Rockoa SQL Injection (CVE-2020-18714)

An SQL injection vulnerability exists in Rockoa. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

EgavilanMedia ECM Address Book SQL Injection (CVE-2020-35276)

An SQL injection vulnerability exists in EgavilanMedia ECM Address Book. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Adobe Acrobat and Reader Use After Free (APSB21-09: CVE-2021-21033)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Micro Focus ArcSight Logger Remote Code Execution (CVE-2020-11851)

A remote code execution vulnerability exists in Micro Focus ArcSight Logger. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

URVE Remote Code Execution (CVE-2020-29552)

A remote code execution vulnerability exists in URVE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

McAfee ePolicy Orchestrator Reflected Cross Site Scripting (CVE-2020-7318)

A reflected cross site scripting vulnerability exists in McAfee ePolicy Orchestrator. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

Adobe Acrobat Data Exfiltration (CVE-2020-29075)

A data exfiltration vulnerability has been reported in Adobe Acrobat. The vulnerability is due to the existence of two JavaScript functions that perform DNS lookups without requiring any specific user action. A remote attacker can exploit this vulnerability by enticing a target user into opening ...

FusionAuth Command Injection (CVE-2020-7799)

A command injection vulnerability exists in FusionAuth. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Internet Explorer Memory Corruption (CVE-2020-17053)

A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Sangoma FreePBX Authentication Bypass (CVE-2019-19006)

An authentication bypass vulnerability exists in Sangoma FreePBX. A remote attacker could exploit this flaw by sending specially crafted packets to the affected server. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized...

Aveva eDNA Enterprise SQL Injection (CVE-2020-13499; CVE-2020-13500; CVE-2020-13501)

An SQL injection vulnerability exists in Aveva eDNA Enterprise. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Pdfparser ObjReader ReadObj Buffer Overflow (CVE-2018-11128)

A buffer overflow vulnerability exists in Pdfparser ObjReader ReadObj function. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Windows Graphics Component Elevation of Privilege (CVE-2020-1381)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

DrayTek Vigor Buffer Overflow (CVE-2020-14473)

A buffer overflow vulnerability exists in DrayTek Vigor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Windows Information Disclosure(CVE-2019-1227)

An information disclosure vulnerability exists in microsoft windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Cisco IP Phone Denial of Service (CVE-2020-3161)

A denial of service vulnerability exists in Cisco IP Phone. A remote unauthenticated attacker can exploit this vulnerability to cause a denial of service condition on an affected system...

HPE Intelligent Management Remote Rode Execution (CVE-2019-5386)

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter by the class...

Nagios XI Command Injection (CVE-2019-20197)

A command Injection vulnerability exists in Nagios XI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

wolfSSL DoPreSharedKeys PSK Identity Buffer Overflow (CVE-2019-11873)

A buffer overflow vulnerability exists in wolfSSL embedded SSL/TLS library. The vulnerability is due to improper validation of PSK identity size in the requests. A remote attacker could exploit this vulnerability by sending maliciously crafted requests to a target server. Successful exploitation ...

Advantech WebAccess Stack-based Buffer Overflow (CVE-2018-17910)

A stack-based buffer overflow vulnerability exists in Advantech WebAccess. Successful exploitation could lead to arbitrary code execution on the affected...

Cisco UCS Director Web Interface Authentication Bypass (CVE-2019-1937)

An authentication bypass vulnerability exists in Cisco UCS Director web interface. Successful exploitation of this vulnerability could allow a remote attacker to bypass login authentication and gain unauthorized access to the vulnerable system...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1106)

...

Jenkins Stapler Web Framework Remote Code Execution (CVE-2018-1000861)

A remote code execution vulnerability exists in the Jenkins Stapler web framework. A remote attacker can exploit this vulnerability to execute arbitrary code via a specially crafted HTTP request...

Webmin cgi Upload Remote Code Execution (CVE-2019-9624)

A remote code execution vulnerability exists in Webmin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

LAquis SCADA Web Server Command Injection (CVE-2018-18992)

A command injection exists in LAquis SCADA web server. The vulnerability is due to insufficient input sanitization, which permits command injection. A remote attacker could exploit this vulnerability by sending a crafted request to an affected server...

Microsoft Graphics Component Information Disclosure (CVE-2018-8396)

An information disclosure vulnerability has been reported in the Microsoft Graphics Component. The vulnerability is due to the way Microsoft Graphics Component improperly handles the decoding of JPEG images in memory. A remote attacker could exploit the vulnerability by enticing user to open a...

