Microsoft Access Snapshot Viewer ActiveX Control Arbitrary File Download (CVE-2008-2463)

Microsoft Snapshot Viewer is an application that allows viewing of snapshots created with any version of Microsoft Access. A remote code execution vulnerability has been discovered in the Snapshot Viewer for Microsoft Access. The vulnerability is due to an error in the Snapshot Viewer ActiveX...

Microsoft Media Player SAMI Format Parsing Code Execution (MS08-033; CVE-2008-1444)

Microsoft Synchronized Accessible Media Interchange SAMI is designed to simplify creating captions for media playback on a PC. SAMI captions coexist with digital media as separate, simple text files. A remote code execution vulnerability has been identified in Microsoft Windows Media Player which...

Internet Explorer HTML Rendering Memory Corruption (MS08-010; CVE-2008-0076)

Microsoft Internet Explorer is the most widely used Internet browser. The vulnerability is due to a memory corruption error in Microsoft Internet Explorer when rendering HTML documents with certain layout combinations. A remote attacker could exploit this issue by convincing a user to visit a...

Microsoft Visual FoxPro ActiveX Control Buffer Overflow (MS08-010; CVE-2007-4790)

Microsoft Visual FoxPro is an application development tool for building database applications. This vulnerability is due to a memory corruption error in certain ActiveX objects of Microsoft Visual FoxPro when it is used in Microsoft Internet Explorer. A remote attacker could exploit this issue by...

Preemptive Protection against Microsoft Windows DNS Server Spoofing Vulnerability (MS07-062)

A DNS Cache Poisoning vulnerability has been reported in Microsoft DNS servers. DNS cache poisoning occurs when false DNS records are injected into a DNS server's cache tables. Once the cache tables have been altered, a remote attacker may inspect, capture or corrupt any information exchanged...

Preemptive Protection against Digium Asterisk SIP Invalid Response Code Denial of Service Vulnerability

A denial of service vulnerability has been discovered in Digium Asterisk. Asterisk is an open source telephone system. It supports a wide range of Voice over IP VOIP protocols, including SIP. SIP Session Initiation Protocol is a protocol that can establish, modify, and terminate numerous multimed...

Trend Micro OfficeScan Client ActiveX Control Buffer Overflow (CVE-2007-0325)

A vulnerability has been reported in the Trend Micro OfficeScan Client ActiveX control.OfficeScan Client is an integrated client which provides security protection for the network endpoints.A remote attacker could cause the browser to crash allowing execution of arbitrary commands.The vulnerabili...

Update Protection against AWStats Remote Command Execution Vulnerability

AWStats is a free tool that collects and graphically displays advanced web, ftp or mail server statistics. Lack of input validation on one of the parameters may allow an attacker to compromise a vulnerable server. Successful exploitation allows remote attackers to execute arbitrary commands under...

Microsoft Windows Web Client Remote Code Execution (MS06-008; CVE-2006-0013)

Web Client WebDAV is a system service that allows Web-based Distributed Authoring and Versioning. Remote code execution vulnerability exists in the way that Windows processes Web Client requests that could allow an attacker who successfully exploited this vulnerability to take complete control of...

MS-SQL Monitor Protocol (CVE-2002-0649; CVE-2002-0650)

...

WordPress Popup Maker Plugin Cross-Site Scripting (CVE-2022-1104)

A stored cross-site scripting vulnerability exists for the Popup Maker plugin for WordPress. This vulnerability is due to improper input validation for the popup settings process...

WordPress Modern Events Calendar Lite Plugin Cross-Site Scripting (CVE-2022-0364)

A stored cross-site scripting vulnerability exists for the WordPress plugin Modern Events Calendar Lite. This vulnerability is due to improper input validation for multiple parameters in the Hourly Schedule section...

SmarterTools SmarterMail Directory Traversal (CVE-2019-7213)

A directory traversal vulnerability exists in SmarterTools SmarterMail. Successful exploitation of this vulnerability could allow a remote attacker to upload or delete arbitrary files on the vulnerable server...

NetIQ Access Manager Directory Traversal (CVE-2017-14803)

A directory traversal vulnerability exists in NetIQ Access Manager. Successful exploitation of this vulnerability could allow a remote attacker to disclose or access arbitrary files on the vulnerable server...

