IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow (CVE-2007-1675)

...

Preemptive Protection against Snort Inline Fragmentation Denial of Service Vulnerability

Snort is an open source network intrusion prevention and detection system. The frag3 preprocessor in Snort when configured for inline use on Linux is prone to a denial of service vulnerability. A remote attacker could exploit this issue to cause the application to crash on a target system...

Symantec Veritas NetBackup CONNECT_OPTIONS Request Buffer Overflow (CVE-2006-5822)

Symantec Veritas NetBackup Server is a client/server backup application solution used for performing scheduled automatic backups and on-demand backups requested by users. The vulnerability is due to a boundary error in the NetBackup service. An attacker can exploit this issue by sending a...

Preemptive Protection against McAfee HTTP Server Buffer Overflow Vulnerability

McAfee ePolicy Orchestrator provides proactive defense against malicious threats and attacks. McAfee ProtectionPilot is a centralized system security manager designed specifically for businesses with up to 500 systems.A vulnerability has been reported in McAfee ePolicy Orchestrator and in McAfee...

Update Protection against Ipswitch WhatsUp Professional 2006 Multiple Vulnerabilities

WhatsUp is a tool from Ipswitch that monitors application and network. WhatsUp runs a custom web server for the application Web interface on port 8022. Multiple flaws have been identified in the server including XSS vulnerabilities, page redirection via cross site scripting and header spoofing...

Update Protection against a Vulnerability in Microsoft FrontPage Server Extensions Vulnerability (MS06-017)

FrontPage Server Extensions is a set of tools that can be installed on a Web site. They allow authorized personnel to manage the server, add or change content, and perform other tasks. A vulnerability was detected in Front Page Server Extensions that may allow an attacker take a variety of action...

Pimcore Cross Site Scripting (CVE-2022-0831; CVE-2022-0832)

A cross site scripting vulnerability exists in Pimcore. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary script into the affected system...

WWBN AVideo Command Injection (CVE-2022-32572)

A command injection vulnerability exists in WWBN AVideo. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

WikiDocs Arbitrary File Upload (CVE-2022-23375)

An arbitrary file upload vulnerability exists in WikiDocs. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PublicCMS Remote Code Execution (CVE-2022-23389)

A remote code execution vulnerability exists in PublicCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Client Server Run-time Subsystem Elevation of Privilege (CVE-2022-37989)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Graphics Device Interface Remote Code Execution (CVE-2018-8397)

A remote code execution vulnerability exists in the GDI components of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit the vulnerability by enticing a user to open a specially crafted document...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-35803)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Hyper-V Elevation of Privilege (CVE-2022-35751)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Exchange Server Spoofing (CVE-2022-24463)

A spoofing vulnerability exists in Microsoft Exchange Server. Successful exploitation of this vulnerability would allow a remote attacker to impersonate and present itself as a legitimate host...

QNAP FileStation Cross Site Scripting (CVE-2018-19943)

A cross site scripting vulnerability exists in QNAP FileStation. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

WordPress Documentor Plugin SQL Injection (CVE-2022-0773)

An SQL injection vulnerability exists in WordPress Documentor Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Jira Server-Side Request Forgery (CVE-2019-8451)

A Server Side Request Forgery vulnerability exists in Jira. A remote attacker may exploit this issue by making a specially crafted HTTP request. Successful exploitation would allow attackers to create HTTP requests on behalf of the vulnerable server...

Cisco NFVIS Improper Access Control (CVE-2022-20777)

An improper access control vulnerability exists in Cisco NFVIS. Successful exploitation of this vulnerability could allow a remote attacker to compromise the NFVIS host completely...

