13538 matches found
Protect Yourself against Multiple Remote Desktop Protocol (RDP) Vulnerabilities
The Remote Desktop Protocol RDP lets users create a virtual session on their desktop computers, allowing remote users to access all the data and applications on their computers. As you interact with the client system, keystrokes and mouse events are sent over the connection to the remote system,...
ART Files (CVE-2006-2378)
...
WordPress Popup Maker Plugin Cross-Site Scripting (CVE-2022-1104)
A stored cross-site scripting vulnerability exists for the Popup Maker plugin for WordPress. This vulnerability is due to improper input validation for the popup settings process...
C-DATA Command Injection (CVE-2022-29337)
A command injection vulnerability exists in C-DATA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Advantech WebAccess Directory Traversal (CVE-2018-15706)
A directory traversal vulnerability exists in Advantech WebAccess. Successful exploitation of this vulnerability could allow a remote attacker to disclose or access arbitrary files on the vulnerable server...
Microsoft Exchange Server Remote Code Execution (CVE-2022-41082; CVE-2022-41040)
A remote code execution vulnerability exists in Microsoft Exchange. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Roundcube Webmail func.inc Cross-site Scripting (CVE-2018-19206)
A cross-site scripting vulnerability exists in Roundcube Webmail. The vulnerability is due to improper handling of a tag within HTML attachments. A remote attacker can exploit this vulnerability by enticing a user to open an attachment...
Adobe Acrobat and Reader Use After Free (APSB22-39: CVE-2022-35665)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Out-of-bounds Read (APSB22-32: CVE-2022-34226)
An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Microsoft Windows Installer Elevation of Privilege (CVE-2022-30147)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Atlassian Confluence Remote Code Execution (CVE-2022-26134)
A remote code execution vulnerability exists in Atlassian Confluence. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
D-Link Routers Remote Code Execution (CVE-2019-16920)
A remote code execution vulnerability exists in D-Link routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
D-Link DCS-930L Remote Code Execution (CVE-2016-11021)
A remote code execution vulnerability exists in D-Link DCS-930L. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Tenda AX1806 Router Buffer Overflow (CVE-2022-25547)
A buffer overflow vulnerability exists in Tenda AX1806 Router. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...
Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-21916)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Eaton IPM Arbitrary File Deletion (CVE-2021-23278)
An arbitrary file deletion vulnerability exists in Eaton Intelligent Power Management and Eaton Intelligent Power Protector. The vulnerability is due to missing input validation in mapssrv.js and nodeupgradesrv.js...
Microsoft Win32k Elevation of Privilege (CVE-2021-38639)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Apple Quicktime Remote Code Execution (CVE-2015-3788)
A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
EPrints Command Injection (CVE-2021-26704)
A command injection vulnerability exists in EPrints. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Intel Security VirusScan Enterprise Linux Cross-Site Scripting (CVE-2016-8019)
A cross-site scripting vulnerability exists in Intel Security VirusScan Enterprise Linux. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
WebAssembly Binaryen Denial Of Service (CVE-2019-7662)
A denial of service vulnerability exists in WebAssembly Binaryen. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
Microsoft Windows SMB Server Information Disclosure (CVE-2020-17140)
An information disclosure vulnerability has been reported in the SMBv2 component of Microsoft Windows SMB server. The vulnerability is due to improper handling of SMB2SETINFO messages. A remote, authenticated attacker can exploit this vulnerability by sending crafted SMBv2 messages to the target...
Microsoft Windows Server Privilege Escalation (CVE-2016-0095)
A privilege escalation vulnerability exists in Microsoft Windows Server. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Microsoft Windows Server Privilege Escalation (CVE-2016-0007)
A privilege escalation vulnerability exists in Microsoft Windows Server. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
AntennaHouse DMC HTMLFilter Memory Corruption (CVE-2016-8383)
A remote code execution vulnerability exists in AntennaHouse DMC HTMLFilter. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Citrix SD-WAN Center Remote Code Execution (CVE-2020-8271)
A remote code execution vulnerability exists in Citrix SD-WAN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Oracle Fusion Middleware Cross-Site Scripting (CVE-2010-3581)
A vulnerability exists in Oracle Fusion Middleware. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
SourceCodester Online Bus Booking System SQL Injection (CVE-2020-25273)
An SQL injection vulnerability exists in SourceCodester Online Bus Booking System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Alcatel Lucent Stack Overflow (CVE-2019-3922)
A stack overflow vulnerability exists in Alcatel Lucent. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Oracle E-Business Suite Human Resources SQL Injection (CVE-2020-2956)
An SQL execution vulnerability exists in the Position Hierarchy Viewer module of the Human Resources component in Oracle E-Business Suite. The vulnerability is due to use of untrusted user input to build a portion of an SQL query string...
Wordpress BBPress Plugin Privilege Escalation (CVE-2020-13693)
A Privilege Escalation vulnerability exists in Wordpress BBPress Plugin. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Microsoft VBScript Remote Code Execution (CVE-2020-1213)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
NGINX NJS Heap-Based Buffer Overflow (CVE-2019-12207)
A heap-based buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Microsoft Win32k Elevation of Privilege (CVE-2020-1143)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
ELOG Project Information Disclosure (CVE-2019-3993)
An information disclosure vulnerability exists in ELOG Project. Successful exploitation of this vulnerability could cause the ELOG server to disclose the password hash for a user...
PHP mb_strtolower Stack Buffer Overflow (CVE-2020-7065)
A stack buffer overflow vulnerability exists in PHP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Kernel Elevation of Privilege (CVE-2020-1027)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft OpenType Font Parsing Remote Code Execution (CVE-2020-0938)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Eclipse Che Cross Site Request Forgery (CVE-2019-17633)
A cross site request forgery vulnerability exists in Eclipse Che. Successful exploitation of this vulnerability could result in the execution of arbitrary code on the affected system...
Microsoft Windows Graphics Component Elevation of Privilege (CVE-2020-0898)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Buffer Errors (APSB20-05: CVE-2020-3752)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Foxit Reader PhantomPDF Use After Free Code Execution (CVE-2019-6730)
A use after free vulnerability exists in Foxit Reader. This vulnerability is due to improper handling of freed objects in the JavaScript popUpMenu method. Successful exploitation could allow the attacker to execute arbitrary code in the context of the application...
Microsoft Office Word Security Feature Bypass (CVE-2019-0540)
An information disclosure vulnerability exists in the Word component of Microsoft Office. This vulnerability is due to improper handling of fields. Successful exploitation could cause an information disclosure...
Adobe Acrobat and Reader Use After Free (APSB19-49: CVE-2019-8209)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Use After Free (APSB19-49: CVE-2019-8213)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Elevation of Privilege (CVE-2019-1215)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Integer Overflow (APSB19-41: CVE-2019-8101)
An integer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Acrobat and Reader Out-of-Bounds Read (APSB19-41: CVE-2019-8077)
An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
D-Link DCS-1130 Network Camera Command Injection (CVE-2017-8408)
A Command Injection vulnerability exists in D-Link DCS 1130. An authenticated attacker can send a specially crafted HTTP request to the affected target host and trigger arbitrary command execution...
Microsoft Windows Kernel Elevation of Privilege (CVE-2019-1041)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...