13538 matches found
Internet Explorer HTML Embed Tag Stack Buffer Overflow (MS08-073; CVE-2008-4261)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in the way Microsoft Internet Explorer embeds objects into a Web page. The vulnerability is due to a memory corruption error in Internet Explorer When it displays a Web pa...
Update Protection against TFTP Server Error Packet Handling Buffer Overflow Vulnerability
A buffer overflow vulnerability has been reported in TFTP Server. The Trivial File Transfer Protocol TFTP is used for file transfer, allowing a remote user to download or upload files to the server. TFTP Server is an open source TFTP server service that facilitates the transfer of files to or fro...
Microsoft PowerPoint TxMasterStyle10Atom Processing Code Execution (MS08-051; CVE-2008-1455)
Microsoft PowerPoint is a popular presentation program. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory calculation error in Microsoft PowerPoint when parsing bullet list values in specially crafted PowerPoint files. A remote...
Microsoft Windows GDI EMF Image File Handling Stack Overflow (MS08-021; CVE-2008-1087)
A remote code execution vulnerability has been reported in the way Microsoft GDI handles the filename parameter in EMF files. The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. EMF is a image format...
Microsoft PowerPoint Drawing Shapes Handling Memory Corruption (MS08-016; CVE-2008-0118)
Microsoft PowerPoint is a popular presentation program. A remote code execution vulnerability has been reported in Microsoft Office. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system.The vulnerability is due to an allocation error in Microsoft...
Internet Explorer HTML Rendering Memory Corruption (MS08-010; CVE-2008-0076)
Microsoft Internet Explorer is the most widely used Internet browser. The vulnerability is due to a memory corruption error in Microsoft Internet Explorer when rendering HTML documents with certain layout combinations. A remote attacker could exploit this issue by convincing a user to visit a...
Preemptive Protection against Microsoft MHTML Information Disclosure Vulnerability (MS07-034)
An information disclosure vulnerability has been reported in Microsoft Windows. The vulnerability is within the MHTML Protocol, a component of Outlook Express. The MHTML MIME Encapsulation of Aggregate HTML protocol handler provides a URL type MHTML:// that permits MHTML encoded documents to be...
Update Protection against Microsoft Internet Explorer mhtml Redirection Vulnerability
A vulnerability has been identified in Microsoft Internet Explorer. Internet Explorer fails to properly validate "mhtml:" URL redirections. This could be exploited by a remote attackers to access sensitive information on behalf of the target user...
Non Compliant IKE (CVE-2002-0852)
...
Marval MSM Remote Code Execution (CVE-2022-31885)
A remote code execution vulnerability exists in Marval MSM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Jenkins Config File Provider Plugin External Entity Injection (CVE-2021-21642)
An XXE vulnerability exists in Jenkins Config File Provider Plugin. The vulnerability is due to insufficient validation of XML data when utilizing Config File Provider Plugin...
WikiDocs Arbitrary File Upload (CVE-2022-23375)
An arbitrary file upload vulnerability exists in WikiDocs. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WWBN AVideo Command Injection (CVE-2022-32572)
A command injection vulnerability exists in WWBN AVideo. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Snapt Aria Command Injection (CVE-2022-24237)
A command injection vulnerability exists in Snapt Aria. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
PublicCMS Remote Code Execution (CVE-2022-23389)
A remote code execution vulnerability exists in PublicCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Kamailio Buffer Overflow (CVE-2018-8828)
A buffer overflow vulnerability exists in Kamailio. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Subsonic Server Side Request Forgery (CVE-2017-9355)
A vulnerability exists in Subsonic. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Adobe Acrobat and Reader Access of Uninitialized Pointer (APSB22-32: CVE-2022-34228)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
PHPList SQL Injection (CVE-2017-20029; CVE-2017-20032)
An SQL injection vulnerability exists in PHPList. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Netgear Routers Buffer Overflow (CVE-2017-6862)
A buffer overflow vulnerability exists in Netgear Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
QNAP FileStation Cross Site Scripting (CVE-2018-19953)
A cross site scripting vulnerability exists in QNAP FileStation. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
WordPress Documentor Plugin SQL Injection (CVE-2022-0773)
An SQL injection vulnerability exists in WordPress Documentor Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
MediaWiki Semantic Drilldown SQL Injection (CVE-2022-29904)
An SQL injection vulnerability exists in MediaWiki Semantic Drilldown. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Microsoft Windows Kernel Elevation of Privilege (CVE-2022-29142)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Siemens SINEC NMS2 SQL Injection (CVE-2021-33732)
An SQL injection exists in Siemens SINEC NMS. The vulnerability is due to an input validation error when processing user input in SQL queries...
