13538 matches found
InHand Networks InRouter 900 Industrial 4G Router Command Injection (CVE-2022-27268; CVE-2022-27273; CVE-2022-27275; CVE-2022-27276)
A command injection vulnerability exists in InHand Networks InRouter 900 Industrial 4G Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Part-DB Project Unrestricted File Upload (CVE-2022-0848)
An unrestricted file upload vulnerability exists in Part-DB Project. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Trendmicro Threat Discovery Appliance Directory Traversal (CVE-2016-7552)
An authentication bypass vulnerability exists in TrendMicro Threat Discovery Appliance. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
PHP-Fusion downloads.php Privilege Escalation (CVE-2020-24949)
A privilege escalation vulnerability exists in PHP-Fusion. The vulnerability is due to insufficient validation of HTTP request parameters in downloads.php...
Tiki Wiki CMS Authentication Bypass (CVE-2020-15906)
An authentication bypass vulnerability exists in Tiki Wiki CMS. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...
HP Operations Agent Opcode Stack Buffer Overflow - Ver2 (CVE-2012-2019)
A stack-based buffer overflow vulnerability has been reported in HP Operations Agent. The vulnerability is due to a bound checking error when processing requests containing certain opcodes. A remote attacker can exploit this vulnerability by sending a specially crafted request to the server...
Microsoft Windows Font Library File Buffer Overflow - Ver2 (CVE-2011-2003)
A buffer overflow vulnerability has been reported in Microsoft Windows. The vulnerability is due to an input validation error when the kernel parses a .FON font file. A remote attacker could exploit this issue by enticing a target user to open a specially crafted .FON file...
HP Operations Manager Server Unauthorized File Upload (CVE-2009-3548; CVE-2009-3843; CVE-2009-4189)
HP Operations Manager is a consolidated event and performance management console that correlates infrastructure, network and end-user experience events across an IT infrastructure. It monitors both physical and virtual servers to identify the root cause of event storms, allowing faster time to...
WMF and EMF Files (CVE-2005-2123; CVE-2005-2124; CVE-2005-4560; CVE-2006-0020)
...
Microsoft RPC Remote Code Execution (CVE-2022-26809)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Grav CMS Command Injection (CVE-2021-29440)
A command injection vulnerability exists in Grav CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Ffay Lanproxy Directory Traversal (CVE-2021-3019)
A directory traversal vulnerability exists in Ffay Lanproxy. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
Roundcube Webmail Command Injection (CVE-2020-12641)
A command injection vulnerability exists in Roundcube Webmail . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
TCPDF Phar Insecure Deserialization (CVE-2018-17057)
A remote code execution vulnerability exists in LimeSurvey. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Horde Groupware Remote Code Execution (CVE-2020-8518)
A remote code execution vulnerability exists in Horde Groupware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Liferay Portal Insecure Deserialization (CVE-2020-7961)
An insecure deserialization vulnerability exists in Liferay Portal. This vulnerability is due to improper sanitization of user-supplied data in the JSONWebServiceActionParameters class...
Harbor Container Registry Privilege Escalation (CVE-2019-16097)
A Privilege Escalation vulnerability exists in Harbor Container Registry. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
ZyXEL NAS Command Injection (CVE-2020-9054)
A command injection vulnerability exists in Multiple ZyXEL network-attached storage NAS devices. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
MongoDB mongo-express Remote Code Execution (CVE-2019-10758)
A remote code execution vulnerability exists in MongoDB mongo-express. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Schneider Electric Modicon Multiple Information Disclosure Vulnerabilities (CVE-2018-7844; CVE-2018-7845; CVE-2019-6806)
Multiple information disclosure vulnerabilities exist in Schneider Electric Modicon. Successful exploitation of those vulnerabilities would allow a remote attacker to obtain sensitive information...
Joomla LDAP Information Disclosure (CVE-2017-14596)
A LADP information disclosure vulnerability exists in Joomla!. Successful exploitation of this vulnerability allows an unprivileged remote attacker to extract all authentication credentials of the effected system...
Belkin Linksys WRT110 Remote Command Execution (CVE-2013-3568)
A remote command execution vulnerability has been reported in Belkin Linksys WRT110 firmware. The vulnerability is due to the Web interface's failure to sanitize ping targets as well as a lack of CSRF tokens. A remote attacker could exploit this vulnerability by sending a malicious HTTP request t...
Oracle Database Application Express Component APEX Password Hash Disclosure (CVE-2009-0981)
Oracle Application Express APEX is a component of Oracle database server products. It is a web application development environment, with which developers can create and deploy database-backed applications via a web-based interface. An information disclosure vulnerability exists in the Application...
Microsoft Excel Malformed File Format Parsing Code Execution (MS06-012; CVE-2006-0028)
Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available in several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...
UltraVNC VNCViewer Authenticate Buffer Overflow (CVE-2009-0388)
Virtual Network Computing VNC is a graphical desktop sharing technology that uses the Remote Frame Buffer RFB protocol to remotely control another computer. The controller computer client or viewer sends keyboard and mouse events to the controlled computer server; the controlled computer sends...
