Preemptive Protection against CA eTrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability

A buffer overflow vulnerability was discovered in CA eTrust Secure Content Manager. CA eTrust Secure Content Manager SCM is a gateway product for Windows platform that secures, monitors, filters and blocks potential threats from messaging and Web traffic. It provides protection against malware,...

Microsoft PowerPoint Drawing Shapes Handling Memory Corruption (MS08-016; CVE-2008-0118)

Microsoft PowerPoint is a popular presentation program. A remote code execution vulnerability has been reported in Microsoft Office. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system.The vulnerability is due to an allocation error in Microsoft...

Microsoft Works WPS File Field Length Handling Stack Overflow (MS08-011; CVE-2007-0216; CVE-2008-0108)

Microsoft Works is home productivity software suite with fewer features than the Microsoft Office suite. The Microsoft Works Converter allows the user to open, edit, and save files in the Microsoft Works file format. CVE-2007-0216: The vulnerability is due to an error in the Microsoft Works...

Preemptive Protection against Microsoft MHTML Information Disclosure Vulnerability (MS07-034)

An information disclosure vulnerability has been reported in Microsoft Windows. The vulnerability is within the MHTML Protocol, a component of Outlook Express. The MHTML MIME Encapsulation of Aggregate HTML protocol handler provides a URL type MHTML:// that permits MHTML encoded documents to be...

Microsoft Windows UPnP Service Remote Code Execution (MS07-019; CVE-2007-1204)

The Universal Plug and Play UPnP service in Microsoft Windows is vulnerable to remote code execution. UPnP is a set of computer network protocols that extends Plug and Play to allow computers and devices to configure network services automatically. A remote attacker may exploit this issue to caus...

Symantec Veritas NetBackup CONNECT_OPTIONS Request Buffer Overflow (CVE-2006-5822)

Symantec Veritas NetBackup Server is a client/server backup application solution used for performing scheduled automatic backups and on-demand backups requested by users. The vulnerability is due to a boundary error in the NetBackup service. An attacker can exploit this issue by sending a...

Novell NetMail NMAP STOR Command Buffer Overflow (CVE-2006-6424)

Novell NetMail is an electronic mail server product that supports various email access and exchange protocols, including IMAP Internet Message Access Protocol and NMAP Network Messaging Application Protocol. An attacker can cause a denial of service condition or execute arbitrary code on an...

Update Protection against Microsoft Internet Explorer mhtml Redirection Vulnerability

A vulnerability has been identified in Microsoft Internet Explorer. Internet Explorer fails to properly validate "mhtml:" URL redirections. This could be exploited by a remote attackers to access sensitive information on behalf of the target user...

EOT Files (CVE-2006-0010)

...

Zoho ManageEngine SQL Injection (CVE-2021-40493)

A SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the parameters in the HTTP requests processed by the getDataCollectionFailureReason method...

Zoho ManageEngine ServiceDesk Cross-Site Scripting (CVE-2021-46065)

A cross-site scripting vulnerability exists in Zoho ManageEngine ServiceDesk. The vulnerability is due to improper sanitization of secondary email field parameter...

Microsoft Windows CNG Key Isolation Service Elevation of Privilege (CVE-2022-41125)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Zoho ManageEngine SQL Injection (CVE-2022-27908)

A SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the parameters in the HTTP requests processed by the Inventory Reports module...

Delta Electronics DIAEnergie SQL Injection (CVE-2022-1366)

An SQL injection exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to insufficient input validation when processing requests...

Pulse Connect Secure HTTP Request Smuggling (CVE-2022-21826)

An HTTP Request Smuggling vulnerability exists in Pulse Connect Secure. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Subsonic Server Side Request Forgery (CVE-2017-9355)

A vulnerability exists in Subsonic. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Microsoft Windows Kernel Elevation of Privilege (CVE-2022-37957)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Use After Free (APSB22-39: CVE-2022-35670)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Google Chrome Browser V8 Memory Corruption (CVE-2017-5030)

A memory corruption vulnerability exists in Google Chrome Browser V8. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

jQuery UI Datepicker Widget Cross Site Scripting (CVE-2021-41182; CVE-2021-41183)

A cross site scripting vulnerability exists in the jQuery UI Datepicker widget. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Zabbix Web Frontend Authentication Bypass (CVE-2022-23131)

An authentication bypass vulnerability exists in Zabbix Web Frontend. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...

