13538 matches found
Cisco Unified Contact Center Express Insecure Deserialization (CVE-2020-3280)
An insecure deserialization vulnerability exists in the Cisco Unified Contact Center Express. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Ozeki SMS Gateway Remote Code Execution (CVE-2020-14026)
A remote code execution vulnerability exists in Ozeki SMS Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Barracuda Load Balancer Remote Code Execution (CVE-2017-6320)
A remote code execution vulnerability exists in Barracuda load balancer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
NOKIA VitalSuite SPM SQL Injection (CVE-2021-41487)
An SQL injection vulnerability exists in the NOKIA VitalSuite SPM. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
IPConfigure Orchid Core VMS Directory Traversal (CVE-2018-10956)
A directory traversal vulnerability exists in ipconfigure orchid core vms. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Oracle JDeveloper ADF Faces Insecure Deserialization (CVE-2019-2904)
An insecure deserialization vulnerability exists in Oracle JDeveloper ADF Faces. This vulnerability is due to insufficient validation of HTTP requests...
WiKID 2FA Enterprise Server Cross-Site Scripting (CVE-2019-17116)
A cross-site scripting vulnerability exists in WiKID 2FA Enterprise Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apache OFBiz Insecure Deserialization (CVE-2019-0189)
An insecure deserialization vulnerability exists in Apache OFBiz. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cisco Data Center Network Manager Arbitrary File Deletion (CVE-2019-15981)
An arbitrary file deletion vulnerability exists in Cisco Data Center Network Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Dreambox Opendreambox Command Execution (CVE-2017-14135)
A command execution vulnerability exists in dreambox opendreambox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Terramaster Remote Command Execution (CVE-2018-13338; CVE-2018-13330; CVE-2018-13336)
A remote command execution vulnerability exists in Terramaster. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Asus ASUSWRT Information Disclosure (CVE-2018-14713)
An information disclosure vulnerability exists in Asus ASUSWRT. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Microsoft DirectX Elevation of Privilege (CVE-2020-0690)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Viber Desktop URI Handler Remote Code Execution (CVE-2019-12569)
A remote code execution vulnerability exists in Viber for Desktop. The vulnerability is due to improper sanitization. Successful exploitation could result in code execution on the target machine in the context of the application...
Microsoft Win32k Information Disclosure (CVE-2019-1469)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Cisco Webex Teams code Injection (CVE-2019-1636)
A remote code execution vulnerability exists in Cisco Webex Teams. The vulnerability is due to improper sanitation of user-supplied data which may be passed to the application as an option regarding the DLL loading path. Successful exploitation could result in code execution on the target machine...
Citrix StoreFront Server XML External Entity Injection (CVE-2019-13608)
An XML external entity injection vulnerability exists in Citrix StoreFront Server. A successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...
SQLite fts3_tokenizer Untrusted Pointer Remote Code Execution (CVE-2019-8602; CVE-2015-7036)
A remote code execution vulnerability exists in SQlite fts3tokenizer. Successful exploitation could result in execution of arbitrary code on the affected system...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-1004)
...
WebKitGTK Denial of Service (CVE-2019-8375)
A denial of service vulnerability exists in WebKitGTK. Successful attack can result in a denial of service condition...
Microsoft Win32k Elevation of Privilege (CVE-2019-0797)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Rockwell Automation FactoryTalk Services Platform Denial of Service (CVE-2018-18981)
A buffer overflow vulnerability exists in Rockwell Automation FactoryTalk Services Platform. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Microsoft Windows SMB Remote Code Execution (CVE-2019-0630)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Elevation of Privilege (CVE-2019-0566)
An elevation of privilege vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Trend Micro Control Manager sCloudService GetPassword SQL Injection (CVE-2018-3604)
An SQL injection vulnerability exists in the Trend Micro Control Manager. The vulnerability is due to improper validation of user-supplied input on SOAP sCloudService requests invoking the GetPassword method. Successful exploitation of the vulnerability could allow the attacker to execute arbitra...
7-Zip RAR Solid Compression Remote Code Execution (CVE-2018-10115)
A remote code execution vulnerability exists in the RAR component of 7-Zip. This vulnerability is due to improper handling of solid compression...
Advantech WebAccess SCADA bwmakdir Stack-based Buffer Overflow (CVE-2018-7499)
A stack-based buffer overflow vulnerability exists in the webvrpcs service of Advantech WebAccess. The vulnerability is due to a lack of boundary checks while copying user-supplied data into a stack-based buffer...
Microsoft Windows Scripting Engine Memory Corruption (CVE-2018-8552)
A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Axentra Hipserv Multiple Vulnerabilities (CVE-2018-18471)
Information disclosure and command injection vulnerabilities exist in Axentra Hipserv. This is due to an incorrectly configured XML parser accepting XML external entities. A remote unauthenticated attacker may exploit this vulnerability to disclose the contents of files or execute malicious...
