Spring Cloud Function Remote Code Execution (CVE-2022-22963)

A remote code execution vulnerability exists in Spring Cloud Function. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Remote Desktop Client Remote Code Execution (CVE-2022-23285)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SonicWall Email Security Arbitrary File Upload (CVE-2021-20022)

An arbitrary file upload vulnerability exists in SonicWall Email Security. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Access of Uninitialized Pointer (APSB22-01: CVE-2021-44705)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Microsoft Windows Installer Elevation of Privilege (CVE-2021-43883)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Realtek Jungle SDK Command Injection (CVE-2021-35394)

A command injection vulnerability exists in Realtek Jungle SDK. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Centreon MediaWiki SQL Injection (CVE-2021-37558)

An SQL injection vulnerability exists in Centreon MediaWiki. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Apache Airflow Command Injection (CVE-2020-11978; CVE-2020-13927)

A command injection vulnerability exists in Apache Airflow. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-31954)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2021-26419)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Asus Askey Routers Cross-Site Scripting (CVE-2021-27403)

A cross-site scripting vulnerability exists in Asus Askey routers. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

F5 BIG-IP Buffer Overflow (CVE-2021-22992)

A buffer overflow vulnerability exists in F5 BIG-IP. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

WordPress wpDataTables Plugin SQL Injection (CVE-2021-26754)

An SQL injection vulnerability exists in WordPress wpDataTables Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Yccms Remote Code Execution (CVE-2020-20287)

A remote code execution vulnerability exists in Yccms. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Out-of-bounds Read (APSB21-09: CVE-2021-21042)

An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Microsoft Windows Privilege Escalation (CVE-2016-0006)

A privilege escalation vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Microsoft Windows Information Disclosure (CVE-2016-0175)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

SonicWall Secure Remote Access Server Command Injection (CVE-2016-9682)

A command injection vulnerability exists in SonicWall Secure Remote Access server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Oracle E-Business Suite Advanced Outbound Telephony Cross-Site Scripting (CVE-2020-2856)

A cross-site scripting vulnerability exists in Oracle E-Business Suite Advanced Outbound Telephony. Successful exploitation of this vulnerability could allow remote attackers to inject arbitrary web script into the affected system...

Oracle WebLogic Insecure Deserialization (CVE-2020-14644)

An insecure deserialization vulnerability exists in Oracle Weblogic. This vulnerability is due to insufficient validation of T3 and IIOP requests...

Rittal Command Injection (CVE-2020-11953)

A command injection vulnerability exists in Rittal. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Graphics Component Elevation of Privilege (CVE-2020-1382)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PHP-Fusion Administration banners.php Cross-Site Scripting (CVE-2020-12438)

A stored cross-site scripting vulnerability exists in PHP-Fusion Banner feature. The vulnerability is due to improper validation of user input in HTTP requests...

Microsoft Windows SMBv1 Driver Integer Overflow Denial Of Service (CVE-2020-1301)

An integer overflow vulnerability exists in Microsoft. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft VBScript Remote Code Execution (CVE-2020-1260)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft VBScript Remote Code Execution (CVE-2020-1215)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Asus GT-AC5300 Stack Buffer Overflow (CVE-2018-17022)

A Buffer overflow vulnerability exists in Asus GT-AC5300. Successful exploitation of this vulnerability could result in a denial of service condition...

QNAP Photo Station Authentication Bypass (CVE-2019-7195; CVE-2019-7194)

An authentication bypass vulnerability exists in QNAP Photo Station. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...

Plays.tv Remote Code Execution (CVE-2018-6546)

A remote code execution vulnerability exists in Plays.tv. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress LifterLMS Plugin Arbitrary File Write (CVE-2020-6008)

An Arbitrary File Write vulnerability exists in the WordPress LifterLMS Plugin. Successful exploitation of this vulnerability could lead to arbitrary code execution...

