13538 matches found
Sitecore.NET Directory Traversal (CVE-2018-7669)
A directory traversal vulnerability exists in Sitecore.NET. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
Microsoft Windows Information Disclosure(CVE-2019-1227)
An information disclosure vulnerability exists in microsoft windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
NGINX NJS Heap-Based Buffer Overflow (CVE-2019-11839)
A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft VBScript Remote Code Execution (CVE-2020-1058)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CoDeSys V3 CmpRouter and CmpRouterEmbedded Integer Overflow (CVE-2019-5105)
An integer overflow vulnerability exists in CoDeSys V3 CmpRouter and CmpRouterEmbedded components. The vulnerability is due to improper validation of user-supplied data. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted message to the target server. Successf...
Nagios XI Cross-Site Scripting (CVE-2019-20139)
A cross-site scripting vulnerability exists in Nagios XI. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...
Dreambox Opendreambox Command Execution (CVE-2017-14135)
A command execution vulnerability exists in dreambox opendreambox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft Excel Remote Code Execution (CVE-2019-1448)
A remote code execution vulnerability exists in Microsoft Excel. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
LAquis SCADA LGX Out-Of-Bounds Write (CVE-2018-18986)
An out-of-bounds write vulnerability exists in the LAquis SCADA. This vulnerability is due to improper validation of user-supplied data when parsing the LGX report file. Successful exploitation would result in a denial of service condition...
FUDForum Remote Code Execution (CVE-2019-18873)
A remote code execution vulnerability exists in FUDForum. Successful exploitation could result in execution of arbitrary code on the affected system...
Microsoft ActiveX Data Objects Remote Code Execution (CVE-2019-0888)
A use-after-free vulnerability exists in ActiveX Data Objects. This vulnerability is due to the way that ActiveX Data Objects ADO handle objects in memory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Graphics Component Elevation of Privilege (CVE-2019-1437)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Win32k Elevation of Privilege (CVE-2019-1396)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cisco IMC Supervisor and Cisco UCS Director Command Injection (CVE-2019-1936)
A command injection vulnerability exists in Cisco IMC Supervisor and Cisco UCS Director. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary commands in the affected system...
Zoom Client Webcam Denial of Service (CVE-2019-13449)
A denial of service vulnerability exists in Zoom Client Webcam. Successful exploitation of this vulnerability could result in denial of service conditions...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1106)
...
Microsoft Outlook for Android Spoofing (CVE-2019-1105)
A spoofing vulnerability exists in Microsoft Outlook for Android. An authenticated attacker could exploit the vulnerability by sending a specially crafted email to a victim. Successful exploitation of this vulnerability may allow running scripts in the context of the current user...
Rejetto HTTP File Server Remote Code Execution (CVE-2014-6287)
A remote code execution vulnerability exists in Rejetto HTTP File Server. This vulnerability is due to a regular expression that fails to handle null bytes. A remote unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to a target server...
Microsoft Windows DHCP Client Remote Code Execution (CVE-2019-0726)
A remote code execution vulnerability exists in Microsoft DHCP Client. The vulnerability is due to improper processing of DHCP response messages, causing memory corruption. A remote attacker could exploit this vulnerability by sending maliciously crafted DHCP responses to a vulnerable target...
Microsoft Windows SMB Information Disclosure (CVE-2019-0703)
An information disclosure vulnerability exists in the SMB component of Microsoft Windows SMB server. The vulnerability is due to improper handling of SMB requests. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted SMB messages to a target server...
Rockwell Automation FactoryTalk Services Platform Denial of Service (CVE-2018-18981)
A buffer overflow vulnerability exists in Rockwell Automation FactoryTalk Services Platform. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Advantech WebAccess SQL Injection (CVE-2018-5443)
An SQL injection vulnerability exists in Advantech WebAccess/SCADA. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Yi Technology Home Camera cloudAPI SSID Code Execution (CVE-2018-3910)
A remote code execution vulnerability exists in Yi Home Camera. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Axentra Hipserv Multiple Vulnerabilities (CVE-2018-18471)
Information disclosure and command injection vulnerabilities exist in Axentra Hipserv. This is due to an incorrectly configured XML parser accepting XML external entities. A remote unauthenticated attacker may exploit this vulnerability to disclose the contents of files or execute malicious...
WebRTC FEC Out Of Bounds Read (CVE-2018-16083)
A out of bounds read vulnerability exists in WebRTC. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
D-Link Central WiFiManager Cross-Site Scripting (CVE-2018-17441; CVE-2018-17443)
Multiple cross-site scripting vulnerabilities exist in D-Link Central WiFiManager Software Controller. Successful exploitation of the vulnerabilities would allow remote attackers to inject arbitrary web scripts into the affected system...
