13538 matches found
Oracle Fusion Middleware Information Disclosure (CVE-2019-2615)
An information disclosure vulnerability exists in Oracle WebLogic Server component of Oracle Fusion Middleware. Successful exploitation could result in the disclosure of sensitive information...
Adobe Acrobat and Reader Use After Free (APSB19-18: CVE-2019-7761)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Flash Player Use After Free (APSB19-26: CVE-2019-7837)
A use-after-free vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows LUAFV Elevation of Privilege (CVE-2019-0730)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Kernel Information Disclosure (CVE-2019-0844)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Adobe Acrobat and Reader Out-of-Bounds Read (APSB19-17: CVE-2019-7115)
An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2019-0773)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress Core Local File Inclusion Remote Code Execution (CVE-2019-8942)
A remote code execution vulnerability exists in WordPress Core. Successful exploitation of this vulnerability could allow a remote attacker with at least author privileges to execute arbitrary code on the target server...
Advantech Webaccess Buffer Overflow Remote Code Execution (CVE-2018-8845)
A buffer overflow vulnerability exists in Advantech Webaccess. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2019-0610)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Scripting Engine Information Disclosure (CVE-2019-0648)
An information disclosure vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2019-0655)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Rockwell RSLogix 5000 RNA Denial of Service (CVE-2011-3489)
A denial of service vulnerability exists in Rockwell RSLogix 5000. A remote attacker could exploit this vulnerability by sending a specially crafted request to the target system...
Microsoft Windows Data Sharing Service Elevation of Privilege (CVE-2019-0573)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Rockwell Automation Allen Bradley Micrologix 1400 Series Access Control Information Disclosure (CVE-2017-14462)
An Information Disclosure vulnerability exists in Rockwell Automation Allen Bradley Micrologix 1400 Series. A remote, unauthenticated attacker can exploit the vulnerability by sending crafted packets to the target system causing access control and information disclosure...
Rockwell Automation Allen-Bradley PowerMonitor 1000 Cross-Site Scripting (CVE-2018-19615)
A XSS injection vulnerability exists in Rockwell Automation Allen-Bradley PowerMonitor login page. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2018-8643)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Skype for Business Denial of Service (CVE-2018-8546)
A denial of service vulnerability exists in Microsoft Skype for Business and Lync. The vulnerability is due to improper handling of emojis. Successful exploitation may lead to denial of service conditions...
NUUO NVRMini2 Remote Code Execution (CVE-2018-1149)
A buffer overflow vulnerability exists in the HTTP interface of NUUO's NVRMini2 Network Video Recording systems. A remote unauthenticated attacker may use this vulnerability to execute arbitrary code on the vulnerable server...
Microsoft Win32k Elevation of Privilege (CVE-2018-8282)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Threat Mgmt Gateway Firewall Client DNS Lookup Buffer Overflow - Ver2 (CVE-2011-1889)
A memory corruption vulnerability exists in Microsoft Forefront Threat Management Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Blabsoft Bopup Communication Server Buffer Overflow - Ver2 (CVE-2009-2227)
A buffer overflow vulnerability exists in Blabsoft Bopup Communication Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
WS-FTP Denial-of-service (CVE-2004-1848) - Ver2
A denial-of-service vulnerability exists in WS-FTP. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
WS-FTP Command Execution (CVE-2004-1885) - Ver2
A command execution vulnerability exists in WS-FTP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Microsoft Windows Information Disclosure (CVE-2010-0231) - Ver2
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Microsoft Win32k Elevation of Privilege (CVE-2018-8233)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Remote Code Execution (CVE-2018-8210)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
NetGain Systems Enterprise Manager snmpwalk ip Directory Traversal (CVE-2017-16598)
A directory traversal vulnerability exists in NetGain Systems Enterprise Manager. The vulnerability is due to an improper input validation. Successful exploitation could lead to arbitrary code execution...
Microsoft Graphics Remote Code Execution (CVE-2018-1016)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Access Remote Code Execution (CVE-2018-0903)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Buffer Over-read (APSB17-36: CVE-2017-16384)
A buffer over-read vulnerability exists in the exif processing module for a PNG file during XPS conversion. The vulnerability is due to an invalid input leads to an incorrect memory buffer location. A remote attacker may exploit this vulnerability by enticing a target user to open a specially...
