13538 matches found
TightVNC Integer Overflow (CVE-2019-15678)
An integer overflow vulnerability exists in TightVNC vncviewer. This vulnerability is due to improper handling of ServerCutText messages. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
HPE ByteMessageResource Insecure Deserialization (CVE-2019-11956)
An insecure deserialization vulnerability exists in HPE Intelligent Management Center. Successful exploitation of this vulnerability could result in execution of arbitrary code on the target server in the context of SYSTEM...
ABB IDAL HTTP Server Stack Buffer Overflow (CVE-2019-7232)
A stack buffer overflow vulnerability exists in ABB IDAL HTTP Server. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the vulnerable server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on...
Apache Tomcat AJP File Inclusion (CVE-2020-1938; CVE-2022-26377)
A file inclusion vulnerability exists in Apache Tomcat AJP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress ThemeGrill Plugin Privilege Escalation (CVE-2020-7047; CVE-2020-7048)
A privilege escalation exists in WordPress ThemeGrill plugin. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Microsoft Win32k Elevation of Privilege (CVE-2020-0731)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
D-Link DIR-859 Information Disclosure (CVE-2019-20213)
An information disclosure vulnerability exists in D-Link DIR-859. Successful exploitation of this vulnerability could result in authentication bypass...
Aveva Indusoft Web Studio Remote Code Execution (CVE-2018-10620)
A buffer overflow vulnerability exists in Aveva Indusoft Web Studio. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
HPE Intelligent Management Center Remote Code Execution (CVE-2019-11941)
A remote code execution vulnerability exists in HPE Intelligent Management Center. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Remote Desktop Services Remote Code Execution (CVE-2019-1182)
A buffer overflow vulnerability exists in Microsoft Remote Desktop Services. A remote attacker could exploit this vulnerability by sending a specially crafted RDP packet. Successful exploitation of this vulnerability could lead to execution of arbitrary code on the target server...
Electronic Arts Origin Client URI Handler Remote Code Execution (CVE-2019-12828)
A remote code execution vulnerability exists in the Electronic Arts Origin Client. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option regarding the DLL loading path. A remote attacker could exploit the vulnerability by...
Schneider Electric IIoT Monitor downloadCSV Directory Traversal (CVE-2018-7835)
A directory traversal vulnerability exists in Schneider Electric IIoT. The vulnerability is due to insufficient validation of a user supplied path prior to using it in file operations...
Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2019-1214)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Common Log File System Driver Information Disclosure (CVE-2019-1219)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Adobe Acrobat and Reader Heap Overflow (APSB19-41: CVE-2019-8042)
A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
WordPress MapSVG Lite Plugin Cross Site Request Forgery (CVE-2019-1000003)
A cross site request forgery vulnerability exists in WordPress MapSVG Lite plugin. Successful exploitation of this vulnerability can result in the execution of arbitrary code in the effected system...
VMware NSX SD-WAN Edge Remote Code Execution (CVE-2018-6961)
A remote code execution vulnerability exists in VMware NSX SD-WAN Edge . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1024)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-0920)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-1005)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Elevation of Privilege (CVE-2019-1064)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Out-of-Bounds Write (APSB19-18: CVE-2019-7804)
An out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Microsoft GDI+ Remote Code Execution (CVE-2019-0903)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows NDIS Elevation of Privilege (CVE-2019-0707)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Browser Scripting Engine Memory Corruption (CVE-2019-0911)
A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apache Axis Remote Code Execution (CVE-2019-0227)
A remote code execution exists in Apache Axis server. A remote attacker can exploit this vulnerability to execute arbitrary code in the affected system via a crafted http response...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0860)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows VBScript Engine Remote Code Execution (CVE-2019-0862)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Graphics Components Remote Code Execution (CVE-2019-0822)
A remote code execution vulnerability exists in Microsoft Microsoft Graphics Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Out-of-Bounds Read (APSB19-17: CVE-2019-7116)
An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Rockwell Automation RSLinx Classic Remote Code Execution (CVE-2019-6553)
A buffer overflow vulnerability exists in RSLinx Classic. This is due to a lack of input validation when handling EtherNet/IP packets. A successful exploitation of the vulnerability could to arbitrary code execution or denial of service conditions...
NTPsec ntpd write_variables Denial of Service (CVE-2019-6445; CVE-2019-8936)
A denial-of-service vulnerability has been reported inN TPsec ntpd. The vulnerability is due to insufficient validation of certain data when parsing a variable in order to write. An attacker could exploit this vulnerability by enticing a target user to open a specially crafted link...
Drupal Core Remote Code Execution (CVE-2019-6340)
A code execution vulnerability exists in Drupal Core. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows SMB Remote Code Execution (CVE-2019-0633)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2019-0591)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
IDenticard PremiSys Default Database Credentials (CVE-2019-3909)
Default database username and password exist in the IDenticard PremiSys database . The vulnerability is due to users are unable to change these passwords without vendor intervention. A remote attacker can exploit this vulnerability to access the database with administrator privileges...
IBM Operational Decision Manager External Entity Injection (CVE-2018-1821)
An XML external entity XXE injection vulnerability exist in IBM Operational Decision. The vulnerability is due to a failure to properly handle external entity references in XML files. A remote attacker could exploit this vulnerability by enticing a target user into opening a crafted XML file with...
Trend Micro Control Manager GetProductCategory SQL Injection (CVE-2018-3602)
An SQL injection vulnerability exists in the Trend Micro Control Manager. The vulnerability is due to improper validation of user-supplied input HTTP parameter...
Rockwell Automation RSLinx Classic Stack Buffer Overflow (CVE-2018-14829)
A stack buffer overflow vulnerability exists in Rockwell Automation RSLinx Classic. The vulnerability is due to incorrect handling of malformed EtherNet/IP packets. A successful exploitation of the vulnerability could lead to a system crash...
Adobe Flash Player Out-of-bounds read (APSB18-39: CVE-2018-15978)
A out of bounds read vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Microsoft Windows Win32k Elevation of Privilege (CVE-2018-8589)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Kernel Information Disclosure (CVE-2018-8408)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Western Digital MyBook Live Remote Code Execution (CVE-2018-18472)
A command injection vulnerability exist in WD MyBook Live and WD MyCloud NAS models. The vulnerability is due to the language change and modifies functionality in the REST API. A remote, unauthenticated attacker can exploit the vulnerability by sending a maliciously crafted packet to the target...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2018-8459)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2018-8371)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-5044; CVE-2019-7771; CVE-2019-7780)
A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
CMS Made Simple File Manager Remote Code Execution (CVE-2018-1000094)
A remote command execution vulnerability exists in the File Manager interface of CMS Made Simple 2.2.5. By uploading a malicious file, an authenticated attacker with administrator privileges can exploit this vulnerability for execution of arbitrary code...
Microsoft Threat Mgmt Gateway Firewall Client DNS Lookup Buffer Overflow - Ver2 (CVE-2011-1889)
A memory corruption vulnerability exists in Microsoft Forefront Threat Management Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Win32k Elevation of Privilege (CVE-2018-8233)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Remote Code Execution (CVE-2018-8210)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...