Novell iPrint Client ienipp.ocx ActiveX Control Stack-based Buffer Overflow (CVE-2008-0935)

Novell iPrint is an application that enables users to install and manage printers, or submit print job from a web browser. A buffer overflow vulnerability has been reported in Novell iPrint Client for Windows. The vulnerability is due to a boundary error in a Novell iPrint ActiveX control. To...

Microsoft Works WPS File Field Length Handling Stack Overflow (MS08-011; CVE-2007-0216; CVE-2008-0108)

Microsoft Works is home productivity software suite with fewer features than the Microsoft Office suite. The Microsoft Works Converter allows the user to open, edit, and save files in the Microsoft Works file format. CVE-2007-0216: The vulnerability is due to an error in the Microsoft Works...

Update Protection against IBM Lotus Domino IMAP Server Buffer Overflow

IBM Lotus Domino Server is a collaboration software that provides mail, messaging, calendaring and scheduling capabilities across multiple OS platforms. The product implements numerous services based on open standards, including SMTP, IMAP, and POP3. Lotus Notes is the client implementation of th...

Microsoft DirectX SAMI File Parsing Code Execution (MS07-064; CVE-2007-3901)

Microsoft DirectX is a set of libraries that aim for accelerated video and audio experience on Microsoft Windows operating system. DirectX can parse various file formats which include SAMI files. Synchronized Accessible Media Interchange SAMI files are text files that contain the text strings use...

Novell NetMail NMAP STOR Command Buffer Overflow (CVE-2006-6424)

Novell NetMail is an electronic mail server product that supports various email access and exchange protocols, including IMAP Internet Message Access Protocol and NMAP Network Messaging Application Protocol. An attacker can cause a denial of service condition or execute arbitrary code on an...

Preemptive Protection against Easy File Sharing FTP Server 'PASS' Buffer Overflow Vulnerability

EFS Software Easy File Sharing FTP Server is an FTP server application for Microsoft Windows. The application is prone to a remote buffer overflow vulnerability. The issue is triggered when a 'PASS' command with a lengthy parameter line is passed to the server, causing it to crash...

EOT Files (CVE-2006-0010)

...

WWBN AVideo Command Injection (CVE-2022-32572)

A command injection vulnerability exists in WWBN AVideo. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows CNG Key Isolation Service Elevation of Privilege (CVE-2022-41125)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

C-DATA Command Injection (CVE-2022-29337)

A command injection vulnerability exists in C-DATA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Zoho ManageEngine SQL Injection (CVE-2022-27908)

A SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the parameters in the HTTP requests processed by the Inventory Reports module...

Victor CMS Remote Code Execution (CVE-2022-27478)

A remote code execution vulnerability exists in Victor CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Jenkins Directory Traversal (CVE-2018-1999002)

A directory traversal vulnerability exists in Jenkins. Successful exploitation of this vulnerability could allow a remote attacker to disclose or access arbitrary files on the vulnerable server...

Subsonic Server Side Request Forgery (CVE-2017-9355)

A vulnerability exists in Subsonic. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution (CVE-2022-34713)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Google Chrome Browser V8 Memory Corruption (CVE-2017-5030)

A memory corruption vulnerability exists in Google Chrome Browser V8. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Out-of-bounds Read (APSB22-32: CVE-2022-34222)

An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Kaseya VSA Remote Code Execution (CVE-2018-20753)

A remote code execution vulnerability exists in Kaseya VSA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Access of Uninitialized Pointer (APSB22-16: CVE-2022-27794)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

D-Link DSL-2760U Gateway Cross Site Scripting (CVE-2013-5223)

A cross-site scripting vulnerability exists in D-Link DSL-2760U Gateway. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

jQuery UI Datepicker Widget Cross Site Scripting (CVE-2021-41182; CVE-2021-41183)

