13538 matches found
Microsoft Windows Print Spooler Elevation of Privilege (CVE-2022-22718)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Stack-based Buffer Overflow (APSB22-01: CVE-2021-44703)
A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Zoho ManageEngine ADManager Plus Arbitrary File Upload (CVE-2021-37921)
An unrestricted file upload vulnerability exists in ManageEngine ADManager Plus. The vulnerability is due to lack of validation of uploaded files in ReportsAction class...
Siemens SINEC NMS Directory Traversal (CVE-2021-33722)
A directory traversal vulnerability exists in Siemens SINEC NMS. The vulnerability is due to improper validation of user-supplied path while exporting firmware containers...
WordPress Download Manager Plugin Cross-Site Scripting (CVE-2021-24773)
A stored cross-site scripting vulnerability exists in Download Manager Plugin for WordPress. The vulnerability is due to insufficient sanitization of user-supplied data in Attach File section...
WordPress Hide My WP Plugin SQL Injection (CVE-2021-36916)
An SQL injection vulnerability exists in WordPress Hide My WP Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Realtek Jungle SDK Command Injection (CVE-2021-35394)
A command injection vulnerability exists in Realtek Jungle SDK. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft DWM Core Library Elevation of Privilege (CVE-2021-33739)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Ipswitch WhatsUp Gold SQL Injection (CVE-2015-8261)
An SQL injection vulnerability exists in Ipswitch WhatsUp Gold. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Asus Askey Routers Cross-Site Scripting (CVE-2021-27403)
A cross-site scripting vulnerability exists in Asus Askey routers. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Cisco Firepower Management Center Arbitrary File Read (CVE-2016-6435)
A vulnerability exists in Cisco Firepower Management Center. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Moxa AWK-3131A Cross-Site Scripting (CVE-2016-8719)
A cross-site scripting vulnerability exists in Moxa AWK-3131A. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Sonatype Nexus Repository Remote Code Execution (CVE-2020-10204)
A remote code execution vulnerability exists in Sonatype Nexus Repository. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
DLink DIR-615 Cross Site Request Forgery (CVE-2017-7398)
A cross site request forgery vulnerability exists in DLink DIR-615 firmware. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Microsoft Internet Explorer Memory Corruption (CVE-2015-2419)
A remote code execution vulnerability exists in the way that the JScript engine, when rendered in Internet Explorer, handles objects in memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Internet Explorer...
Projects World Travel Management System Authentication Bypass (CVE-2020-24203)
An authentication bypass vulnerability exists in Projects World Travel Management System. Successful exploitation of this vulnerability allow a remote attacker to gain unauthorized access to the affected system...
Cisco UCS Director saveWindowsNetworkConfig Directory Traversal (CVE-2020-3249)
A directory traversal vulnerability exists in Cisco UCS Directory. The vulnerability is due to insufficient validation of user input in the saveWindowsNetworkConfig method...
Microsoft MSHTML Engine Remote Code Execution (CVE-2020-1567)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Mosca Project Denial of Service (CVE-2018-11615)
A denial-of-service vulnerability exists in mosca project mosca 2.8.1. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
IBM Tivoli Key Lifecycle Manager Cross-Site Request Forgery (CVE-2017-1672)
A vulnerability exists in ibm security key lifecycle manager. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
WordPress Calculated Fields Form Plugin Cross Site Scripting (CVE-2020-7228)
A stored cross-site scripting vulnerability exists in Calculated Fields Form plugin of WordPress. The vulnerability is due to insufficient sanitization of user input to "field name" and "form name" of a form in the web application of the plugin...
Microsoft Asp.net Core Privilege Escalation (CVE-2019-1302)
An elevation of privilege vulnerability exists in microsoft asp.net core. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cisco Data Center Network Manager Directory Traversal (CVE-2019-15980)
A directory traversal vulnerability exists in Cisco Data Center Network Manager. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
Centreon Command Injection (CVE-2020-9463)
A command injection vulnerability exists in the Centreon Web Application. Successful attack may result in arbitrary command execution in the context of the server process...