Adobe Acrobat and Reader Access of Uninitialized Pointer (APSB22-01: CVE-2021-44705)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Microsoft Remote Desktop Client Remote Code Execution (CVE-2021-34535)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SaltStack Salt Method Directory Traversal (CVE-2021-25282)

A directory traversal vulnerability exists in the WheelClient for Salt API, a component of SaltStack Salt. The vulnerability is due to improper validation of user-supplied in the pillarroots.write method...

D-Link DIR-816 Command Injection (CVE-2021-26810)

A command injection vulnerability exists in D-Link DIR-816. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

D-Link DSR-250 Command Injection (CVE-2020-18568)

A command injection vulnerability exists in D-Link DSR-250. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows Server Privilege Escalation (CVE-2016-0093)

A privilege escalation vulnerability exists in Microsoft Windows Server. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Sonatype Nexus Repository Remote Code Execution (CVE-2020-10204)

A remote code execution vulnerability exists in Sonatype Nexus Repository. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Oracle E-Business Suite Advanced Outbound Telephony Cross-Site Scripting (CVE-2020-2856)

A cross-site scripting vulnerability exists in Oracle E-Business Suite Advanced Outbound Telephony. Successful exploitation of this vulnerability could allow remote attackers to inject arbitrary web script into the affected system...

WordPress Core Directory Traversal (CVE-2019-8943)

A directory traversal vulnerability exists in WordPress. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

PHP-Proxy Information Disclosure (CVE-2018-19246)

An information disclosure vulnerability exists in PHP Proxy 5.1.0. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Plays.tv Remote Code Execution (CVE-2018-6546)

A remote code execution vulnerability exists in Plays.tv. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

IPConfigure Orchid Core VMS Directory Traversal (CVE-2018-10956)

A directory traversal vulnerability exists in ipconfigure orchid core vms. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Oracle JDeveloper ADF Faces Insecure Deserialization (CVE-2019-2904)

An insecure deserialization vulnerability exists in Oracle JDeveloper ADF Faces. This vulnerability is due to insufficient validation of HTTP requests...

WiKID 2FA Enterprise Server Cross-Site Scripting (CVE-2019-17116)

A cross-site scripting vulnerability exists in WiKID 2FA Enterprise Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

rConfig Network Device Configuration Tool Command Injection (CVE-2019-19509)

A command injection vulnerability exists in rConfig Network Device Configuration Tool. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Asus ASUSWRT Reflected Cross Site Scripting (CVE-2018-14710)

A reflected cross site scripting vulnerability exists in Asus ASUSWRT. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

Apache Dubbo Insecure Deserialization (CVE-2019-17564)

An insecure deserialization vulnerability exists in Apache Dubbo. The vulnerability is due to deserialization of untrusted data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Win32k Elevation of Privilege (CVE-2020-0887)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Jenkins Core Directory Traversal (CVE-2019-10352)

A directory traversal vulnerability exists in Jenkins Core. Successful exploitation of this vulnerability could lead to arbitrary file write, and potentially leading to remote code execution...

HPE Intelligent Management Center PLAT Stack Buffer Overflow (CVE-2018-7074)

A stack buffer overflow vulnerability has been reported in HPE Intelligent Management Center PLAT. The vulnerability is due to an overly large block size parameter provided in the TFTP packet data. Successful exploitation could results in arbitrary code execution under the context of the SYSTEM. ...

Microsoft Win32k Information Disclosure (CVE-2019-1469)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Graphics Device Interface Information Disclosure (CVE-2019-0614)

An information disclosure vulnerability exists in the Graphics Device Interface GDI component of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive informatio...

PHP FastCGI Process Manager Remote Code Execution (CVE-2019-11043)

A remote code execution vulnerability exists in PHP-FPM nginx. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Out-of-Bounds Write (APSB19-41: CVE-2019-8098)

An out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Microsoft Windows Elevation of Privilege (CVE-2019-1173)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

DSLR Cameras PTP/IP Multiple Buffer Overflow Vulnerabilities (CVE-2019-5994; CVE-2019-5999; CVE-2019-6000)

Multiple buffer overflow vulnerabilities exist in DSLR cameras. A remote attacker can exploit this vulnerability by sending specially crafted PTP/IP packets. Successful exploitation of these vulnerabilities could allow arbitrary code execution or a system crash...

Microsoft Remote Desktop Protocol Client Information Disclosure (CVE-2019-1108)

...

Microsoft Remote Desktop Services Remote Code Execution (CVE-2019-0887)

...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0989)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...