Google PDFium Out-of-bounds read (CVE-2018-16076)
An out-of-bounds and vulnerability exists in Google PDFium. The vulnerability is due to an error in parsing a malformed JBIG2 image stream in a PDF document. Successful exploitation could result in sensitive data exposure and memory corruption...
LG Smart IP Camera Authentication Bypass (CVE-2018-16946)
An authentication bypass vulnerability has been reported in the LG Smart IP Camera. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...
Microsoft Internet Explorer Security Feature Bypass (CVE-2018-0949)
A security feature bypass vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to improper implementation of the mixed content warning security feature. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected versi...
D-Link DIR-620 Command Injection (CVE-2018-6211)
A command injection vulnerability exists in D-Link DIR-620 routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands...
HP AIO Archive Query Server Stack Buffer Overflow - Ver2 (CVE-2013-6189)
A remote code execution vulnerability exists in Application Information Optimizer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Multiple PDF readers NTLMv2 Credential Theft (CVE-2018-4993)
A data leakage vulnerability exists in Multiple PDF readers. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted PDF file. Successful results in leakage of the affected user's Net-NTLM credentials...
HPE Intelligent Management Center Remote Code Execution (CVE-2017-12491) - Ver2
A remote code execution vulnerability exists in HPE Intelligent Management Center. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Office Information Disclosure (CVE-2018-0950)
A vulnerability exists in RTF based emails which cause information disclosure through Outlook on Windows. The vulnerability is due to an error in the way Microsoft Office improperly discloses the contents of its memory. A remote attacker can exploit this issue by enticing a victim to open a...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2018-0935)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Desktop Bridge VFS Elevation of Privilege (CVE-2018-0877)
A vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Microsoft Browser Scripting Engine Memory Corruption (CVE-2018-0762)
A Type Confusion vulnerability exists in Microsoft Browsers. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. Successful exploitation of this vulnerability can achieve Remote Code Execution...
Microsoft Edge Memory Corruption (CVE-2017-11888; CVE-2018-8125)
A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is in the way that Microsoft browser javascript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the conte...
Apache HTTPD mod_http2 Null Pointer Dereference (CVE-2017-7659)
A null pointer dereference vulnerability exists in the modhttp2 module of Apache HTTPD. This vulnerability is due to improper handling of HTTP requests. A remote, unauthenticated attacker could exploit these vulnerability by sending maliciously crafted HTTP request to the affected server...
Adobe ColdFusion DataServicesCFProxy Insecure Deserialization (CVE-2017-11283)
An insecure deserialization vulnerability exists in the Flex integration service of Adobe ColdFusion. The vulnerability is due to the lack of input validation by the DataServicesCFProxy. A successful attack could lead to a remote code execution...
Technicolor TD5336 Router Remote Code Execution (CVE-2017-14127)
A remote code execution vulnerability is exist in Technicolor router. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11802)
A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way Microsoft Edge handles objects in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...
Apache HTTP Optionsbleed Memory Leak (CVE-2017-9798)
A use afetr free vulnerability exuists in Apache HTTP Server. A remote attacker can exploit this issue by sending an OPTIONS request to the vulnerable system. A successful attack may lead to memory leakage and loss of private data...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8634)
A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the conte...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8640)
A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way Microsoft Edge handles objects in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8646)
A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engines render content when handling objects in memory. A remote attacker could exploit these vulnerabilities by enticing the target user to open a specially crafted web page, potentiall...
Digium Asterisk CDR ast_cdr_setuserfield Buffer Overflow (CVE-2017-16671; CVE-2017-7617)
A buffer overflow exists in the CDR engine of Digium Asterisk. The vulnerability is due to a lack of size checking when setting the user field of a CDR. A remote, authenticated attacker can exploit this vulnerability by sending a crafted message to an affected Asterisk server...
Adobe Acrobat and Reader Heap Overflow (APSB17-11: CVE-2017-3042; CVE-2017-3054)
A Heap Overflow vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Microsoft Windows Kernel Information Disclosure (CVE-2017-0167)
An information disclosure vulnerability exists within Microsoft Windows. The vulnerability is caused when Microsoft Windows kernel improperly handles objects in memory. Successful exploitation of this issue might lead to leakage of sensitive information from the kernel...
Microsoft Windows DirectShow Information Disclosure (MS17-021: CVE-2017-0042)
An information disclosure vulnerability exists in Windows DirectShow. The vulnerability is due to the way Windows DirectShow handles objects in memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...