Microsoft Windows Search Remote Code Execution (CVE-2017-11771)
A remote code execution vulnerability exists in the Windows Search service of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target system...
Microsoft Edge DoLoopBodyStart Out of Bounds Read (CVE-2017-11811)
An out-of-bounds read vulnerability exists in Microsoft Edge. The vulnerability is due to improper handling of objects in memory...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11800)
A Memory Corruption Vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...
Microsoft Win32k Elevation of Privilege (CVE-2017-8689)
An elevation of privilege vulnerability exists in Windows Kernel-Mode Driver. The vulnerability is due to an error in the way Microsoft Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kern...
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-8657)
A memory corruption vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...
HPE Network Automation FileServlet Information Disclosure (CVE-2017-5811)
An information disclosure vulnerability exists in HPE Network Automation. The vulnerability is due to a lack of sanitization on a user supplied path on requests handled by FileServlet. A remote attacker could exploit this vulnerability by sending a maliciously crafted request to the target server...
Microsoft Win32k Elevation of Privilege (CVE-2017-8465)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is caused when the Windows kernel-mode fails to properly handle objects in memory. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted executable file...
Mantis MantisBT Bug Tracker adm_config_report.php move_attachments_page.php XSS (CVE-2017-7309)
Three cross-site scripting vulnerabilities exist in Mantis Bug Tracker MantisBT. These vulnerabilities are due to insufficient input validation of the action, type and configoption HTTP parameters by admconfigreport.php and moveattachmentspage.php. A remote attacker could exploit this vulnerabili...
Microsoft Malware Protection Engine Denial of Service (CVE-2017-8535)
A memory corruption vulnerability has been reported in Microsoft Malware Protection Engine. A remote attacker can exploit this issue by enticing a target user to open a specially crafted file. A successful exploitation could lead to a denial of service...
Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-0228)
A memory corruption vulnerability exists in Microsoft Browsers. The vulnerability is due to an error when handling objects in memory. A remote attacker can exploit this vulnerability and execute arbitrary code in the context of the current user...
Microsoft Windows Uniscribe Information Disclosure (MS17-011: CVE-2017-0085)
An information disclosure vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted ttf file...
Microsoft Windows SMB Remote Code Execution (MS17-010: CVE-2017-0143)
A remote code execution vulnerability exist in Microsoft Server Message Block 1.0 SMBv1. The vulnerability is due to the way SMBv1 service handles certain requests. An attacker who successfully exploited the vulnerability could gain code execution on the target server...
Microsoft Windows Kernel Elevation of Privilege (MS17-017: CVE-2017-0050)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows kernel API enforces permissions. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted executable...
Microsoft Bowser.sys Information Disclosure (MS16-135: CVE-2016-7218)
An information disclosure vulnerability exists in Microsoft Windows regarding bowser.sys . A local attacker could exploit this vulnerability by running a specially crafted malicious executable file. Successful exploitation of this vulnerability could lead to information disclosure...
Microsoft Office Information Disclosure (MS16-148: CVE-2016-7264)
An information disclosure vulnerability exists within Microsoft Office. The vulnerability occurs due to an out-of-bound memory read as a result of an uninitialized variable, and could be used to disclose the memory content. A remote attacker can exploit this issue by enticing a victim to open a...
Microsoft Office Memory Corruption (MS16-133: CVE-2016-7213)
A use-after-free vulnerability exists in Microsoft Office. This vulnerability could be triggered by a corrupted Excel file. Successful exploitation of this issue could grant an attacker remote code execution...
Microsoft Office Memory Corruption (MS16-133: CVE-2016-7236)
A use-after-free vulnerability exists in Microsoft Office. A remote attacker can exploit this issue by enticing a user to open a specially crafted .xlsb file. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user...
Joomla Core Unauthorized Account Creation (CVE-2016-8870)
A vulnerability exists in Joomla Core. The vulnerability is due to insufficient validation during user registration. Unauthorized attackers can remotly exploit this vulnerability to create any account in a Joomla system...
Microsoft Windows Elevation of Privilege (MS16-111: CVE-2016-3306)
An elevation of privilege vulnerability exists in Microsoft Windows Server. The vulnerability is caused when Microsoft Windows fails to handle executable programs being ran by two users. A remote attacker can exploit this issue by enticing a victim to run a specially crafted file...