Update Protection against A Format String Vulnerability in mod_auth_pgsql for Apache

A vulnerability exists in multiple versions of an authentication module modauthpgsql for Apache httpd. To exploit this vulnerability, a user can supply specially crafted information to trigger a flaw in certain logging functions of the module. Successful exploitation could result in the execution...

Advantech R-SeeNet SQL Injection (CVE-2021-21924)

An SQL injection vulnerability exists in Advantech R-SeeNet. The vulnerability is due to improper input. A successful attack may result in arbitrary SQL command execution against the database on the target server...

Apache httpd mod_proxy NULL Pointer Dereference (CVE-2021-44224)

A NULL pointer dereference vulnerability exists in the modproxy module of Apache httpd. The vulnerability is due to improper handling of malformed Request-URIs sent to servers configured as a forward proxy. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted...

Jenkins Config File Provider Plugin External Entity Injection (CVE-2021-21642)

An XXE vulnerability exists in Jenkins Config File Provider Plugin. The vulnerability is due to insufficient validation of XML data when utilizing Config File Provider Plugin...

WordPress Core Cross-Site Scripting (CVE-2022-21662)

A cross-site scripting vulnerability exists in WordPress. This vulnerability is due to improper input validation...

Adobe ColdFusion Improper Restriction of XML External Entity (APSB22-44: CVE-2022-42341)

An Improper Restriction of XML External Entity vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Datalust Seq Authentication Bypass (CVE-2018-8096)

An authentication bypass vulnerability exists in Datalust Seq. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Microsoft SharePoint Server Remote Code Execution (CVE-2022-38053)

A remote code execution vulnerability exists in Microsoft SharePoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Zoho ManageEngine OpManager SQL Injection (CVE-2019-17602)

An SQL injection vulnerability exists in Zoho ManageEngine OPManager. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Adobe Acrobat and Reader Out-of-bounds Read (APSB22-32: CVE-2022-34236)

An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

D-Link DIR-859 Buffer Overflow (CVE-2022-25106)

A buffer overflow vulnerability exists in D-Link DIR-859. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

TOTOLink A3000R Command Injection (CVE-2022-25075)

A command injection vulnerability exists in TOTOLink A3000R. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Redis Lua Remote Code Execution (CVE-2022-0543)

A remote code execution vulnerability exists in Redis Lua. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Spring Core Remote Code Execution (CVE-2022-22965)

A remote code execution vulnerability exists in Spring Core. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Micro Focus Access Manager SQL Injection (CVE-2021-22506)

An SQL Injection vulnerability exists in Micro Focus Access Manager. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

SAP NetWeaver Remote Code Execution (CVE-2018-2380)

A remote code execution vulnerability exists in SAP NetWeaver. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

ExifTool Remote Code Execution (CVE-2021-22204)

A remote code execution vulnerability exists in ExifTool. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Simple Water Refilling Station Management System SQL Injection (CVE-2021-38840)

An SQL injection vulnerability exists in Simple Water Refilling Station Management System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Pear Admin Think Arbitrary File Upload (CVE-2021-29377)

An arbitrary file upload vulnerability exists in Pear Admin Think. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Bludit Remote Code Execution (CVE-2020-18879)

A remote code execution vulnerability exists in Bludit. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Realtek Jungle SDK Command Injection (CVE-2021-35394)

A command injection vulnerability exists in Realtek Jungle SDK. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-31954)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Online Reviewer System SQL Injection (CVE-2021-27130)

An SQL injection vulnerability exists in Online Reviewer System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft Outlook Security Feature Bypass (CVE-2017-0204)

A security feature bypass vulnerability exists in Microsoft Outlook. Successful exploitation of this vulnerability could allow remote attackers to bypass security tests and protocols on the affected system...

