13538 matches found
Latrix Project SQL Injection (CVE-2021-30000)
An SQL injection vulnerability exists in Latrix Project. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
SQL Injection Scanning Attempt Over HTTP (CVE-2021-24321)
SQL Injection Scanning Attempt Over HTTP...
Ambarella Oryx RTSP Server Buffer Overflow (CVE-2020-24918)
A buffer overflow vulnerability exists in Ambarella Oryx RTSP Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
LightCMS Remote Code execution (CVE-2021-27112)
A remote code execution vulnerability exists in LightCMS. Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on the affected system...
Microsoft Win32k Elevation of Privilege (CVE-2021-28310)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Netgear ProSAFE Integer Overflow (CVE-2020-35230)
An integer overflow vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
F5 BIG-IP Buffer Overflow (CVE-2021-22992)
A buffer overflow vulnerability exists in F5 BIG-IP. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...
Intel Security VirusScan Enterprise Linux Cross-Site Scripting (CVE-2016-8019)
A cross-site scripting vulnerability exists in Intel Security VirusScan Enterprise Linux. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Yccms Remote Code Execution (CVE-2020-20287)
A remote code execution vulnerability exists in Yccms. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WebAssembly Binaryen Denial Of Service (CVE-2019-7662)
A denial of service vulnerability exists in WebAssembly Binaryen. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Trend Micro IWSVA Remote Code Execution (CVE-2020-8466)
A remote code execution vulnerability exists in Trend Micro IWSVA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Information Disclosure (CVE-2016-0175)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Cisco Collaboration Server Cross-Site Scripting (CVE-2010-0641)
A cross site scripting vulnerability exists in Cisco Collaboration Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Apple GarageBand Remote Code Execution (CVE-2017-2374)
A remote code execution vulnerability exists in Apple GarageBand. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Oracle WebLogic Insecure Deserialization (CVE-2020-14644)
An insecure deserialization vulnerability exists in Oracle Weblogic. This vulnerability is due to insufficient validation of T3 and IIOP requests...
Microsoft Windows Kernel Elevation of Privilege (CVE-2020-0986)
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs, view, change, or delete data, or create ne...
Microsoft VBScript Remote Code Execution (CVE-2020-1215)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows SMBv1 Driver Integer Overflow Denial Of Service (CVE-2020-1301)
An integer overflow vulnerability exists in Microsoft. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress Calculated Fields Form Plugin Cross Site Scripting (CVE-2020-7228)
A stored cross-site scripting vulnerability exists in Calculated Fields Form plugin of WordPress. The vulnerability is due to insufficient sanitization of user input to "field name" and "form name" of a form in the web application of the plugin...
Apache OFBiz Insecure Deserialization (CVE-2019-0189)
An insecure deserialization vulnerability exists in Apache OFBiz. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Gila CMS Local File Inclusion (CVE-2020-5513)
A local file inclusion vulnerability exists in Gila CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Asus ASUSWRT Buffer Overflow (CVE-2018-14712)
A buffer overflow vulnerability exists in Asus ASUSWRT. Successful exploitation of this vulnerability could allow a remote attacker to inaccessibility on the affected system...
HPE Intelligent Management Center Insecure Deserialization (CVE-2019-11944)
An insecure deserialization vulnerability exists in HPE Intelligent Management Center. The vulnerability is due to deserialization of untrusted data by the MetaDataEntry while having vulnerable classes in the code path. Successful exploitation of this vulnerability could result in execution of...
HPE Intelligent Management Center Remote Code Execution (CVE-2019-11943)
An expression language injection vulnerability exists in HPE Intelligent Management Center. This vulnerability is due to insufficient handling of the beanName request parameter by the SoapConfigBean class. Successful exploitation results in the execution of arbitrary code under the security conte...
Cisco Security Manager Insecure Deserialization (CVE-2019-12630)
An insecure deserialization vulnerability exists in Cisco Security Manager. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system...