Trend Micro ServerProtect RPC Multiple Buffer Overflows (CVE-2007-1070; CVE-2007-2508; CVE-2007-4218)
Trend Micro ServerProtect is prone to multiple buffer overflow vulnerabilities. Trend Micro ServerProtect is a centrally managed virus protection console for enterprise-class servers. A remote attacker may exploit this issue to execute arbitrary code on a vulnerable system via a specially crafted...
Microsoft Windows Server Service RPC Request Buffer Overrun (MS06-040; CVE-2006-3439)
The Server Service SRVSVC is one of the network services supplied by Microsoft. It supports file, print, and named-pipe sharing over Windows-based networks, and allows named pipe communication between applications running on distributed systems. By supplying malformed parameters to some of the AP...
TP-Link Archer C20i Command Injection (CVE-2021-44827)
A command injection vulnerability exists in TP-Link Archer C20i. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
D-Link Routers Command Injection (CVE-2021-45382)
A command injection vulnerability exists in D-Link Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Subrion CMS Remote Code Execution (CVE-2018-19422)
A remote code execution vulnerability exists in Subrion CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cockpit CMS Remote Code Execution (CVE-2020-35131)
A remote code execution vulnerability exists in Cockpit CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apache Druid Remote Code Execution (CVE-2021-25646)
A remote code execution vulnerability exists in Apache Druid. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Ming-Soft MCMS SQL Injection (CVE-2020-23262)
An SQL injection vulnerability exists in Ming-Soft MCMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Microsoft Windows Uniscribe Memory Corruption (CVE-2010-2738)
A memory corruption vulnerability exists in Microsoft Windows. The vulnerability is due to improper input validation of a table in the TrueType font layout. Remote attacker could trigger this flaw by enticing a user to open a specially crafted TTF file. Successful exploitation could result in a...
Pandora FMS Remote Code Execution (CVE-2020-13851; CVE-2020-13852; CVE-2020-13855)
A remote code execution vulnerability exists in Pandora FMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Moodle Spellcheck Remote Command Execution (CVE-2013-3630)
A remote command execution vulnerability has been reported in Moodle Spellcheck. The vulnerability is due to insufficient validation of the Spellcheck mechanism. A remote attacker can exploit this vulnerability to execute a crafted file which will allow running arbitrary commands in the context o...
Portable Executable Files With Weak Encryption (CVE-2013-3900)
Portable Executable PE files can contain encrypted data. PE files with weak data encryption can be decrypted to manipulate the data. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...
Update Protection against Roundcubemail PHP Arbitrary Code Injection
A vulnerability has been identified in RoundCube Webmail, a browser-based IMAP client. The vulnerability could be triggered via a specially crafted POST request to compromise a vulnerable web server...
Ruckus IoT Controller Web UI Authentication Bypass (CVE-2020-26879)
An authentication bypass vulnerability exists in Ruckus IoT Controller Web UI. The vulnerability is due to improperly handling of a crafted HTTP request. A remote attacker could exploit the vulnerability by sending crafted HTTP requests to the target server...
Jenkins Filesystem Trigger Plugin XML External Entity Expansion (CVE-2021-21659)
An XML external entity expansion vulnerability exists in Jenkins Filesystem Trigger Plugin. Successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...
F5 BIG-IP Buffer Overflow (CVE-2021-22991)
A buffer overflow vulnerability exists in F5 BIG-IP. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...
UDP Technology IP Camera Command Injection (CVE-2021-33544)
A command injection vulnerability exists in UDP Technology IP Camera. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Web Servers Directory Traversal Attempt (CVE-2020-10631; CVE-2020-13158; CVE-2020-13886; CVE-2020-3240)
A directory traversal vulnerability exists in web servers. Successful exploitation of this vulnerability could result in information disclosure or execution of arbitrary code...
Jenkins Dependency Graph View Plugin Cross-Site Scripting (CVE-2019-10349)
A Cross-Site Scripting vulnerability exists in Jenkins Dependency Graph View plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
JBoss Seam 2 Framework Remote Code Execution (CVE-2010-1871)
An Arbitrary File Upload vulnerability exists in JBoss Seam 2 Framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Dasan GPON Router Authentication Bypass (CVE-2018-10561)
An authentication bypass vulnerability exists in Dasan GPON routers. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...
LibVNCServer LibVNCClient FramebufferUpdate Rectangle Heap Buffer Overflow (CVE-2016-9941)
A heap-based buffer overflow has been reported in LibVNCServer LibVNCClient. The vulnerability is due to improper handling of FramebufferUpdate messages with specially crafted rectangles. A remote attacker could exploit this vulnerability by enticing a user to connect to a malicious VNC server an...
Microsoft XML Core Services Remote Code Execution (KB2719615) - Ver2 (CVE-2012-1889)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is caused due to a memory corruption when XML core Services attempts to access an object in memory that has not been initialized. A remote attacker may exploit this vulnerability by enticing ...
Piwigo Photo Gallery Project install script Directory Traversal - Ver2 (CVE-2013-1469)
A directory traversal vulnerability has been reported in Piwigo. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...