An Expression Language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter by the class...
HPE Intelligent Management Center Remote Code Execution (CVE-2019-5370)
An expression language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter by the IctTableExportToCSVBean class...
Microsoft Office Excel Information Disclosure (CVE-2019-1110)
An information disclosure vulnerability exists in Microsoft Office Excel. Successful exploitation of this vulnerability could result in the disclosure of sensitive user information...
Redmine SQL Injection (CVE-2019-18890)
An SQL injection vulnerability exists in Redmine. Successful exploitation of this vulnerability could lead to arbitrary SQL code execution...
Microsoft Remote Desktop Client Remote Code Execution (CVE-2020-0681)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft VBScript Remote Code Execution (CVE-2019-1485)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
wolfSSL DoPreSharedKeys PSK Identity Buffer Overflow (CVE-2019-11873)
A buffer overflow vulnerability exists in wolfSSL embedded SSL/TLS library. The vulnerability is due to improper validation of PSK identity size in the requests. A remote attacker could exploit this vulnerability by sending maliciously crafted requests to a target server. Successful exploitation ...
LAquis SCADA Web Server Command Injection (CVE-2018-18996)
A command injection vulnerability exists in LAquis SCADA. The vulnerability is due to improper handling of parameter submitted in requests. Successful exploitation results in the execution of arbitrary commands with the privileges of the web server process...
Cisco UCS Director Web Interface Authentication Bypass (CVE-2019-1937)
An authentication bypass vulnerability exists in Cisco UCS Director web interface. Successful exploitation of this vulnerability could allow a remote attacker to bypass login authentication and gain unauthorized access to the vulnerable system...
Cisco Elastic Services Controller REST API Authentication Bypass (CVE-2019-1867)
An authentication bypass vulnerability exists in the REST API of Cisco Elastic Services Controller. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code with administrative privileges on the target machine...
SQLite fts3_tokenizer Untrusted Pointer Remote Code Execution (CVE-2019-8602; CVE-2015-7036)
A remote code execution vulnerability exists in SQlite fts3tokenizer. Successful exploitation could result in execution of arbitrary code on the affected system...
Symantec DLP Cross-Site Scripting (CVE-2019-9701)
A cross-site scripting vulnerability exists in Symantec DLP 15.5 MP1. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the effected system...
Microsoft Browser Chakra Scripting Engine Memory Corruption (CVE-2019-1001)
...
Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2019-0959)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Task Scheduler Elevation of Privilege (CVE-2019-1069)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...