Zabbix Web Frontend Authentication Bypass (CVE-2022-23131)
An authentication bypass vulnerability exists in Zabbix Web Frontend. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...
Micro Focus Access Manager SQL Injection (CVE-2021-22506)
An SQL Injection vulnerability exists in Micro Focus Access Manager. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
IBM Data Risk Manager Authentication Bypass (CVE-2020-4427)
An authentication bypass vulnerability exists in IBM Data Risk Manager. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...
Adobe Acrobat and Reader Use After Free (APSB22-01: CVE-2021-44706)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows User Profile Service Elevation of Privilege (CVE-2022-21919)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CSZ CMS SQL Injection (CVE-2020-21250)
An SQL injection vulnerability exists in CSZ CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
D-Link DIR-816 Command Injection (CVE-2021-39510)
A command injection vulnerability exists in D-Link DIR-816 devices. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
TikiWiki Project SQL Injection (CVE-2004-1925)
An SQL injection vulnerability exists in TikiWiki Project. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...
D-Link DIR-816 Command Injection (CVE-2021-26810)
A command injection vulnerability exists in D-Link DIR-816. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Advantech iView Remote Code Execution (CVE-2021-22652)
A remote code execution vulnerability exists in Advantech iView. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Netgear ProSAFE Integer Overflow (CVE-2020-35230)
An integer overflow vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Sdg PNPSCADA SQL Injection (CVE-2020-24841)
An SQL injection vulnerability exists in Sdg PNPSCADA. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
EgavilanMedia ECM Address Book SQL Injection (CVE-2020-35276)
An SQL injection vulnerability exists in EgavilanMedia ECM Address Book. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
MonoCMS Remote Code Execution (CVE-2020-28672)
A remote code execution vulnerability exists in MonoCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
D-Link DSR-250 Command Injection (CVE-2020-18568)
A command injection vulnerability exists in D-Link DSR-250. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft Media Foundation Information Disclosure (CVE-2020-0939)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Trend Micro IWSVA Remote Code Execution (CVE-2020-8466)
A remote code execution vulnerability exists in Trend Micro IWSVA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Gemtek WRTM-127ACN Command Injection (CVE-2020-24365)
A command injection vulnerability exists in Gemtek WRTM-127ACN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
FFmpeg Heap-based Buffer Overflow (CVE-2020-12284)
A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Aveva eDNA Enterprise SQL Injection (CVE-2020-13499; CVE-2020-13500; CVE-2020-13501)
An SQL injection vulnerability exists in Aveva eDNA Enterprise. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Pulse Connect Secure Remote Code Execution (CVE-2020-8218)
A remote code execution vulnerability exists in Pulse Connect Secure. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cisco UCS Director saveWindowsNetworkConfig Directory Traversal (CVE-2020-3249)
A directory traversal vulnerability exists in Cisco UCS Directory. The vulnerability is due to insufficient validation of user input in the saveWindowsNetworkConfig method...
Microsoft MSHTML Engine Remote Code Execution (CVE-2020-1567)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress gVectors wpDiscuz Plugin SQL Injection (CVE-2020-13640)
An SQL injection vulnerability exists in WordPress gVectors wpDiscuz Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Mosca Project Denial of Service (CVE-2018-11615)
A denial-of-service vulnerability exists in mosca project mosca 2.8.1. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...