13538 matches found
PublicCMS Remote Code Execution (CVE-2022-23389)
A remote code execution vulnerability exists in PublicCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
MCMS Template Management Remote Code Execution (CVE-2022-22930)
A remote code execution vulnerability exists in MCMS Template Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe ColdFusion Improper Restriction of XML External Entity (APSB22-44: CVE-2022-42341)
An Improper Restriction of XML External Entity vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Datalust Seq Authentication Bypass (CVE-2018-8096)
An authentication bypass vulnerability exists in Datalust Seq. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
Microsoft SharePoint Server Remote Code Execution (CVE-2022-38053)
A remote code execution vulnerability exists in Microsoft SharePoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Internet Key Exchange Remote Code Execution (CVE-2022-34721)
A remote code execution vulnerability exists in Microsoft Windows Internet Key Exchange protocol. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Zoho ManageEngine OpManager SQL Injection (CVE-2019-17602)
An SQL injection vulnerability exists in Zoho ManageEngine OPManager. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Adobe Acrobat and Reader Out-of-bounds Read (APSB22-32: CVE-2022-34236)
An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
D-Link DIR-859 Buffer Overflow (CVE-2022-25106)
A buffer overflow vulnerability exists in D-Link DIR-859. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Ubiquiti AirOS Command Injection (CVE-2010-5330)
A command injection vulnerability exists in Ubiquiti AirOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
TOTOLink A3000R Command Injection (CVE-2022-25075)
A command injection vulnerability exists in TOTOLink A3000R. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Watchguard Firebox and XTM Remote Code Execution (CVE-2022-26318)
A remote code execution vulnerability exists in Watchguard Firebox and XTM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apache APISIX Remote Code Execution (CVE-2022-24112)
A remote code execution vulnerability exists in Apache APISIX. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system...
Spring Core Remote Code Execution (CVE-2022-22965)
A remote code execution vulnerability exists in Spring Core. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Kernel Elevation of Privilege (CVE-2022-21989)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows User Profile Service Elevation of Privilege (CVE-2022-21919)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Installer Elevation of Privilege (CVE-2021-43883)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
ExifTool Remote Code Execution (CVE-2021-22204)
A remote code execution vulnerability exists in ExifTool. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Simple Water Refilling Station Management System SQL Injection (CVE-2021-38840)
An SQL injection vulnerability exists in Simple Water Refilling Station Management System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Pear Admin Think Arbitrary File Upload (CVE-2021-29377)
An arbitrary file upload vulnerability exists in Pear Admin Think. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Bludit Remote Code Execution (CVE-2020-18879)
A remote code execution vulnerability exists in Bludit. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Online Reviewer System SQL Injection (CVE-2021-27130)
An SQL injection vulnerability exists in Online Reviewer System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Microsoft Outlook Security Feature Bypass (CVE-2017-0204)
A security feature bypass vulnerability exists in Microsoft Outlook. Successful exploitation of this vulnerability could allow remote attackers to bypass security tests and protocols on the affected system...
NI LabVIEW Memory Corruption (CVE-2017-2775)
A memory corruption vulnerability exists in NI LabVIEW. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
MonoCMS Remote Code Execution (CVE-2020-28672)
A remote code execution vulnerability exists in MonoCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Kaspersky Internet Security KLIF driver Denial of service (CVE-2016-4305)
A denial-of-service vulnerability exists in Kaspersky Internet Security. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Citrix XenMobile Server Directory Traversal (CVE-2020-8209)
A directory traversal vulnerability exists in Citrix XenMobile. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
ZOHO ManageEngine ADSelfService Plus Information Disclosure (CVE-2010-3272)
An information disclosure vulnerability exists in ZOHO ManageEngine ADSelfService Plus. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Microsoft Windows Host Compute Service Shim Remote Code Execution (CVE-2018-8115)
A vulnerability exists in Microsoft windows host compute service shim x under 0.6.10. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Exacqvision Enterprise Manager Remote Code Execution (CVE-2020-9047)
A remote code execution vulnerability exists in Exacqvision Enterprise Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Pdfparser ObjReader ReadObj Buffer Overflow (CVE-2018-11128)
A buffer overflow vulnerability exists in Pdfparser ObjReader ReadObj function. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Opmantek Open-AudIT m_discoveries.php Command Injection (CVE-2020-11941)
A command injection vulnerability exists in Open-AudIT. The vulnerability is due to insufficient input validation in mdiscoveries.php...
