13538 matches found
Rittal PDU Command Injection (CVE-2020-11956)
A command injection vulnerability exists in Rittal PDU. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary commands on the affected system...
Laravel Illuminate Remote Code Execution (CVE-2019-9081)
A remote code execution vulnerability exists in Laravel. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Project Pier Remote File Inclusion (CVE-2018-10759)
A command execution vulnerability exists in projectpier project projectpier x=0.8.8. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft Windows SMBv1 Driver Integer Overflow Denial Of Service (CVE-2020-1301)
An integer overflow vulnerability exists in Microsoft. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Citrix XenMobile XML External Entity Injection (CVE-2018-10653)
An XML External Entity Injection vulnerability exists in Citrix XenMobile Server. Successful exploitation of this vulnerability could result in unauthorized access to critical data in Citrix XenMobile Server...
Asus ASUSWRT Reflected Cross Site Scripting (CVE-2018-14710)
A reflected cross site scripting vulnerability exists in Asus ASUSWRT. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...
Apache Dubbo Insecure Deserialization (CVE-2019-17564)
An insecure deserialization vulnerability exists in Apache Dubbo. The vulnerability is due to deserialization of untrusted data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows DHCP Server Denial of Service (CVE-2019-1206)
A remote code execution exists in the DHCP Server component of Microsoft Windows. The vulnerability is due to improper handling of DHCP failover packets leading to memory corruption. A remote attacker can exploit this vulnerability by sending crafted DHCP failover packets to the target server...
Microsoft Windows Server Memory Corruption (CVE-2019-0785)
A memory corruption vulnerability exists in Microsoft Windows server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Trend Micro OfficeScan Directory Traversal (CVE-2019-18187)
A directory traversal vulnerability exists in Trend Micro's OfficeScan. The vulnerability is due to insufficient handling of directory traversal characters in uploaded ZIP archives. A remote, authenticated attacker could exploit this vulnerability by sending a request containing a crafted ZIP fil...
Jenkins Core Directory Traversal (CVE-2019-10352)
A directory traversal vulnerability exists in Jenkins Core. Successful exploitation of this vulnerability could lead to arbitrary file write, and potentially leading to remote code execution...
Apache Tomcat AJP File Inclusion (CVE-2020-1938; CVE-2022-26377)
A file inclusion vulnerability exists in Apache Tomcat AJP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Jenkins Pipeline Groovy Remote Code Execution (CVE-2019-1003001)
A remote code execution vulnerability exists in Jenkins pipeline groovy. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
MediaWiki Reflected Cross-Site Scripting (CVE-2017-8809)
A reflected cross-site scripting vulnerability exists in MediaWiki. The vulnerability is due to insufficient input validation on user input in the api.php component. A remote user can exploit this vulnerability by enticing a user to click on a malicious link...
Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB19-55: CVE-2019-16446)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Dovecot Submission-Login Service NULL Pointer Dereference Denial of Service (CVE-2019-11494)
A denial-of-service vulnerability exists in the Dovecot server. The vulnerability is due to a NULL pointer dereference in the submission-login service when authentication is aborted. Successful exploitation of this vulnerability could cause a partial denial of service of the affected system...
HPE Intelligent Management Center Remote Code Execution (CVE-2019-5385)
An Expression Language injection vulnerability exists in HPE Intelligent Management Center. The vulnerability is due to insufficient validation of the beanName request parameter in perfSelectTask endpoint.Successful exploitation results in the execution of arbitrary code under the security contex...
Advantech WebAccess SCADA Buffer Overflow (CVE-2019-3953)
A stack buffer overflow exists in Advantech WebAccess SCADA. The vulnerability is due to improper validation of user-supplied data in the request submitted to the target server with IOCTL 10012. Successful exploitation could lead to arbitrary code execution under context of Administrator...
Microsoft VBScript Remote Code Execution (CVE-2019-1390)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Electronic Arts Origin Client URI Handler Remote Code Execution (CVE-2019-12828)
A remote code execution vulnerability exists in the Electronic Arts Origin Client. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option regarding the DLL loading path. A remote attacker could exploit the vulnerability by...
Adobe Acrobat and Reader Out-of-Bounds Write (APSB19-41: CVE-2019-8098)
An out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
DSLR Cameras PTP/IP Multiple Buffer Overflow Vulnerabilities (CVE-2019-5994; CVE-2019-5999; CVE-2019-6000)
Multiple buffer overflow vulnerabilities exist in DSLR cameras. A remote attacker can exploit this vulnerability by sending specially crafted PTP/IP packets. Successful exploitation of these vulnerabilities could allow arbitrary code execution or a system crash...
