Jenkins Remote API Information Disclosure (CVE-2017-1000395)

An information disclosure vulnerability exists in Jenkins Remote API. Successful exploitation of this vulnerability could allow a remote attacker to gain information about Jenkins user accounts...

Microsoft Outlook Security Feature Bypass (CVE-2017-0204)

A security feature bypass vulnerability exists in Microsoft Outlook. Successful exploitation of this vulnerability could allow remote attackers to bypass security tests and protocols on the affected system...

Google Chrome Heap Corruption (CVE-2020-6507)

A heap corruption vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow an attacker to take complete control of an affected system...

Google Chrome Out of Bounds Read (CVE-2020-6390)

An out of bounds read vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

NI LabVIEW Memory Corruption (CVE-2017-2775)

A memory corruption vulnerability exists in NI LabVIEW. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Inspur ClusterEngine Remote Code Execution (CVE-2020-21224)

A remote code execution vulnerability exists in Inspur ClusterEngine. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cross Site Scripting Over HTTP Traffic (CVE-2020-17952; CVE-2021-26475; CVE-2021-26702; CVE-2021-26723; CVE-2021-39496; CVE-2021-39499)

Cross Site Scripting Over HTTP Traffic...

Linear eMerge Arbitrary File Upload (CVE-2019-7257)

A vulnerability exists in Linear eMerge E3 devices. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

ONLYOFFICE DocumentServer Remote Code Execution (CVE-2021-25831; CVE-2021-25830; CVE-2021-25833)

A remote code execution vulnerability exists in ONLYOFFICE DocumentServer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Humax HG100R Routers Authentication Bypass (CVE-2017-11435)

An authentication bypass vulnerability exists in Humax HG100R Routers. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

inoERP download.php Insecure Deserialization (CVE-2019-16894)

An Insecure Deserialization vulnerability exists in Inoideas inoERP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

NUUO NVRmini 2 Remote Code Execution

A remote code execution vulnerability exists in NUUO NVRmini 2. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Netgear ProSAFE Buffer Overflow (CVE-2020-35227)

A buffer overflow vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Kronos Web Time And Attendance Privilege Escalation (CVE-2020-8495)

A privilege escalation vulnerability exists in Kronos Web Time And Attendance. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Sapido RB-1732 Routers Remote Code Execution

A remote code execution vulnerability exists in Sapido RB-1732 Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

EFS Easy Chat Server Information Disclosure

An information disclosure vulnerability exists in EFS Easy Chat Server. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Acunetix Web Scanner Privilege Escalation (CVE-2015-4027)

A privilege escalation vulnerability exists in Acunetix Web Vulnerability Scanner. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Tiki Wiki CMS Groupware Authentication Bypass

An authentication bypass vulnerability exists in Tiki Wiki CMS. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Netgear ProSAFE Remote Code Execution (CVE-2020-26919)

A remote code execution vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Netgear ProSAFE Cross-Site Scripting (CVE-2020-35228)

A cross site scripting vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Apache Tomcat mod_jk Buffer Overflow

A buffer overflow vulnerability exists in Apache Tomcat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

RMI And Oracle WebLogic T3 Protocol Insecure Deserialization

An insecure deserialization vulnerability exists in the T3 protocol used by WebLogic servers and in RMI protocol. This is due to lack of sanitization of user-provided serialized java objects. Successful exploitation could allow an attacker to execute arbitrary code on the affected system...

Netgear ProSAFE Cross-Site Request Forgery (CVE-2020-35223)

A cross-site request forgery vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability can result in the execution of arbitrary code in the effected system...

Netgear ProSAFE Integer Overflow (CVE-2020-35230)

An integer overflow vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

EPrints Scholix Remote Code Execution

A remote code execution vulnerability exists in EPrints Scholix. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Probot Bot Type Confusion (CVE-2021-26918)

A type confusion vulnerability exists in Probot Bot. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

EPrints Command Injection (CVE-2021-26704)

A command injection vulnerability exists in EPrints. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

EPrints Arbitrary File Read (CVE-2021-3342)

An Arbitrary File Read vulnerability exists in EPrints. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary web script into the effected system...