TightVNC Integer Overflow (CVE-2019-15678)
An integer overflow vulnerability exists in TightVNC vncviewer. This vulnerability is due to improper handling of ServerCutText messages. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Trend Micro OfficeScan Directory Traversal (CVE-2019-18187)
A directory traversal vulnerability exists in Trend Micro's OfficeScan. The vulnerability is due to insufficient handling of directory traversal characters in uploaded ZIP archives. A remote, authenticated attacker could exploit this vulnerability by sending a request containing a crafted ZIP fil...
WordPress ThemeGrill Plugin Privilege Escalation (CVE-2020-7047; CVE-2020-7048)
A privilege escalation exists in WordPress ThemeGrill plugin. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB19-55: CVE-2019-16446)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Cisco Prime Infrastructure and EPNM Directory Traversal (CVE-2019-1819)
A directory traversal vulnerability exists in Cisco Prime Infrastructure and Evolved Programmable Network Manager. The vulnerability is due to a lack of proper validation of a user-supplied path prior to using it in file operations. Successful exploitation results in the disclosure of file conten...
NTPsec ntpd Out of Bounds Read (CVE-2019-6444)
An out of bounds read vulnerability has been reported in NTPsec ntpd. The vulnerability is due to insufficient validation of the address of a field to be read in a NTP packet. Successful exploitation could lead to disclosure of sensitive information...
Microsoft Office Word Information Disclosure (CVE-2019-0561)
An information disclosure vulnerability exists in the Word component of Microsoft Office. This vulnerability is due to improper handling of fields. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information...
IBM Bigfix Platform Arbitrary File Upload (CVE-2019-4013)
An Arbitrary File Upload vulnerability exists in IBM Bigfix Platform. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Win32k Information Disclosure (CVE-2019-1436)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Schneider Electric IIoT Monitor downloadCSV Directory Traversal (CVE-2018-7835)
A directory traversal vulnerability exists in Schneider Electric IIoT. The vulnerability is due to insufficient validation of a user supplied path prior to using it in file operations...
Foxit Reader and PhantomPDF XFA xdpContent Information Disclosure (CVE-2018-3956)
An information disclosure exists in Foxit Reader and PhantomPDF. This vulnerability is due to improper handling of the xdpContent property of a submit object...
Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2019-1214)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Integer Overflow (APSB19-41: CVE-2019-8101)
An integer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Palo Alto Networks GlobalProtect SSL VPN Remote Code Execution (CVE-2019-1579)
A Remote Code Execution vulnerability exists in Palo Alto Networks GlobalProtect SSL VPN Gateway. An unauthenticated attacker could exploit the vulnerability by sending a specially crafted request to a vulnerable SSL VPN target. Successful exploitation of this vulnerability would allow remote...
VMware NSX SD-WAN Edge Remote Code Execution (CVE-2018-6961)
A remote code execution vulnerability exists in VMware NSX SD-WAN Edge . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Excel Information Disclosure (CVE-2019-1112)
...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0991)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Speech API Remote Code Execution (CVE-2019-0985)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0989)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1024)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Sierra Wireless AirLink Information Disclosure (CVE-2018-4069)
An information disclosure vulnerability exists in Sierra Wireless AirLink. This vulnerability is due to lack of encryption of the user credentials. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability...
Microsoft Browser Scripting Engine Memory Corruption (CVE-2019-0884)
A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apache Axis Remote Code Execution (CVE-2019-0227)
A remote code execution exists in Apache Axis server. A remote attacker can exploit this vulnerability to execute arbitrary code in the affected system via a crafted http response...
Verizon Fios Quantum Gateway Authenticated Command Injection (CVE-2019-3914)
A command injection vulnerability exists in Verizon Fios Quantum Gateway G1100 firmware. Successful exploitation of this vulnerability could result in the execution of arbitrary commands with root privileges...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2019-0769)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...