WordPress WP Live Chat Plugin Arbitrary File Upload (CVE-2019-11185)
An Arbitrary File Upload vulnerability exists in WordPress Live Chat Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the effected system...
Microsoft Excel Information Disclosure (CVE-2019-1112)
...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0992)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0991)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows ALPC Elevation of Privilege (CVE-2019-0943)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Sierra Wireless AirLink Information Disclosure (CVE-2018-4069)
An information disclosure vulnerability exists in Sierra Wireless AirLink. This vulnerability is due to lack of encryption of the user credentials. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability...
Microsoft Edge Elevation of Privilege (CVE-2019-0938)
An elevation of privilege vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows DHCP Client Remote Code Execution (CVE-2019-0726)
A remote code execution vulnerability exists in Microsoft DHCP Client. The vulnerability is due to improper processing of DHCP response messages, causing memory corruption. A remote attacker could exploit this vulnerability by sending maliciously crafted DHCP responses to a vulnerable target...
Verizon Fios Quantum Gateway Authenticated Command Injection (CVE-2019-3914)
A command injection vulnerability exists in Verizon Fios Quantum Gateway G1100 firmware. Successful exploitation of this vulnerability could result in the execution of arbitrary commands with root privileges...
Apache Tomcat CGI Servlet Remote Code Execution (CVE-2019-0232)
A remote code execution vulnerability exists in Apache Tomcat CGI Servlet. Successful exploitation of this vulnerability could lead to remote code execution on the target server...
Microsoft Windows LUAFV Elevation of Privilege (CVE-2019-0796)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
StackStorm Web UI Remote Code Execution (CVE-2019-9580)
A remote code execution vulnerability exists in StackStorm Web UI. Successful exploitation could lead to arbitrary code execution...
Microsoft Browser Scripting Engine Memory Corruption (CVE-2019-0609)
A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress WooCommerce Plugin Cross-site Scripting (CVE-2019-9168)
A cross-site scripting vulnerability exists in WordPress WooCommerce Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
GNU Libextractor ZIP File Comment Out-of-Bounds Read (CVE-2018-16430)
An out-of-bounds read vulnerability exists in Libextractor. The vulnerability is due to improper handling of long File Comment fields within ZIP files. Successful exploitation of this vulnerability could lead to denial-of-service conditions or disclosure of sensitive information...
Microsoft Windows SMB Remote Code Execution (CVE-2019-0633)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Dell EMC Storage Manager EmConfigMigration Servlet Directory Traversal (CVE-2017-14384)
A directory traversal vulnerability exists in the Dell Storage Manager. The vulnerability is due to an input validation error in the EmConfigMigration Servlet...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-8618)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft JScript Security Feature Bypass (CVE-2018-8417)
A security bypass vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...
Adobe Flash Player Out-of-bounds read (APSB18-39: CVE-2018-15978)
A out of bounds read vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Western Digital MyBook Live Remote Code Execution (CVE-2018-18472)
A command injection vulnerability exist in WD MyBook Live and WD MyCloud NAS models. The vulnerability is due to the language change and modifies functionality in the REST API. A remote, unauthenticated attacker can exploit the vulnerability by sending a maliciously crafted packet to the target...
WebRTC Use After Free Code Execution (CVE-2018-16071)
A use-after-free vulnerability exists in WebRTC. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Google PDFium Out-of-bounds read (CVE-2018-16076)
An out-of-bounds and vulnerability exists in Google PDFium. The vulnerability is due to an error in parsing a malformed JBIG2 image stream in a PDF document. Successful exploitation could result in sensitive data exposure and memory corruption...
CMS Made Simple File Manager Remote Code Execution (CVE-2018-1000094)
A remote command execution vulnerability exists in the File Manager interface of CMS Made Simple 2.2.5. By uploading a malicious file, an authenticated attacker with administrator privileges can exploit this vulnerability for execution of arbitrary code...
D-Link DIR-620 Command Injection (CVE-2018-6211)
A command injection vulnerability exists in D-Link DIR-620 routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands...
Microsoft Threat Mgmt Gateway Firewall Client DNS Lookup Buffer Overflow - Ver2 (CVE-2011-1889)
A memory corruption vulnerability exists in Microsoft Forefront Threat Management Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Zenworks Configuration Management Buffer Overflow - Ver2 (CVE-2015-0786)
A buffer overflow vulnerability exists in Zenworks Configuration Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft WordPad Font Conversion Remote Code Execution (CVE-2004-0901) - Ver2
A remote code execution vulnerability exists in Microsoft. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...