Lansweeper SQL Injection (CVE-2022-21234)

An SQL injection vulnerability exists in Lansweeper. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Hitron CHITA Command Injection (CVE-2022-25017)

A command injection vulnerability exists in Hitron CHITA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

C-DATA Command Injection (CVE-2022-29337)

A command injection vulnerability exists in C-DATA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Atlassian Bitbucket Command Injection (CVE-2022-36804)

A command injection vulnerability exists in Atlassian Bitbucket. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Azure Service Fabric Explorer Cross Site Scripting (CVE-2022-35829)

A cross-site scripting vulnerability exists in Microsoft Azure Service Fabric Explorer. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Advantech WebAccess Directory Traversal (CVE-2018-15706)

A directory traversal vulnerability exists in Advantech WebAccess. Successful exploitation of this vulnerability could allow a remote attacker to disclose or access arbitrary files on the vulnerable server...

Adobe Acrobat and Reader Stack-based Buffer Overflow (APSB22-46: CVE-2022-42339)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Adobe Acrobat and Reader Use After Free (APSB22-39: CVE-2022-35665)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

FlatCore CMS Server-Side Request Forgery (CVE-2021-41403)

A server-side request forgery vulnerability exists in FlatCore CMS. Successful exploitation of this vulnerability could allow an attacker to access internal resources...

D-Link DCS-930L Remote Code Execution (CVE-2016-11021)

A remote code execution vulnerability exists in D-Link DCS-930L. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Pulse Connect Secure Authentication Bypass (CVE-2021-22893)

An authentication bypass vulnerability exists in Pulse Connect Secure. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

Microsoft Windows PDEV Elevation of Privilege (CVE-2022-23299)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Apache Struts Denial of Service (CVE-2006-1547)

A denial-of-service vulnerability exists in Apache Struts. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Adobe Acrobat and Reader Violation of Secure Design Principles (APSB22-01: CVE-2021-44714)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Symantec Web Gateway Local File Inclusion (CVE-2012-2957)

A local file inclusion vulnerability exists in Symantec Web Gateway. Successful exploitation of this vulnerability could allow a remote attacker to damage user systems...

Microsoft Win32k Elevation of Privilege (CVE-2021-38639)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-36963)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Advantech iView runProViewUpgrade Command Injection (CVE-2021-32930)

A remote command execution exists in Advantech iView. The vulnerability is due to improper input sanitization...

Apple Quicktime Remote Code Execution (CVE-2015-3788)

A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Intel Security VirusScan Enterprise Linux Cross-Site Scripting (CVE-2016-8019)

A cross-site scripting vulnerability exists in Intel Security VirusScan Enterprise Linux. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

OpenCATS Remote Code Execution (CVE-2021-25294)

A remote code execution vulnerability exists in OpenCATS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows SMB Server Information Disclosure (CVE-2020-17140)

An information disclosure vulnerability has been reported in the SMBv2 component of Microsoft Windows SMB server. The vulnerability is due to improper handling of SMB2SETINFO messages. A remote, authenticated attacker can exploit this vulnerability by sending crafted SMBv2 messages to the target...

Microsoft Windows SMB Remote Code Execution (CVE-2020-17096)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft SharePoint Remote Code Execution (CVE-2020-17061)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Alcatel Lucent Stack Overflow (CVE-2019-3922)

A stack overflow vulnerability exists in Alcatel Lucent. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Windows Spoofing (CVE-2020-16922)

A spoofing vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to impersonate and present itself as a legitimate host...

Ozeki NG SMS Gateway Directory Traversal (CVE-2020-14028)

A directory traversal vulnerability exists in Ozeki NG SMS Gateway. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server...

Cisco UCS Director saveStaticConfig Directory Traversal (CVE-2020-3248)

A directory traversal vulnerability exists in Cisco UCS Directory. The vulnerability is due to insufficient validation of user input in the saveStaticConfig method...

Zivif Webcams Remote Code Execution (CVE-2017-17107)

A remote code execution vulnerability exists in Zivif Webcams. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

osTicket Cross-Site Scripting (CVE-2020-12629)

A cross site scripting vulnerability exists in osTicket. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

Microsoft Windows Graphics Component Elevation of Privilege (CVE-2020-1135)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Win32k Elevation of Privilege (CVE-2020-0958)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Jet Database Remote Code Execution (CVE-2019-1249)

A remote code execution vulnerability exists in the Jet Database Engine component of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit this vulnerability by enticing a target user into opening a crafted file. Successful...

Microsoft Remote Desktop Client Remote Code Execution (CVE-2020-0734)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows DHCP Client DhcpExtractFullOptions Code Execution (CVE-2019-0697)

A remote code execution vulnerability exists in Microsoft DHCP Client. A remote attacker could exploit this vulnerability by sending maliciously crafted DHCP responses to a vulnerable Windows system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code...

Microsoft Office Word Security Feature Bypass (CVE-2019-0540)

An information disclosure vulnerability exists in the Word component of Microsoft Office. This vulnerability is due to improper handling of fields. Successful exploitation could cause an information disclosure...

Oracle WebLogic Server AbstractPlatformTransactionManager Insecure Deserialization (CVE-2018-3191)

An insecure deserialization vulnerability has been reported in Oracle WebLogic Server. A remote attacker can exploit this vulnerability by sending a specially crafted serialized object. Successful exploitation can result in arbitrary code execution in the context of the user account running...

Asterisk Denial of Service (CVE-2018-12228)

A denial-of-service vulnerability has been reported in Asterisk. The vulnerability is due to improper handling of client abrupt disconnection or client-supplied messages when client is connecting via TLS. A remote user can exploit the vulnerability by abruptly disconnecting or sending specially...

Zoho ManageEngine OpManager Image Arbitrary File Upload (CVE-2018-18475)

An arbitrary file upload vulnerability exists in Zoho ManageEngine OpManager. The vulnerability is due to insufficient validation of uploaded images. Successful exploitation could result in unrestricted file upload and possible further attacks...

Adobe Acrobat and Reader Use After Free (APSB19-49: CVE-2019-8213)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Pulse Connect Secure File Disclosure (CVE-2019-11510)

A file disclosure vulnerability exists in Pulse Connect Secure. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB19-41: CVE-2019-8045)

An untrusted pointer dereference vulnerability exists in Adobe Acrobat and Reader. A remote unauthenticated attacker could exploit this vulnerability by enticing a target to view a specially crafted pdf file. Successful exploitation of this vulnerability could allow a remote attacker to damage...

Microsoft Windows Kernel Elevation of Privilege (CVE-2019-1159)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Zoom Client Webcam Denial of Service (CVE-2019-13449)

A denial of service vulnerability exists in Zoom Client Webcam. Successful exploitation of this vulnerability could result in denial of service conditions...

D-Link DCS-1130 Network Camera Command Injection (CVE-2017-8408)

A Command Injection vulnerability exists in D-Link DCS 1130. An authenticated attacker can send a specially crafted HTTP request to the affected target host and trigger arbitrary command execution...

Microsoft Edge Scripting Engine Information Disclosure (CVE-2019-0990)

An information disclosure vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1052)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Edge Scripting Engine Information Disclosure (CVE-2019-1023)

An information disclosure vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Windows Storage Service Elevation of Privilege (CVE-2019-0931)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Browser Scripting Engine Memory Corruption (CVE-2019-0884)

A memory corruption vulnerability exists in Microsoft Browser. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...