Terramaster Remote Command Execution (CVE-2018-13338; CVE-2018-13330; CVE-2018-13336)
A remote command execution vulnerability exists in Terramaster. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft Windows Imaging API Remote Code Execution (CVE-2019-1311)
A remote code execution vulnerability exists in Microsoft Windows Imaging API. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Excel Remote Code Execution (CVE-2019-1448)
A remote code execution vulnerability exists in Microsoft Excel. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
HPE Intelligent Management Center PLAT Stack Buffer Overflow (CVE-2018-7074)
A stack buffer overflow vulnerability has been reported in HPE Intelligent Management Center PLAT. The vulnerability is due to an overly large block size parameter provided in the TFTP packet data. Successful exploitation could results in arbitrary code execution under the context of the SYSTEM. ...
LAquis SCADA LGX Out-Of-Bounds Write (CVE-2018-18986)
An out-of-bounds write vulnerability exists in the LAquis SCADA. This vulnerability is due to improper validation of user-supplied data when parsing the LGX report file. Successful exploitation would result in a denial of service condition...
Microsoft Win32k Information Disclosure (CVE-2019-1469)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Microsoft Office Word Information Disclosure (CVE-2019-0561)
An information disclosure vulnerability exists in the Word component of Microsoft Office. This vulnerability is due to improper handling of fields. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information...
NTPsec ntpd Out of Bounds Read (CVE-2019-6444)
An out of bounds read vulnerability has been reported in NTPsec ntpd. The vulnerability is due to insufficient validation of the address of a field to be read in a NTP packet. Successful exploitation could lead to disclosure of sensitive information...
PHP FastCGI Process Manager Remote Code Execution (CVE-2019-11043)
A remote code execution vulnerability exists in PHP-FPM nginx. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Fortinet FortiOS SSL VPN Directory Traversal (CVE-2018-13379)
A directory traversal vulnerability exists in Fortinet FortiOS. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
Microsoft Windows Kernel Elevation of Privilege (CVE-2019-1164)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Elevation of Privilege (CVE-2019-1174)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Network Quota (CVE-2002-0629; CVE-2002-0957)
...
Microsoft Speech API Remote Code Execution (CVE-2019-0985)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0989)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-0918)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0829)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Win32k Elevation of Privilege (CVE-2019-0797)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows SMB Information Disclosure (CVE-2019-0703)
An information disclosure vulnerability exists in the SMB component of Microsoft Windows SMB server. The vulnerability is due to improper handling of SMB requests. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted SMB messages to a target server...
Zoho ManageEngine OpManager SQL Injection (CVE-2018-17823; CVE-2018-17283)
An SQL injection vulnerability exists in ManageEngine. This vulnerability is due to insufficient validation of the name parameter when processing requests sent. Successful exploitation could lead to arbitrary SQL code execution in the security context of database service...
Microsoft Office Excel Parsed Expression Information Disclosure (CVE-2018-8246)
An information disclosure vulnerability exists in Microsoft Office Excel. The vulnerability is due to the inclusion of uninitialized memory when processing of parsed expressions in FORMULA records in Excel workbooks. Successful exploitation would allow the attacker to disclose sensitive informati...
Jenkins CI Server Policy Bypass (CVE-2018-1999001)
A policy bypass vulnerability exists in Jenkins CI Server. This vulnerability is due to insufficient validation of login requests. A successful attack could lead to policy bypass...
D-Link Central WiFiManager Cross-Site Scripting (CVE-2018-17441; CVE-2018-17443)
Multiple cross-site scripting vulnerabilities exist in D-Link Central WiFiManager Software Controller. Successful exploitation of the vulnerabilities would allow remote attackers to inject arbitrary web scripts into the affected system...
Microsoft Filter Manager Elevation Of Privilege (CVE-2018-8333)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Multi Step Form Multiple Unauthenticated Reflected XSS (CVE-2018-14430)
A reflected XSS vulnerability has been reported in WordPress Plugin Multi Step Form. A remote attacker can exploit this issue by execute JavaScript code through Reflected XSS attacks...
FTPShell Client Buffer Overflow (CVE-2009-3364; CVE-2017-6465; CVE-2018-7573)
A remote code execution vulnerability exists in FTPShell Client. The vulnerability is due to incorrect handling of the FTP response command. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...