CoDeSys V3 CmpRouter and CmpRouterEmbedded Integer Overflow (CVE-2019-5105)

An integer overflow vulnerability exists in CoDeSys V3 CmpRouter and CmpRouterEmbedded components. The vulnerability is due to improper validation of user-supplied data. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted message to the target server. Successf...

rConfig Network Device Configuration Tool Command Injection (CVE-2019-19509)

A command injection vulnerability exists in rConfig Network Device Configuration Tool. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Asus Dsln12e C1 Firmware Command Execution (CVE-2018-15887)

A command execution vulnerability exists in asus dsln12e c1 firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows DHCP Server Denial of Service (CVE-2019-1206)

A remote code execution exists in the DHCP Server component of Microsoft Windows. The vulnerability is due to improper handling of DHCP failover packets leading to memory corruption. A remote attacker can exploit this vulnerability by sending crafted DHCP failover packets to the target server...

HPE ByteMessageResource Insecure Deserialization (CVE-2019-11956)

An insecure deserialization vulnerability exists in HPE Intelligent Management Center. Successful exploitation of this vulnerability could result in execution of arbitrary code on the target server in the context of SYSTEM...

WordPress ThemeGrill Plugin Privilege Escalation (CVE-2020-7047; CVE-2020-7048)

A privilege escalation exists in WordPress ThemeGrill plugin. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Microsoft Windows Graphics Component Elevation of Privilege (CVE-2020-0715)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

HPE Intelligent Management Center PLAT Stack Buffer Overflow (CVE-2018-7074)

A stack buffer overflow vulnerability has been reported in HPE Intelligent Management Center PLAT. The vulnerability is due to an overly large block size parameter provided in the TFTP packet data. Successful exploitation could results in arbitrary code execution under the context of the SYSTEM. ...

D-Link DIR-859 Information Disclosure (CVE-2019-20213)

An information disclosure vulnerability exists in D-Link DIR-859. Successful exploitation of this vulnerability could result in authentication bypass...

Aveva Indusoft Web Studio Remote Code Execution (CVE-2018-10620)

A buffer overflow vulnerability exists in Aveva Indusoft Web Studio. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Win32k Information Disclosure (CVE-2019-1469)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Office Word Information Disclosure (CVE-2019-0561)

An information disclosure vulnerability exists in the Word component of Microsoft Office. This vulnerability is due to improper handling of fields. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information...

Dovecot Submission-Login Service NULL Pointer Dereference Denial of Service (CVE-2019-11494)

A denial-of-service vulnerability exists in the Dovecot server. The vulnerability is due to a NULL pointer dereference in the submission-login service when authentication is aborted. Successful exploitation of this vulnerability could cause a partial denial of service of the affected system...

Microsoft VBScript Remote Code Execution (CVE-2019-1390)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Electronic Arts Origin Client URI Handler Remote Code Execution (CVE-2019-12828)

A remote code execution vulnerability exists in the Electronic Arts Origin Client. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option regarding the DLL loading path. A remote attacker could exploit the vulnerability by...

Schneider Electric IIoT Monitor downloadCSV Directory Traversal (CVE-2018-7835)

A directory traversal vulnerability exists in Schneider Electric IIoT. The vulnerability is due to insufficient validation of a user supplied path prior to using it in file operations...

Foxit Reader and PhantomPDF XFA xdpContent Information Disclosure (CVE-2018-3956)

An information disclosure exists in Foxit Reader and PhantomPDF. This vulnerability is due to improper handling of the xdpContent property of a submit object...

Microsoft Visual Studio Vscontent Information Disclosure (CVE-2019-0537)

An information disclosure vulnerability exists in Microsoft visual studio. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Out-of-Bounds Write (APSB19-41: CVE-2019-8098)

An out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

WordPress WP Live Chat Plugin Arbitrary File Upload (CVE-2019-11185)

An Arbitrary File Upload vulnerability exists in WordPress Live Chat Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the effected system...