13538 matches found
Apple Webkit Remote Code Execution (CVE-2017-2505)
A remote code execution vulnerability exists in Apple iOS, tvOS and Safari. Successful exploitation could result in execution of arbitrary code on the affected system...
Google Chrome Type Confusion (CVE-2020-6418)
A type confusion vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Phpgurukul Hospital Management System Authentication Bypass
An authentication bypass vulnerability exists in Phpgurukul Hospital Management System. Successful exploitation of this vulnerability allows an attacker to gain complete access to the configuration of the affected system...
WordPress Duplicator Plugin Arbitrary File Download
An arbitrary file download vulnerability exists in WordPress Duplicator plugin. Successful exploitation of this vulnerability would allow a remote attacker to download arbitrary files from the affected system...
Microsoft Windows DHCP Server Denial of Service (CVE-2019-1206)
A remote code execution exists in the DHCP Server component of Microsoft Windows. The vulnerability is due to improper handling of DHCP failover packets leading to memory corruption. A remote attacker can exploit this vulnerability by sending crafted DHCP failover packets to the target server...
Microsoft Excel Remote Code Execution (CVE-2019-1448)
A remote code execution vulnerability exists in Microsoft Excel. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
XStream Library Insecure Deserialization (CVE-2019-10173)
An insecure serialization vulnerability exists in XStream Library. The vulnerability is due to insufficient validation of event handler type in user-supplied XML data. A remote attacker could exploit this vulnerability by sending specially crafted XML file to the affected application. Successful...
Bludit CMS Arbitrary File Upload (CVE-2019-16113)
An arbitrary file upload vulnerability has been reported in Bludit CMS. This vulnerability is due to improper validation of image uploads by upload-images.php. A remote authenticated attacker could exploit this vulnerability by sending a crafted request to Bludit CMS. Successful exploitation coul...
ZyXEL NAS Command Injection (CVE-2020-9054)
A command injection vulnerability exists in Multiple ZyXEL network-attached storage NAS devices. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
LibreOffice Remote Code Execution (CVE-2019-9848)
A remote code execution vulnerability exists in LibreOffice. The vulnerability is due to the document event feature being permitted to execute LibreLogo scripts, which permits the execution of Python code. A remote attacker could exploit the vulnerability by enticing a user to open a specially...
VMWare OpenSLP Heap Buffer Overflow (CVE-2019-5544; CVE-2021-21974)
A heap buffer overflow vulnerability exists in OpenSLP. The vulnerability is due to improperly checking the bounds of a buffer before copying data to it. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to OpenSLP service on port 427...
OPF OpenProject Cross-Site Scripting (CVE-2019-17092)
A cross-site scripting vulnerability exists in OPF OpenProject. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
YouPHPTube Remote Code Execution (CVE-2019-16124)
A remote code execution vulnerability exists in the checkConfiguration.php script of YouPHPTube. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system...
Red Lion Crimson Type Confusion (CVE-2019-10996; CVE-2019-10984)
A type confusion vulnerability exists in Red Lion Crimson. Successful exploitation of this vulnerability could result in the execution of arbitrary code in the context of the current user...
Microsoft Windows Jet Database Remote Code Execution (CVE-2019-1249)
A remote code execution vulnerability exists in the Jet Database Engine component of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit this vulnerability by enticing a target user into opening a crafted file. Successful...
ABB IDAL HTTP Server Stack Buffer Overflow (CVE-2019-7232)
A stack buffer overflow vulnerability exists in ABB IDAL HTTP Server. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the vulnerable server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on...
Cisco IOS XE WebUI Privileged Command Injection (CVE-2019-12650)
A command injection exists in the WebUI component of Cisco IOS XE. The vulnerability is due to insufficient input validation on form content submitted by a user via the WebUI.A remote, authenticated attacker with administrative access can exploit this vulnerability by sending a crafted HTTP reque...
Zoho ManageEngine OpManager External Entity Injection (CVE-2018-18980)
An External Entity Injection information disclosure vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the RequestXML parameter when processing requests sent to BusinessViewFlashImpl. A remote, unauthenticated attacker could exploit this...
WiKID 2FA Enterprise Server Stored Cross-Site Scripting (CVE-2019-17115)
A stored cross-site scripting vulnerability exists in WiKID 2FA Enterprise Server. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary script code on the affected system...
Squid Proxy Digest Nonce Information Disclosure (CVE-2019-18679)
An information disclosure vulnerability has been reported in Squid Proxy. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information...
cURL and libcurl TFTP Heap Buffer Overflow (CVE-2019-5436)
A heap-based buffer overflow vulnerability exists in cURL and libcurl. Successful exploitation of this vulnerability could result in the execution of arbitrary code in the security context of the target user...
Haxx Curl Buffer Overflow (CVE-2019-5482)
A buffer overflow vulnerability exists in Haxx Curl . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Codesys Control Buffer Overflow (CVE-2019-18858)
A heap-based buffer overflow vulnerability exists in CoDeSys V3. The vulnerability is due to improper validation of user-supplied data sent to the CODESYS V3 web server URL endpoint. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the server...
Linux Kernel Netfilter Buffer Overflow (CVE-2019-11360)
A stack-based buffer overflow vulnerability exists in Linux Kernel Netfilter framework. Successful exploitation of this vulnerability could result in arbitrary code execution on the affected system...