Spring Cloud Function Remote Code Execution (CVE-2022-22963)

A remote code execution vulnerability exists in Spring Cloud Function. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Print Spooler Elevation of Privilege (CVE-2022-22718)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SonicWall Email Security Directory Traversal (CVE-2021-20023)

A directory traversal vulnerability exists in SonicWall Email Security. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Adobe Acrobat and Reader Stack-based Buffer Overflow (APSB22-01: CVE-2021-44703)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Adobe Acrobat and Reader Use After Free (APSB22-01: CVE-2021-45062)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Out-of-bounds Write (APSB22-01: CVE-2021-45068)

An out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Zoho ManageEngine ADManager Plus Arbitrary File Upload (CVE-2021-37921)

An unrestricted file upload vulnerability exists in ManageEngine ADManager Plus. The vulnerability is due to lack of validation of uploaded files in ReportsAction class...

Cisco SD-WAN vManage Remote Code Execution (CVE-2020-3387)

A remote code execution vulnerability exists in Cisco SD-WAN vManage. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft DWM Core Library Elevation of Privilege (CVE-2021-33739)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Ambarella Oryx RTSP Server Buffer Overflow (CVE-2020-24918)

A buffer overflow vulnerability exists in Ambarella Oryx RTSP Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Apple Darwin Streaming Server Remote Code Execution (CVE-2003-0050)

A remote code execution vulnerability exists in Apple Darwin Streaming Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Ipswitch WhatsUp Gold SQL Injection (CVE-2015-8261)

An SQL injection vulnerability exists in Ipswitch WhatsUp Gold. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Soabase Exhibitor UI Config Command Injection (CVE-2019-5029)

A command injection vulnerability exists in Soabase Exhibitor, an open source project from Netflix. The vulnerability is due to improper validation of user-supplied input in the Config tab of Exhibitor web interface. A remote unauthenticated attacker can exploit the vulnerability by sending craft...

AVM Fritz!Box Command Injection (CVE-2014-9727)

A remote command injection vulnerability exists in AVM Fritz!Box. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Cisco Firepower Management Center Arbitrary File Read (CVE-2016-6435)

A vulnerability exists in Cisco Firepower Management Center. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Crestron Authentication Bypass (CVE-2019-3932)

An authentication bypass vulnerability exists in Crestron. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

Joomla GMapFP Component Arbitrary File Upload (CVE-2020-23972)

An arbitrary file upload vulnerability exists in Joomla GMapFP Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Sonatype Nexus Repository Remote Code Execution (CVE-2020-10204)

A remote code execution vulnerability exists in Sonatype Nexus Repository. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Ozeki SMS Gateway Remote Code Execution (CVE-2020-14026)

A remote code execution vulnerability exists in Ozeki SMS Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

DLink DIR-615 Cross Site Request Forgery (CVE-2017-7398)

A cross site request forgery vulnerability exists in DLink DIR-615 firmware. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Microsoft Internet Explorer Memory Corruption (CVE-2015-2419)

A remote code execution vulnerability exists in the way that the JScript engine, when rendered in Internet Explorer, handles objects in memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Internet Explorer...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2020-1115)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco UCS Director saveWindowsNetworkConfig Directory Traversal (CVE-2020-3249)

A directory traversal vulnerability exists in Cisco UCS Directory. The vulnerability is due to insufficient validation of user input in the saveWindowsNetworkConfig method...

Barracuda Load Balancer Remote Code Execution (CVE-2017-6320)

A remote code execution vulnerability exists in Barracuda load balancer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

NOKIA VitalSuite SPM SQL Injection (CVE-2021-41487)

An SQL injection vulnerability exists in the NOKIA VitalSuite SPM. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

IPConfigure Orchid Core VMS Directory Traversal (CVE-2018-10956)

A directory traversal vulnerability exists in ipconfigure orchid core vms. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Microsoft Asp.net Core Privilege Escalation (CVE-2019-1302)

An elevation of privilege vulnerability exists in microsoft asp.net core. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco Data Center Network Manager Arbitrary File Deletion (CVE-2019-15981)

An arbitrary file deletion vulnerability exists in Cisco Data Center Network Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Asus ASUSWRT Information Disclosure (CVE-2018-14713)

An information disclosure vulnerability exists in Asus ASUSWRT. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft DirectX Elevation of Privilege (CVE-2020-0690)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Win32k Elevation of Privilege (CVE-2020-0887)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...