D-Link Dir-825 Buffer Overflow (CVE-2020-29557)

A buffer overflow vulnerability exists in D-Link Dir-825. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

SonLogger Arbitrary File Upload (CVE-2021-27964)

An arbitrary file upload vulnerability exists in SonLogger. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

F5 BIG-IP Remote Code Execution (CVE-2021-22986; CVE-2021-22987; CVE-2022-1388)

A remote code execution vulnerability exists in F5 BIG-IP devices. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Java Deserialization Suspicious Traffic

An insecure deserialization vulnerability exists in web servers that accept serialized java objects from the user. Successful exploitation might allow an attacker to execute arbitrary code on an affected web server that accepts a serialized java object...

SAP Solution Manager Remote Code Execution (CVE-2020-6207)

A remote code execution vulnerability exists in SAP Solution Manager. The vulnerability is due to a lack of authentication in the User Experience Monitoring componant. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successful...

Java Server Pages Backdoor (CVE-2022-23463)

A generic backdoor exists in Java server pages. The vulnerability is due to lack of user input sanitation. Successful exploitation of this vulnerability might allow an attacker to execute arbitrary code on the affected system...

TOTVS Fluig Platform Directory Traversal (CVE-2020-29134)

A directory traversal vulnerability exists in TOTVS Fluig Platform. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

EPrints Command Injection (CVE-2021-26476)

A command injection vulnerability exists in EPrints. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Apache Flink Remote Code Execution

A remote code execution vulnerability exists in Apache Flink. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Asus Askey Routers Cross-Site Scripting (CVE-2021-27403)

A cross-site scripting vulnerability exists in Asus Askey routers. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Baby Care System SQL Injection (CVE-2021-25779)

An SQL injection vulnerability exists in Baby Care System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Tiki Wiki CMS GroupWare Remote Code Execution

A remote code execution vulnerability exists in Tiki Wiki CMS GroupWare. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PHPGurukul Car Rental Arbitrary File Upload (CVE-2021-26809)

An arbitrary file upload vulnerability exists in PHPGurukul Car Rental. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Doctor Appointment System SQL Injection (CVE-2021-27314; CVE-2021-27315; CVE-2021-27316)

An SQL injection vulnerability exists in Doctor Appointment System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Monicahq Monica Stored Cross-Site Scripting (CVE-2021-27370)

A cross-site scripting vulnerability exists in Monicahq Monica. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

libEBML Use After Free (CVE-2015-8789)

A use-after-free vulnerability exists in libEBML. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Apache ActiveMQ message.jsp Cross-Site Scripting (CVE-2020-13947)

A cross-site scripting vulnerability exists in Apache ActiveMQ. The vulnerability is due to insufficient validation of a parameter in the web console...

Nagios XI Dashboard Tools Cross-Site Scripting (CVE-2020-27989)

A stored cross-site scripting vulnerability exists in Nagios XI. The vulnerability is due to insufficient validation of user inputs when processing requests for Deploy Dashboards feature...

Microsoft .NET Framework Privilege Escalation (CVE-2015-2504)

A privilege escalation vulnerability exists in Microsoft .NET Framework. The vulnerability is due to an issue with the way that the .NET Framework validates the number of objects in memory before copying those objects into an array. A remote attacker code exploit this vulnerability by enticing a...

Oracle Coherence Remote Code Execution (CVE-2020-14756)

An insecure deserialization vulnerability exists in Oracle Coherence. This vulnerability is due to a lack of deserialization filtering when Coherence ExternalizableLite classes are deserialized...

SQL Servers Blind SQL Injection Techniques

SQL injection techniques can allow remote attackers to execute SQL commands on SQL servers. Successful exploitation could allow attacker to disclose confidential information, modify or shut down the database or execute arbitrary code on affected servers...

Web Servers Malicious Encoding Path Traversal

There exists a directory traversal vulnerability on multiple web servers. The vulnerability is due to an input validation error in the web server that does not properly sanitize directory traversal patterns...