A cross site scripting vulnerability exists in the jQuery UI Datepicker widget. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Adobe Acrobat and Reader Access of Uninitialized Pointer (APSB22-01: CVE-2021-44705)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Out-of-bounds Write (APSB22-01: CVE-2021-45068)

An out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

D-Link Denial Of Service (CVE-2020-25366)

A denial of service vulnerability exists in D-Link routers. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Victure WR1200 WiFi Router Command Injection (CVE-2021-43283)

A command injection vulnerability exists in Victure WR1200 WiFi Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-43226)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

ExifTool Remote Code Execution (CVE-2021-22204)

A remote code execution vulnerability exists in ExifTool. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Telus Wi-Fi Hub Command Injection (CVE-2021-20122)

A command injection vulnerability exists in Telus Wi-Fi Hub. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Latrix Project SQL Injection (CVE-2021-30000)

An SQL injection vulnerability exists in Latrix Project. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

TP-Link TL-WR841N Command Injection (CVE-2020-35576)

A command injection vulnerability exists in TP-Link TL-WR841N. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Ambarella Oryx RTSP Server Buffer Overflow (CVE-2020-24918)

A buffer overflow vulnerability exists in Ambarella Oryx RTSP Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Tenda G0 Routers Command Injection (CVE-2021-27691)

A command injection vulnerability exists in Tenda G0 Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

inoERP download.php Insecure Deserialization (CVE-2019-16894)

An Insecure Deserialization vulnerability exists in Inoideas inoERP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Netgear ProSAFE Integer Overflow (CVE-2020-35230)

An integer overflow vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Rockoa SQL Injection (CVE-2020-18714)

An SQL injection vulnerability exists in Rockoa. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

WordPress wpDataTables Plugin SQL Injection (CVE-2021-26754)

An SQL injection vulnerability exists in WordPress wpDataTables Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Adobe Acrobat and Reader Out-of-bounds Read (APSB21-09: CVE-2021-21042)

An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Microsoft Windows Privilege Escalation (CVE-2016-0006)

A privilege escalation vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Microsoft Windows Server Privilege Escalation (CVE-2016-0095)

A privilege escalation vulnerability exists in Microsoft Windows Server. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Drupal Core Form Rendering Remote Code Execution (CVE-2018-7600)

A code execution vulnerability exists in Drupal Core. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle E-Business Suite Advanced Outbound Telephony Cross-Site Scripting (CVE-2020-2856)

A cross-site scripting vulnerability exists in Oracle E-Business Suite Advanced Outbound Telephony. Successful exploitation of this vulnerability could allow remote attackers to inject arbitrary web script into the affected system...

Pulse Connect Secure Remote Code Execution (CVE-2020-8218)

A remote code execution vulnerability exists in Pulse Connect Secure. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PHP-Proxy Information Disclosure (CVE-2018-19246)

An information disclosure vulnerability exists in PHP Proxy 5.1.0. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

NOKIA VitalSuite SPM SQL Injection (CVE-2021-41487)

An SQL injection vulnerability exists in the NOKIA VitalSuite SPM. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Plays.tv Remote Code Execution (CVE-2018-6546)

A remote code execution vulnerability exists in Plays.tv. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Sitecore.NET Directory Traversal (CVE-2018-7669)

A directory traversal vulnerability exists in Sitecore.NET. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Microsoft Windows Information Disclosure(CVE-2019-1227)

An information disclosure vulnerability exists in microsoft windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft VBScript Remote Code Execution (CVE-2020-1058)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CoDeSys V3 CmpRouter and CmpRouterEmbedded Integer Overflow (CVE-2019-5105)

An integer overflow vulnerability exists in CoDeSys V3 CmpRouter and CmpRouterEmbedded components. The vulnerability is due to improper validation of user-supplied data. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted message to the target server. Successf...

Nagios XI Cross-Site Scripting (CVE-2019-20139)

A cross-site scripting vulnerability exists in Nagios XI. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...