Microsoft SharePoint Server Remote Code Execution (CVE-2021-27076)

A remote code execution vulnerability exists in Microsoft Microsoft SharePoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Sdg PNPSCADA SQL Injection (CVE-2020-24841)

An SQL injection vulnerability exists in Sdg PNPSCADA. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

MonoCMS Remote Code Execution (CVE-2020-28672)

A remote code execution vulnerability exists in MonoCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Kaspersky Internet Security KLIF driver Denial of service (CVE-2016-4305)

A denial-of-service vulnerability exists in Kaspersky Internet Security. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

ZOHO ManageEngine ADSelfService Plus Information Disclosure (CVE-2010-3272)

An information disclosure vulnerability exists in ZOHO ManageEngine ADSelfService Plus. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Microsoft Windows Host Compute Service Shim Remote Code Execution (CVE-2018-8115)

A vulnerability exists in Microsoft windows host compute service shim x under 0.6.10. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Exacqvision Enterprise Manager Remote Code Execution (CVE-2020-9047)

A remote code execution vulnerability exists in Exacqvision Enterprise Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Opmantek Open-AudIT m_discoveries.php Command Injection (CVE-2020-11941)

A command injection vulnerability exists in Open-AudIT. The vulnerability is due to insufficient input validation in mdiscoveries.php...

PHP-Fusion Administration banners.php Cross-Site Scripting (CVE-2020-12438)

A stored cross-site scripting vulnerability exists in PHP-Fusion Banner feature. The vulnerability is due to improper validation of user input in HTTP requests...

HPE Intelligent Management Remote Rode Execution (CVE-2019-5386)

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter by the class...

Oracle JDeveloper ADF Faces Insecure Deserialization (CVE-2019-2904)

An insecure deserialization vulnerability exists in Oracle JDeveloper ADF Faces. This vulnerability is due to insufficient validation of HTTP requests...

Centreon formMibs.php Command Injection (CVE-2019-15298)

A command injection vulnerability exists in the Centreon Web Application. Successful exploitation of this vulnerability could result in arbitrary command execution in the context of the server process...

Microvirt MEmu Command Injection (CVE-2019-14514)

A command Injection vulnerability exists in Microvirt MEmu. Successful exploitation of this vulnerability could result in execution of arbitrary code on the affected system...

Microsoft SharePoint Information Disclosure (CVE-2019-1443)

An information disclosure vulnerability exists in Microsoft SharePoint. Successful exploitation of this vulnerability could result in the disclosure of sensitive user information...

Apache OFBiz Insecure Deserialization (CVE-2019-0189)

An insecure deserialization vulnerability exists in Apache OFBiz. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Terramaster Remote Command Execution (CVE-2018-13338; CVE-2018-13330; CVE-2018-13336)

A remote command execution vulnerability exists in Terramaster. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Digium Asterisk res_http_websocket Denial of Service (CVE-2018-17281)

A denial of service vulnerability exists in Digium Asterisk reshttpwebsocket. The vulnerability may occur when sending an HTTP Upgrade Request. Successful exploitation of this vulnerability could allow a remote attacker to cause denial of service conditions on the target system...

HPE Intelligent Management Center Remote Code Execution (CVE-2019-5386)

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter by the ViewBatchTaskResultDetailBean class. A remote, authenticated attacker can exploit this vulnerability by sending a...

Oracle Weblogic Server Information Disclosure (CVE-2019-2647; CVE-2019-2648)

An information disclosure vulnerability exists in Oracle Weblogic Server. This vulnerability is due to insufficient validation of XML data. Successful exploitation of this vulnerability could lead to the disclosure of file contents on the target machine...

LAquis SCADA Web Server Command Injection (CVE-2018-18996)

A command injection vulnerability exists in LAquis SCADA. The vulnerability is due to improper handling of parameter submitted in requests. Successful exploitation results in the execution of arbitrary commands with the privileges of the web server process...

Microsoft ActiveX Data Objects Remote Code Execution (CVE-2019-0888)

A use-after-free vulnerability exists in ActiveX Data Objects. This vulnerability is due to the way that ActiveX Data Objects ADO handle objects in memory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Citrix StoreFront Server XML External Entity Injection (CVE-2019-13608)

An XML external entity injection vulnerability exists in Citrix StoreFront Server. A successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...

Microsoft Visual Studio Vscontent Information Disclosure (CVE-2019-0537)

An information disclosure vulnerability exists in Microsoft visual studio. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Symantec DLP Cross-Site Scripting (CVE-2019-9701)

A cross-site scripting vulnerability exists in Symantec DLP 15.5 MP1. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the effected system...

Network Quota (CVE-2002-0629; CVE-2002-0957)

...

Rejetto HTTP File Server Remote Code Execution (CVE-2014-6287)

A remote code execution vulnerability exists in Rejetto HTTP File Server. This vulnerability is due to a regular expression that fails to handle null bytes. A remote unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to a target server...