Watchguard Firebox and XTM Remote Code Execution (CVE-2022-26318)

A remote code execution vulnerability exists in Watchguard Firebox and XTM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SAP NetWeaver AS JAVA XML External Entity Injection (CVE-2016-9563)

An XML external entity injection vulnerability exists in SAP NetWeaver. Successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...

Microsoft Windows Kernel Elevation of Privilege (CVE-2022-21989)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Use After Free (APSB22-01: CVE-2021-44701)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows User Profile Service Elevation of Privilege (CVE-2022-21919)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Pulse Connect Secure Command Injection (CVE-2020-8243)

A command injection vulnerability exists in Pulse Connect Secure. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows Installer Elevation of Privilege (CVE-2021-43883)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Simple Water Refilling Station Management System SQL Injection (CVE-2021-38840)

An SQL injection vulnerability exists in Simple Water Refilling Station Management System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Seacms Remote Code Execution (CVE-2021-37358)

A remote code execution vulnerability exists in Seacms. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Tenda AC1200 Denial Of Service (CVE-2020-28095)

A denial of service vulnerability exists in Tenda AC1200. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

NI LabVIEW Memory Corruption (CVE-2017-2775)

A memory corruption vulnerability exists in NI LabVIEW. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Netgear ProSAFE Buffer Overflow (CVE-2020-35227)

A buffer overflow vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Netgear ProSAFE Cross-Site Request Forgery (CVE-2020-35223)

A cross-site request forgery vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability can result in the execution of arbitrary code in the effected system...

Oracle Coherence Remote Code Execution (CVE-2020-14756)

An insecure deserialization vulnerability exists in Oracle Coherence. This vulnerability is due to a lack of deserialization filtering when Coherence ExternalizableLite classes are deserialized...

D-Link DSR-250 Command Injection (CVE-2020-18568)

A command injection vulnerability exists in D-Link DSR-250. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Antenna House DMC HTMLFilter Memory Corruption (CVE-2017-2799)

A remote code execution vulnerability exists in Marklogic. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Zoho ManageEngine SDP Arbitrary File Upload (CVE-2019-8394)

An arbitrary file upload vulnerability exists in Zoho ManageEngine SDP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Gemtek WRTM-127ACN Command Injection (CVE-2020-24365)

A command injection vulnerability exists in Gemtek WRTM-127ACN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Citrix XenMobile Server Directory Traversal (CVE-2020-8209)

A directory traversal vulnerability exists in Citrix XenMobile. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Zoho ManageEngine Applications Manager SQL Injection (CVE-2020-27995)

A SQL injection vulnerability exists in the Zoho ManageEngine Applications Manager. The vulnerability is due to improper validation of user-supplied input in processing MyPage.do action...

Cisco Unified Contact Center Express Insecure Deserialization (CVE-2020-3280)

An insecure deserialization vulnerability exists in the Cisco Unified Contact Center Express. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

FS Thumbtack Clone SQL Injection (CVE-2017-17589; CVE-2017-17576)

An SQL injection vulnerability exists in FS Thumbtack Clone. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Jenkins Stapler Web Framework Code Execution (CVE-2018-1000861)

A remote code execution vulnerability exists in Jenkins Stapler Web Framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2020-1380)

A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Pydio Cells Cross-Site Scripting (CVE-2020-12849; CVE-2020-12853)

A cross site scripting vulnerability exists in Pydio Cells. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

WordPress Drag And Drop Plugin Remote Code Execution (CVE-2020-12800)

A remote code execution vulnerability exists in WordPress Drag And Drop plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SonicWall SMA100 and SRA Buffer Overflow (CVE-2019-7482)

A buffer overflow vulnerability exists in SonicWall SMA100 and SonicWall SRA systems. Successful exploitation could result in arbitrary code execution in the context of the affected application...

Microsoft VBScript Remote Code Execution (CVE-2020-1058)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WiKID 2FA Enterprise Server Cross-Site Scripting (CVE-2019-17116)

A cross-site scripting vulnerability exists in WiKID 2FA Enterprise Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

rConfig Command Injection (CVE-2020-10221)

A command injection vulnerability exists in rConfig. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary commands on the affected system...

Samba Denial of Service (CVE-2019-12436)

A denial-of-service vulnerability exists in Samba. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft JET Database Engine Heap-based Buffer Overflow (CVE-2018-8392)

A heap-based buffer overflow vulnerability exists in the Microsoft Jet Database Engine Jet. The vulnerability is due to improper handling of objects in memory. A remote, unauthenticated attacker can exploit the vulnerability by enticing a user to open a specially crafted Excel file...

Microsoft Win32k Elevation of Privilege (CVE-2019-1396)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component Proclaim Backup File Download (CVE-2018-7317)

An information disclosure vulnerability exists in Joomla Component Proclaim. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

OpenMRS Platform Insecure Deserialization (CVE-2018-19276)

An Insecure Deserialization vulnerability exists in OpenMRS platform. A remote attacker can exploit this vulnerability by sending a specially crafted serialized object. Successful exploitation can result in arbitrary code execution in the effected system...

Microsoft Task Scheduler Elevation of Privilege (CVE-2019-1069)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-1055)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2019-0959)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1003)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PostgreSQL Remote Code Execution (CVE-2019-9193)

A remote code execution vulnerability exists in PostgreSQL. Successful exploitation of this vulnerability could result in arbitrary code execution on the victim machine...

Adobe Acrobat and Reader Out-of-Bounds Read (APSB19-17: CVE-2019-7127)

An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0861)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0810)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Browser Scripting Engine Memory Corruption (CVE-2019-0666)

A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Data Sharing Service Elevation of Privilege (CVE-2019-0574)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Trend Micro Control Manager sCloudService GetPassword SQL Injection (CVE-2018-3604)

An SQL injection vulnerability exists in the Trend Micro Control Manager. The vulnerability is due to improper validation of user-supplied input on SOAP sCloudService requests invoking the GetPassword method. Successful exploitation of the vulnerability could allow the attacker to execute arbitra...

Google Chrome Integer Overflow Memory Corruption (CVE-2018-6092)

A memory corruption vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Samsung SmartThings Hub SQL Injection (CVE-2018-3879)

An SQL injection vulnerability exists in Samsung SmartThings Hub. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Oracle WebLogic WLS Server Component Arbitrary File Upload (CVE-2018-2894)

An arbitrary file upload vulnerability has been reported in Oracle WebLogic Server. This vulnerability is due to input validation of a keystore file. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the remote service. Successful exploitation cou...

Microsoft Internet Explorer Security Feature Bypass (CVE-2018-0949)

A security feature bypass vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to improper implementation of the mixed content warning security feature. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected versi...