Quagga BGP Daemon Notify Attribute Out of Bounds Read (CVE-2018-5378)

An out of bounds read vulnerability exists in BGP Daemon of Quagga. The vulnerability is due to improper validation of attribute sizes received by BGP peers before responding with the contents of the attribute in a NOTIFY message. A remote attacker can exploit this vulnerability by sending a...

OpenSSH sshd Username Information Disclosure (CVE-2018-15473)

An information disclosure vulnerability exists in OpenSSH. The vulnerability is due to the different ways in which the sshd daemon responds to crafted SSH packets. A successful attack can result in the attacker being able to determine whether a user exists on the system...

Digium Asterisk Denial of Service (CVE-2018-7285)

A denial of service vulnerability exists in Digium Asterisk. The vulnerability is due to improper handling of RTP packets. Successful exploitation of this vulnerability may result in a denial of service condition on the target service...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0568)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Data Sharing Service Elevation of Privilege (CVE-2019-0572)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress Snap Creek Duplicator Code Injection (CVE-2018-17207)

An exploitable remote code execution vulnerability exists in WordPress Duplicator server. A WordPress plugin Snap Creek Duplicator restores a backup, resulting in remote code execution. An attacker can send a single authenticated HTTP request to trigger this vulnerability...

Advantech WebAccess NMS DownloadAction Directory Traversal (CVE-2018-7503)

A directory traversal vulnerability exists in Advantech WebAccess NMS. The vulnerability is due to insufficient input validation on file paths in the DownloadAction servlet...

HPE Moonshot Provisioning Manager Appliance Directory Traversal (CVE-2017-8977)

A directory traversal vulnerability exists in HPE Moonshot Provisioning Manager Appliance. The vulnerability is due to missing input validation in the serverresponse.py script. Successful exploitation could result in arbitrary file overwrite with privileges of web application process...

Advantech WebAccess SQL Injection (CVE-2018-5443)

An SQL injection vulnerability exists in Advantech WebAccess/SCADA. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft Scripting Engine Memory Corruption (CVE-2018-8283)

A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Fortinet FortiOS SSH backdoor (CVE-2016-1909) - Ver2

An information disclosure vulnerability exists in Fortinet FortiOS. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft IIS Command Execution (CVE-2001-0500) - Ver2

A command execution vulnerability exists in Microsoft IIS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Digium Asterisk Out-of-Bounds Write (CVE-2018-7284)

An out-of-bounds write vulnerability exists in Asterisk. The vulnerability is due to improper processing of SIP SUBSCRIBE requests. Successful exploitation would result in a denial of service condition...

HPE Intelligent Management Center Remote Code Execution (CVE-2017-12500) - Ver2

A remote code execution vulnerability exists in HPE Intelligent Management Center. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Western Digital MyCloud Remote Code Execution (CVE-2017-17560)

A remote code execution vulnerability exists within Western Digital MyCloud servers. This is due to the way the MyCloud servers handle file uploads to specific directories. A successful attack could lead to a remote code execution and stolen information...

Microsoft Internet Explorer Scripting Engine Information Disclosure (CVE-2017-11906)

An information disclosure vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way the scripting engine improperly handles objects in memory in Internet Explorer. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with ...

Adobe ColdFusion RMI Registry Insecure Deserialization (CVE-2017-11284)

An insecure deserialization vulnerability exists in the Flex integration service of Adobe ColdFusion. The vulnerability is due to the lack of input validation on objects in the RMI Registry before deserializing them. A remote, unauthenticated attacker can exploit this vulnerability by sending...

DNSmasq Integer Underflow Denial Of Service (CVE-2017-13704)

An integer underflow vulnerability exists over Dnsmasq. This is due to the way Dnsmasq handles TTL requests. A successful attack could lead to a denial of service...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11809)

A Memory Corruption Vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8646)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engines render content when handling objects in memory. A remote attacker could exploit these vulnerabilities by enticing the target user to open a specially crafted web page, potentiall...

ManageEngine Desktop Central Remote Code Execution (CVE-2017-11346)

A remote Code Execution vulnerability exists in ManageEngine Desktop Central. The vulnerability is due to insufficient check of parameter. By sending crafted request ,a remote attacker can place a file under a directory that allows server-side scripts to run...

Microsoft Internet Explorer Remote Code Execution (CVE-2017-8618)

A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted we...

Microsoft Office Memory Corruption (MS17-014: CVE-2017-0006)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to the way Microsoft Office improperly handles objects in memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Advantech WebAccess updateTemplate.aspx SQL Injection (CVE-2017-5154)

An SQL injection vulnerability has been reported in Advantech WebAccess. The vulnerability is due to insufficient validation of the template parameter in HTTP request sent to the updateTemplate.aspx. A remote attacker could exploit this vulnerability by sending a HTTP request with a malicious SQL...