Pydio Cells Cross-Site Scripting (CVE-2020-12849; CVE-2020-12853)
A cross site scripting vulnerability exists in Pydio Cells. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
PHP-Fusion Administration banners.php Cross-Site Scripting (CVE-2020-12438)
A stored cross-site scripting vulnerability exists in PHP-Fusion Banner feature. The vulnerability is due to improper validation of user input in HTTP requests...
HPE Intelligent Management Remote Rode Execution (CVE-2019-5386)
An Expression Language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter by the class...
Centreon formMibs.php Command Injection (CVE-2019-15298)
A command injection vulnerability exists in the Centreon Web Application. Successful exploitation of this vulnerability could result in arbitrary command execution in the context of the server process...
Microvirt MEmu Command Injection (CVE-2019-14514)
A command Injection vulnerability exists in Microvirt MEmu. Successful exploitation of this vulnerability could result in execution of arbitrary code on the affected system...
Microsoft SharePoint Information Disclosure (CVE-2019-1443)
An information disclosure vulnerability exists in Microsoft SharePoint. Successful exploitation of this vulnerability could result in the disclosure of sensitive user information...
Digium Asterisk res_http_websocket Denial of Service (CVE-2018-17281)
A denial of service vulnerability exists in Digium Asterisk reshttpwebsocket. The vulnerability may occur when sending an HTTP Upgrade Request. Successful exploitation of this vulnerability could allow a remote attacker to cause denial of service conditions on the target system...
HPE Intelligent Management Center Remote Code Execution (CVE-2019-5386)
An Expression Language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter by the ViewBatchTaskResultDetailBean class. A remote, authenticated attacker can exploit this vulnerability by sending a...
Samba Denial of Service (CVE-2019-12436)
A denial-of-service vulnerability exists in Samba. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Oracle Weblogic Server Information Disclosure (CVE-2019-2647; CVE-2019-2648)
An information disclosure vulnerability exists in Oracle Weblogic Server. This vulnerability is due to insufficient validation of XML data. Successful exploitation of this vulnerability could lead to the disclosure of file contents on the target machine...
Microsoft JET Database Engine Heap-based Buffer Overflow (CVE-2018-8392)
A heap-based buffer overflow vulnerability exists in the Microsoft Jet Database Engine Jet. The vulnerability is due to improper handling of objects in memory. A remote, unauthenticated attacker can exploit the vulnerability by enticing a user to open a specially crafted Excel file...
Nagios XI Command Injection (CVE-2019-20197)
A command Injection vulnerability exists in Nagios XI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
LAquis SCADA Web Server Command Injection (CVE-2018-18996)
A command injection vulnerability exists in LAquis SCADA. The vulnerability is due to improper handling of parameter submitted in requests. Successful exploitation results in the execution of arbitrary commands with the privileges of the web server process...
Microsoft ActiveX Data Objects Remote Code Execution (CVE-2019-0888)
A use-after-free vulnerability exists in ActiveX Data Objects. This vulnerability is due to the way that ActiveX Data Objects ADO handle objects in memory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Visual Studio Vscontent Information Disclosure (CVE-2019-0537)
An information disclosure vulnerability exists in Microsoft visual studio. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Symantec DLP Cross-Site Scripting (CVE-2019-9701)
A cross-site scripting vulnerability exists in Symantec DLP 15.5 MP1. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the effected system...
OpenMRS Platform Insecure Deserialization (CVE-2018-19276)
An Insecure Deserialization vulnerability exists in OpenMRS platform. A remote attacker can exploit this vulnerability by sending a specially crafted serialized object. Successful exploitation can result in arbitrary code execution in the effected system...