Adobe Acrobat and Reader Out-of-bounds Read (APSB22-32: CVE-2022-34239)

An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Microsoft Windows Storage Elevation of Privilege (CVE-2022-30220)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Support Diagnostic Tool Remote Code Execution (CVE-2022-30190)

A remote code execution vulnerability exists in Microsoft Support Diagnostic Tool, also known as, "Follina". Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Kaseya VSA Remote Code Execution (CVE-2018-20753)

A remote code execution vulnerability exists in Kaseya VSA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Use After Free (APSB22-16: CVE-2022-28230)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Network File System Remote Code Execution (CVE-2022-24491)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Remote Desktop Client Remote Code Execution (CVE-2022-21990)

A remote code execution vulnerability exists in Microsoft Remote Desktop Client. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-22000)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows DWM Core Library Elevation of Privilege (CVE-2022-21994)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-21897)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat And Reader Improper Input Validation (APSB22-01: CVE-2021-44739)

A vulnerability exists in Adobe. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Out-of-bounds Read (APSB22-01: CVE-2021-44715)

An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Use After Free (APSB22-01: CVE-2021-44710)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-38633)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Latrix Project SQL Injection (CVE-2021-30000)

An SQL injection vulnerability exists in Latrix Project. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Apache Airflow Command Injection (CVE-2020-11978; CVE-2020-13927)

A command injection vulnerability exists in Apache Airflow. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

VMware vCenter Server Remote Code Execution (CVE-2021-21985)

A remote code execution vulnerability exists in VMware vCenter Server. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary code on the affected system...

Adobe Acrobat Reader DC Path Join Out of Bounds Read (APSB21-37: CVE-2021-28554)

An out of bounds read vulnerability has been reported in Adobe Acrobat Reader DC. The vulnerability is due to improper handling of relative paths in calls to the app.openDoc JavaScript function...

HPE Edgeline Infrastructure Manager Authentication Bypass (CVE-2021-29203)

An authentication bypass vulnerability exists in HPE Edgeline Infrastructure Manager. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

Netgate pfSense Cross-Site Scripting (CVE-2021-27933)

A stored cross-site scripting vulnerability exists in Netgate pfSense. The vulnerability is due to improper validation of the descr parameter in the serviceswoledit.php...

Microsoft Windows Graphics Component Elevation of Privilege (CVE-2021-31188)

An elevation of privilege vulnerability exists in Microsoft Graphics Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Netgear ProSAFE Cross-Site Scripting (CVE-2020-35228)

A cross site scripting vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Apache ActiveMQ message.jsp Cross-Site Scripting (CVE-2020-13947)

A cross-site scripting vulnerability exists in Apache ActiveMQ. The vulnerability is due to insufficient validation of a parameter in the web console...

F5 BIG-IP Buffer Overflow (CVE-2021-22992)

A buffer overflow vulnerability exists in F5 BIG-IP. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

yWorks yEd Desktop Remote Code Execution (CVE-2020-25216)

A remote code execution vulnerability exists in yWorks yEd Desktop. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

74CMS Remote Code Execution (CVE-2020-35339)

A remote code execution vulnerability exists in 74CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Amino Communications Command Injection (CVE-2020-10209)

A command injection vulnerability exists in Amino Communications. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Adobe Acrobat and Reader Access of Memory After End of Buffer (APSB21-09: CVE-2021-21046)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Microsoft Windows Win32k Elevation of Privilege (CVE-2021-1698)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Amino Communications EntoneWebEngine Command Injection (CVE-2020-10208)

A command injection vulnerability exists in Amino Communications EntoneWebEngine. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Marvell QConvergeConsole GUI Directory Traversal (CVE-2020-5804)

A directory traversal vulnerability exists in Marvell QConvergeConsole GUI. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Nagios XI Graph Explorer Cross-Site Scripting (CVE-2020-15902)

A cross-site scripting vulnerability exists in Nagios XI. This vulnerability is due to improper validation of the link parameter in visFunctions.inc.php...

Microsoft Windows Information Disclosure (CVE-2016-0175)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Cacti utilities.php Cross-Site Scripting (CVE-2010-2544)

A cross site scripting vulnerability exists in Cacti. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Microsoft Windows Active Directory Remote Code Execution (CVE-2020-0718)

A remote code execution vulnerability exists in Microsoft Windows Active Directory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Media Foundation H265 Stream Parsing Remote Code Execution (CVE-2020-16915)

A code execution vulnerability exists in Microsoft Windows Media Foundation. The vulnerability is due to improper validation of H265 media files. A remote attacker could exploit the vulnerability by enticing a victim user to open a maliciously crafted media file or open the folder containing the...

Oracle WebLogic Insecure Deserialization (CVE-2020-14644)

An insecure deserialization vulnerability exists in Oracle Weblogic. This vulnerability is due to insufficient validation of T3 and IIOP requests...

Microsoft Windows Kernel Elevation of Privilege (CVE-2020-1566)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Rittal Command Injection (CVE-2020-11953)

A command injection vulnerability exists in Rittal. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Graphics Component Elevation of Privilege (CVE-2020-1382)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Kernel Information Disclosure (CVE-2020-1426)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Windows Address Book Contact File Parsing Integer Overflow (CVE-2020-1410)

An integer overflow vulnerability has been reported in Microsoft Windows Address Book. This vulnerability is due to improper handling of Contact files. A remote attacker could exploit this vulnerability by enticing a target user to open a Windows Contacts file. Successful exploitation could resul...

Microsoft Windows Kernel Elevation of Privilege (CVE-2020-0986)

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs, view, change, or delete data, or create ne...

Microsoft VBScript Remote Code Execution (CVE-2020-1215)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Asus GT-AC5300 Stack Buffer Overflow (CVE-2018-17022)

A Buffer overflow vulnerability exists in Asus GT-AC5300. Successful exploitation of this vulnerability could result in a denial of service condition...

NGINX Information Disclosure (CVE-2019-20372)

An information disclosure vulnerability exists in NGINX. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Internet Explorer Memory Corruption(CVE-2019-1221)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe ColdFusion Remote Code Execution (CVE-2019-7838)

A remote code execution vulnerability exists in adobe coldfusion . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Gila CMS Local File Inclusion (CVE-2020-5513)

A local file inclusion vulnerability exists in Gila CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

rConfig Network Device Configuration Tool Command Injection (CVE-2019-19509)

A command injection vulnerability exists in rConfig Network Device Configuration Tool. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...