Adobe Acrobat and Reader Stack-based Buffer Overflow (APSB22-46: CVE-2022-42339)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Windows ALPC Elevation of Privilege (CVE-2022-34725)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Use After Free (APSB22-32: CVE-2022-34233)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Installer Elevation of Privilege (CVE-2022-30147)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Atlassian Confluence Remote Code Execution (CVE-2022-26134)

A remote code execution vulnerability exists in Atlassian Confluence. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Support Diagnostic Tool Remote Code Execution (CVE-2022-30190)

A remote code execution vulnerability exists in Microsoft Support Diagnostic Tool, also known as, "Follina". Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Use After Free (APSB22-16: CVE-2022-28230)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Remote Desktop Client Remote Code Execution (CVE-2022-23285)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Apache Struts Denial of Service (CVE-2006-1547)

A denial-of-service vulnerability exists in Apache Struts. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Adobe Magento Commerce Reflected Cross Site Scripting (CVE-2021-21029)

A reflected cross site scripting vulnerability exists in Adobe Magento Commerce. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-21897)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Out-of-bounds Read (APSB22-01: CVE-2021-44715)

An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Microsoft Windows Print Spooler Elevation of Privilege (CVE-2021-41333)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Win32k Elevation of Privilege (CVE-2021-34449)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress Core External Entity Injection (CVE-2021-29447)

An XXE vulnerability exists in WordPress Core. The vulnerability is due to insufficient validation of XML data when parsing RIFF WAV file metadata...

Google Chrome Buffer Overflow (CVE-2021-21153)

A buffer overflow vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Netgate pfSense Cross-Site Scripting (CVE-2021-27933)

A stored cross-site scripting vulnerability exists in Netgate pfSense. The vulnerability is due to improper validation of the descr parameter in the serviceswoledit.php...

Microsoft Windows SMB Information Disclosure (CVE-2021-28324)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Amino Communications Command Injection (CVE-2020-10209)

A command injection vulnerability exists in Amino Communications. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Asmax Ar-804gu Router Command Injection (CVE-2009-5156)

A command injection vulnerability exists in Asmax Ar-804gu Routers. A remote attacker can exploit this issue by sending a specially crafted request to the victim. Successful exploitation would allow an attacker to execute arbitrary commands on the target machine...

Microsoft Media Foundation Information Disclosure (CVE-2020-0939)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Windows Server Privilege Escalation (CVE-2016-0095)

A privilege escalation vulnerability exists in Microsoft Windows Server. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

rConfig Remote Code Execution (CVE-2020-13778)

A remote code execution vulnerability exists in rConfig. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Seat Reservation System Arbitrary File Upload (CVE-2020-25763)

An arbitrary file upload vulnerability exists in Seat Reservation System. The vulnerability is due to improper validation of user supplied data in UploadAction. Successful exploitation could result in uploading potentially dangerous file which may lead to arbitrary code execution...

Oracle Fusion Middleware Cross-Site Scripting (CVE-2010-3581)

A vulnerability exists in Oracle Fusion Middleware. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Rittal Command Injection (CVE-2020-11953)

A command injection vulnerability exists in Rittal. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Graphics Component Elevation of Privilege (CVE-2020-1382)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Kernel Information Disclosure (CVE-2020-1426)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

DrayTek Command Injection (CVE-2020-15415)

A command injection vulnerability exists in DrayTek. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Trendmicro Email Encryption Gateway SQL Injection (CVE-2018-6230)

An SQL injection vulnerability exists in trendmicro email encryption gateway 5.5. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Project Pier Remote File Inclusion (CVE-2018-10759)

A command execution vulnerability exists in projectpier project projectpier x=0.8.8. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Canon Oce Colorwave Printer Cross Site Scripting (CVE-2020-10667)

A cross-site scripting vulnerability exists in Canon Oce Colorwave printer. Successful exploitation of this vulnerability could allow a remote attacker to inject an arbitrary web script into the affected system...

osTicket Cross-Site Scripting (CVE-2020-12629)

A cross site scripting vulnerability exists in osTicket. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

NGINX NJS Heap-Based Buffer Overflow (CVE-2019-11838)

A buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Win32k Elevation of Privilege (CVE-2020-1143)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Internet Explorer Memory Corruption(CVE-2019-1221)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...