Kamailio Buffer Overflow (CVE-2018-8828)

A buffer overflow vulnerability exists in Kamailio. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Win32k Elevation of Privilege (CVE-2022-35750)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

MediaWiki Semantic Drilldown SQL Injection (CVE-2022-29904)

An SQL injection vulnerability exists in MediaWiki Semantic Drilldown. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

TOTOLink A3000R Command Injection (CVE-2022-25075)

A command injection vulnerability exists in TOTOLink A3000R. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Spring Core Remote Code Execution (CVE-2022-22965)

A remote code execution vulnerability exists in Spring Core. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows DWM Core Library Elevation of Privilege (CVE-2022-21994)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-22000)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Micro Focus Access Manager SQL Injection (CVE-2021-22506)

An SQL Injection vulnerability exists in Micro Focus Access Manager. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Adobe Acrobat and Reader Stack-based Buffer Overflow (APSB22-01: CVE-2021-44703)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Zoho ManageEngine ADManager Plus Arbitrary File Upload (CVE-2021-37921)

An unrestricted file upload vulnerability exists in ManageEngine ADManager Plus. The vulnerability is due to lack of validation of uploaded files in ReportsAction class...

WordPress Download Manager Plugin Cross-Site Scripting (CVE-2021-24773)

A stored cross-site scripting vulnerability exists in Download Manager Plugin for WordPress. The vulnerability is due to insufficient sanitization of user-supplied data in Attach File section...

Seacms Remote Code Execution (CVE-2021-37358)

A remote code execution vulnerability exists in Seacms. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Bludit Remote Code Execution (CVE-2020-18879)

A remote code execution vulnerability exists in Bludit. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Centreon MediaWiki SQL Injection (CVE-2021-37558)

An SQL injection vulnerability exists in Centreon MediaWiki. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Tenda AC1200 Denial Of Service (CVE-2020-28095)

A denial of service vulnerability exists in Tenda AC1200. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Microsoft DWM Core Library Elevation of Privilege (CVE-2021-33739)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress Food And Drink Menu Plugin Remote Code Execution (CVE-2020-29045)

A remote code execution vulnerability exists in WordPress Food And Drink Menu Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Apple Darwin Streaming Server Remote Code Execution (CVE-2003-0050)

A remote code execution vulnerability exists in Apple Darwin Streaming Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Ipswitch WhatsUp Gold SQL Injection (CVE-2015-8261)

An SQL injection vulnerability exists in Ipswitch WhatsUp Gold. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

EgavilanMedia ECM Address Book SQL Injection (CVE-2020-35276)

An SQL injection vulnerability exists in EgavilanMedia ECM Address Book. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Adobe Acrobat and Reader Use After Free (APSB21-09: CVE-2021-21033)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Privilege Escalation (CVE-2016-3225)

A privilege escalation vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Adobe Acrobat Data Exfiltration (CVE-2020-29075)

A data exfiltration vulnerability has been reported in Adobe Acrobat. The vulnerability is due to the existence of two JavaScript functions that perform DNS lookups without requiring any specific user action. A remote attacker can exploit this vulnerability by enticing a target user into opening ...

Moxa AWK-3131A Cross-Site Scripting (CVE-2016-8719)

A cross-site scripting vulnerability exists in Moxa AWK-3131A. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Gemtek WRTM-127ACN Command Injection (CVE-2020-24365)

A command injection vulnerability exists in Gemtek WRTM-127ACN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Joomla GMapFP Component Arbitrary File Upload (CVE-2020-23972)

An arbitrary file upload vulnerability exists in Joomla GMapFP Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Easycorp Zentao Pro Command Injection (CVE-2020-7361)

A command injection vulnerability exists in Easycorp Zentao Pro. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows Host Compute Service Shim Remote Code Execution (CVE-2018-8115)

A vulnerability exists in Microsoft windows host compute service shim x under 0.6.10. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Opmantek Open-AudIT m_discoveries.php Command Injection (CVE-2020-11941)

A command injection vulnerability exists in Open-AudIT. The vulnerability is due to insufficient input validation in mdiscoveries.php...