Microsoft Device Guard Code Integrity Policy Security Feature Bypass (CVE-2018-8492)
A security bypass vulnerability exists in Microsoft Device Guard. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...
LG Smart IP Camera Authentication Bypass (CVE-2018-16946)
An authentication bypass vulnerability has been reported in the LG Smart IP Camera. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...
Multi Step Form Multiple Unauthenticated Reflected XSS (CVE-2018-14430)
A reflected XSS vulnerability has been reported in WordPress Plugin Multi Step Form. A remote attacker can exploit this issue by execute JavaScript code through Reflected XSS attacks...
Multiple PDF readers NTLMv2 Credential Theft (CVE-2018-4993)
A data leakage vulnerability exists in Multiple PDF readers. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted PDF file. Successful results in leakage of the affected user's Net-NTLM credentials...
Microsoft Office Information Disclosure (CVE-2018-0950)
A vulnerability exists in RTF based emails which cause information disclosure through Outlook on Windows. The vulnerability is due to an error in the way Microsoft Office improperly discloses the contents of its memory. A remote attacker can exploit this issue by enticing a victim to open a...
Advantech WebAccess Buffer Overflow (CVE-2017-14016) - Ver2
A buffer overflow vulnerability exists in Advantech WebAccess. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
VMware Spring Framework Remote Code Execution (CVE-2018-1270; CVE-2018-1275)
A remote code execution vulnerability exists in VMware Spring Framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Excel Remote Code Execution (CVE-2018-0920)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-0776)
A remote code execution vulnerability has been reported in Microsoft Edge. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a victim to open a specially crafted web page that could cause memory corruptio...
Cisco Prime Network Analysis Module Graph Directory Traversal (CVE-2017-12285)
A directory traversal vulnerability exists in the Cisco Prime Network Analysis Module. The vulnerability is due to the way Cisco Prime Network Analysis Module handles input validation. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted packet to the target...
WordPress Userpro Plugin Authentication Bypass (CVE-2017-16562)
An authentication bypass vulnerability exists in WordPress Userpro Plugin. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11802)
A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way Microsoft Edge handles objects in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...
HPE Intelligent Management Center multiple Expressions Language Injection (CVE-2017-12500; CVE-2017-12526)
An Expression Language injection vulnerability exists in HPE Intelligent Management Center. The vulnerability is due to insufficient handling of the beanName request parameter on ictExpertDownload.xhtml and on wmiConfigContent.xhtml . A remote, authenticated attacker can exploit this vulnerabilit...
Foxit Reader PDF Command Injection Remote Code Execution (CVE-2017-10951)
A remote code execution vulnerability has been reported in Foxit Reader. The vulnerability is due improper validation of a string before using it to execute a system call. A remote attacker could exploit this vulnerability by enticing a user to click a maliciously crafted file. Successful...
Cisco Prime Collaboration Provisioning ScriptMgr Authentication Bypass (CVE-2017-6622)
An authentication bypass vulnerability has been reported in Cisco Prime Collaboration Provisioning. The vulnerability is due to insufficient validation on user supplied paths when a request is sent to ScriptMgr servlet. A remote, unauthenticated attacker can exploit this vulnerability by sending ...
Schneider Electric U.motion Builder track_import_export.php SQL Injection (CVE-2017-7973)
An SQL injection vulnerability exists in Schneider Electric U.motion Builder. The vulnerability is due to insufficient validation of the objectid HTTP parameter of the trackimportexport.php request. A remote, unauthenticated user can exploit this vulnerability by sending a crafted HTTP request to...
Siemens SIPROTEC Denial of Service (CVE-2015-5374)
A vulnerability exists in Siemens SIPROTEC. This vulnerability, aka Crash Override or Industroyer, is due to the way SIPROTEC handles certain malformed protocol requests. A successful attack can lead to a denial of service...
Microsoft Windows Kernel Information Disclosure (CVE-2017-0259)
An information disclosure vulnerability exists in Microsoft Windows. The vulnerability is due to the Windows kernel improperly initializing objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system of the user...
Microsoft IIS Server XSS Elevation of Privilege (MS17-016: CVE-2017-0055)
A cross-site scripting vulnerability exists in Microsoft IIS, due to improper input validation. A remote attacker can exploit this issue by enticing an affected user to open a specially crafted web page. Successful exploitation could allow an attacker to spoof content, disclose information, or ta...
Microsoft Windows DirectShow Information Disclosure (MS17-021: CVE-2017-0042)
An information disclosure vulnerability exists in Windows DirectShow. The vulnerability is due to the way Windows DirectShow handles objects in memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
SafeNet SoftRemote GROUPNAME Buffer Overflow (CVE-2009-3861)
A stack buffer overflow vulnerability exists in SafeNet SoftRemote Security Policy Editor. The vulnerability is due to insufficient input validation while handling a specially formatted security policy. Successful exploitation could lead to arbitrary code execution in the security context of the...