Microsoft Office Excel Information Disclosure (CVE-2019-1110)
An information disclosure vulnerability exists in Microsoft Office Excel. Successful exploitation of this vulnerability could result in the disclosure of sensitive user information...
YouPHPTube Encoder Command Injection (CVE-2019-5127; CVE-2019-5128; CVE-2019-5129)
A command injection vulnerability exists in YouPHPTube Encoder. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
Apache Spark Unauthenticated Remote Code Execution (CVE-2018-11770)
A remote code execution vulnerability exists in Apache Spark. Successful exploitation of this vulnerability could result in arbitrary code execution...
LibVNC LibVNCServer Use After Free (CVE-2018-6307)
A use after free vulnerability exists in LibVNC LibVNCServer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Dovecot Denial Of Service (CVE-2019-11499; CVE-2020-7046)
A denial-of-service vulnerability exists in Dovecot. Successful exploitation of this vulnerability could cause a denial of service condition on the affected system...
Malwarebytes Anti-Malware Remote Code Execution (CVE-2019-6739)
A remote code execution vulnerability exists in Malwarebytes Anti-Malware. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option regarding the DLL loading path. A remote attacker could exploit the vulnerability by enticing a us...
HPE Intelligent Management Center Remote Code Execution (CVE-2019-11942)
A remote code execution vulnerability exists in HPE Intelligent Management Center. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Trend Micro OfficeScan Directory Traversal (CVE-2019-18187)
A directory traversal vulnerability exists in Trend Micro's OfficeScan. The vulnerability is due to insufficient handling of directory traversal characters in uploaded ZIP archives. A remote, authenticated attacker could exploit this vulnerability by sending a request containing a crafted ZIP fil...
Delta Industrial Automation CNCSoft Buffer Overflow (CVE-2019-10947)
A buffer overflow vulnerability exists in Delta Industrial Automation CNCSoft. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Squid Proxy Reflected Cross-Site Scripting (CVE-2019-13345)
A reflected cross-site scripting exists in Squid Proxy. A remote user can exploit this vulnerability by enticing an authenticated user to click on a malicious link...
Apache Tomcat AJP File Inclusion (CVE-2020-1938; CVE-2022-26377)
A file inclusion vulnerability exists in Apache Tomcat AJP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
HPE ByteMessageResource Insecure Deserialization (CVE-2019-11956)
An insecure deserialization vulnerability exists in HPE Intelligent Management Center. Successful exploitation of this vulnerability could result in execution of arbitrary code on the target server in the context of SYSTEM...
Cisco IOS WebUI Command Injection (CVE-2019-12651)
A command injection vulnerability exists in Cisco IOS XE WebUI. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
HPE Intelligent Management Center Remote Code Execution (CVE-2019-5387)
A remote code execution vulnerability exists in HPE Intelligent Management Center. A remote attacker can exploit this vulnerability by sending a crafted request to the target server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...
HPE Intelligent Management Center Command Injection (CVE-2019-5373; CVE-2019-5374)
Multiple Command Injection vulnerabilities exist in HPE Intelligent Management Center. The vulnerabilities are due to insufficient handling of the beanName request parameter by the CustomReportTemplateSelectBean and operatorGroupTreeSelectContent classes. A remote, authenticated attacker can...
Apple Webkit Authentication Bypass (CVE-2017-7064)
An authentication bypass vulnerability exists in Apple Webkit. Successful exploitation of this vulnerability could allow a remote attacker to gain access to a target system...
Jenkins Core Directory Traversal (CVE-2019-10352)
A directory traversal vulnerability exists in Jenkins Core. Successful exploitation of this vulnerability could lead to arbitrary file write, and potentially leading to remote code execution...
Git Submodules Directory Traversal (CVE-2018-11235)
A directory traversal vulnerability exists in the Git client. The vulnerability is due to insufficient validation of submodule names in the .gitmodules file during checkout. Successful exploitation of this vulnerability could enable the attacker to execute arbitrary scripts on the target system...
WordPress GDPR Cookie Consent Plugin Cross Site Scripting
A cross site scripting vulnerability exists in WordPress GDPR Cookie Consent plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
Advantech WISE-PaaS RMM Code Execution (CVE-2019-13551)
A Remote Code Execution vulnerability exists in Advantech WISE-PaaS RMM. The vulnerability is due to insufficient input validation when processing HTTP requests. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted HTTP requests to a target server. Successful...
Atlassian Confluence Server Information Disclosure (CVE-2019-3394)
A local file inclusion vulnerability exists in Atlassian Confluence Server. This vulnerability is due to improper validation of file path. A remote, authenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitation could lead to...
WordPress ThemeGrill Plugin Privilege Escalation (CVE-2020-7047; CVE-2020-7048)
A privilege escalation exists in WordPress ThemeGrill plugin. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Redmine SQL Injection (CVE-2019-18890)
An SQL injection vulnerability exists in Redmine. Successful exploitation of this vulnerability could lead to arbitrary SQL code execution...
Weak SSH Cipher Suites
Communication with SSH servers using weak cipher suites might be prone to attacks trying to intercept secure communications...
Weak Password Login Attempt Over SSH
SSH is an internet protocol that provides access to remote computers using a virtual terminal. A remote attacker may use an open SSH service to run arbitrary code on the victim machine...