DrayTek Vigor Buffer Overflow (CVE-2020-14473)

A buffer overflow vulnerability exists in DrayTek Vigor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Mosca Project Denial of Service (CVE-2018-11615)

A denial-of-service vulnerability exists in mosca project mosca 2.8.1. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

IBM Tivoli Key Lifecycle Manager Cross-Site Request Forgery (CVE-2017-1672)

A vulnerability exists in ibm security key lifecycle manager. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Asus ASUSWRT Information Disclosure (CVE-2018-14713)

An information disclosure vulnerability exists in Asus ASUSWRT. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Asus Rt Ac3200 Firmware Command Injection (CVE-2018-14714)

A command injection vulnerability exists in Asus Rt Ac3200 Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Digium Asterisk res_http_websocket Denial of Service (CVE-2018-17281)

A denial of service vulnerability exists in Digium Asterisk reshttpwebsocket. The vulnerability may occur when sending an HTTP Upgrade Request. Successful exploitation of this vulnerability could allow a remote attacker to cause denial of service conditions on the target system...

Nagios XI Command Injection (CVE-2019-20197)

A command Injection vulnerability exists in Nagios XI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Viber Desktop URI Handler Remote Code Execution (CVE-2019-12569)

A remote code execution vulnerability exists in Viber for Desktop. The vulnerability is due to improper sanitization. Successful exploitation could result in code execution on the target machine in the context of the application...

FUDForum Remote Code Execution (CVE-2019-18873)

A remote code execution vulnerability exists in FUDForum. Successful exploitation could result in execution of arbitrary code on the affected system...

Microsoft Visual Studio Vscontent Information Disclosure (CVE-2019-0537)

An information disclosure vulnerability exists in Microsoft visual studio. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-1055)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1002)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Jenkins Stapler Web Framework Remote Code Execution (CVE-2018-1000861)

A remote code execution vulnerability exists in the Jenkins Stapler web framework. A remote attacker can exploit this vulnerability to execute arbitrary code via a specially crafted HTTP request...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0810)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Kernel Information Disclosure (CVE-2019-0840)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

WebKitGTK Denial of Service (CVE-2019-8375)

A denial of service vulnerability exists in WebKitGTK. Successful attack can result in a denial of service condition...

Rockwell Automation FactoryTalk Services Platform Denial of Service (CVE-2018-18981)

A buffer overflow vulnerability exists in Rockwell Automation FactoryTalk Services Platform. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

OpenSSH sshd Username Information Disclosure (CVE-2018-15473)

An information disclosure vulnerability exists in OpenSSH. The vulnerability is due to the different ways in which the sshd daemon responds to crafted SSH packets. A successful attack can result in the attacker being able to determine whether a user exists on the system...

Advantech WebAccess SCADA bwmakdir Stack-based Buffer Overflow (CVE-2018-7499)

A stack-based buffer overflow vulnerability exists in the webvrpcs service of Advantech WebAccess. The vulnerability is due to a lack of boundary checks while copying user-supplied data into a stack-based buffer...

Rockwell Automation RSLinx Classic Stack Buffer Overflow (CVE-2018-14829)

A stack buffer overflow vulnerability exists in Rockwell Automation RSLinx Classic. The vulnerability is due to incorrect handling of malformed EtherNet/IP packets. A successful exploitation of the vulnerability could lead to a system crash...

Axentra Hipserv Multiple Vulnerabilities (CVE-2018-18471)

Information disclosure and command injection vulnerabilities exist in Axentra Hipserv. This is due to an incorrectly configured XML parser accepting XML external entities. A remote unauthenticated attacker may exploit this vulnerability to disclose the contents of files or execute malicious...