Adobe Acrobat and Reader Use After Free (APSB18-21: CVE-2018-12792)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Out-of-bounds write (APSB18-21: CVE-2018-5070)

A out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-5044; CVE-2019-7771; CVE-2019-7780)

A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Type Confusion (APSB18-21: CVE-2018-5057)

A type confusion vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Out-of-bounds write (APSB18-21: CVE-2018-12758)

A out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Microsoft Edge Information Disclosure (CVE-2018-8297)

An information disclosure vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Heap Overflow (APSB18-21: CVE-2018-5052)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-5047)

A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-5054)

A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Use After Free (APSB18-21: CVE-2018-5065)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-5048)

A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-5061)

A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-5062)

A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Out-of-bounds write (APSB18-21: CVE-2018-12787)

A out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Out-of-bounds write (APSB18-21: CVE-2018-5042)

A out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-5010)

A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Microsoft Internet Explorer Security Feature Bypass (CVE-2018-0949)

A security feature bypass vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to improper implementation of the mixed content warning security feature. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected versi...

Adobe Acrobat and Reader Untrusted pointer dereference (APSB18-29: CVE-2018-12799)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-12789)

A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Microsoft Win32k Elevation of Privilege (CVE-2018-8282)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Type Confusion (APSB18-21: CVE-2018-12794)

A type confusion vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-12774)

A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Flash Player Out-of-bounds read (APSB18-24: CVE-2018-5008)

A out of bounds read vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Use After Free (APSB18-21: CVE-2018-12756)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Out-of-bounds write (APSB18-21: CVE-2018-12771)

A out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Out-of-bounds read (APSB18-21: CVE-2018-5018)

A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Adobe Acrobat and Reader Use After Free (APSB18-21: CVE-2018-12776)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Double Free (APSB18-21: CVE-2018-12782)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

CMS Made Simple File Manager Remote Code Execution (CVE-2018-1000094)

A remote command execution vulnerability exists in the File Manager interface of CMS Made Simple 2.2.5. By uploading a malicious file, an authenticated attacker with administrator privileges can exploit this vulnerability for execution of arbitrary code...

mySCADA myPRO 7 Authentication Bypass (CVE-2018-11311)

An authentication bypass vulnerability has been reported in mySCADA myPRO 7 FTP Server. The vulnerability is due to the presence of hard coded credentials. A remote attacker can exploit this vulnerability by accessing the FTP Server using those credentials...

HPE Integrated Lights-Out 4 Authentication Bypass (CVE-2017-12542)

An authentication bypass vulnerability exists in HPE Integrated Lights-Out 4. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary code...

Netis Netcore Router Remote Code Execution

A backdoor in Netis/Netcore routers has been reported. The routers are protected by a single hard-coded password. The exploitation of this backdoor could compromise the network protected by the device...

Multiple Browsers Download Bomb Trick

A denial-of-service vulnerability has been reported in multiple browsers. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

HP Data Protector Backup Client Service Code Execution - Ver2 (CVE-2011-0922)

HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The backup agent supports various message types in its communication with clients in...

Foxit Reader PDF Use After Free Code Execution (CVE-2018-9948)

A remote code execution vulnerability exists in Foxit Reader. The vulnerability is due to a use-after-free error in Foxit Reader while handling a specially crafted PDF file. Successful exploitation could lead to arbitrary code execution...

D-Link DIR-620 Command Injection (CVE-2018-6211)

A command injection vulnerability exists in D-Link DIR-620 routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands...

Fortinet FortiOS SSH backdoor (CVE-2016-1909) - Ver2

An information disclosure vulnerability exists in Fortinet FortiOS. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Hp Data Protector Remote Client EXEC_CMD Code Execution - Ver2 (CVE-2011-0923)

A remote code execution vulnerability exists in Hp Data Protector. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Wavelink Emulation License Server Processing Buffer Overflow - Ver2 (CVE-2015-4059)

A buffer overflow vulnerability exists in Wavelink Emulation License Server. The vulnerability is due to a boundary error when parsing HTTP headers. By sending crafted requests to a vulnerable server, a remote unauthenticated attacker can possibly exploit this vulnerability to execute arbitrary...

Oracle Web Cache Unspecified Client Request Handling DoS - Ver2

A vulnerability exists in Oracle Web Cache. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Cisco IOS XU FTP Server Buffer Overflow - Ver2 (CVE-2007-2586)

A buffer overflow vulnerability exists in Cisco IOS 5.2XU. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Cisco ACS Windows Bypass Authentication Unauthorized Access Ver2

An authentication bypass vulnerability exists in Cisco ACS Windows. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Apache httpd ap_find_token Out of Bounds Read - Ver2 (CVE-2017-7668)

An out-of-bounds read vulnerability exists in Apache HTTP server. This vulnerability is due to improper token list parsing in the apfindtoken function. A remote, unauthenticated attacker could exploit the vulnerability by sending maliciously crafted HTTP request to the affected server...

HPE Intelligent Management Center dbman RestoreZipFile Command Injection - Ver2 (CVE-2017-5821)

A command injection vulnerability exists in the dbman component of HPE Intelligent Management Center. The vulnerability is due to missing validation of user-provided parameters when handling RestoreZipFile commands. A remote, unauthenticated attacker can exploit the vulnerability by sending a...

HPE Intelligent Management Center dbman BackupZipFile Command Injection - Ver2 (CVE-2017-5820)

A command injection vulnerability exist in the dbman component of HPE Intelligent Management Center. The vulnerability is due to missing validation of user-provided parameters when handling BackupZipFile commands. A remote, unauthenticated attacker can exploit the vulnerability by sending a...

Command Injection Over HTTP Payload (CVE-2013-6719; CVE-2013-6720; CVE-2020-26728; CVE-2022-30105)

A command Injection over HTTP payload vulnerability has been reported. A remote attacker can exploit this issue by sending a specially crafted request to the victim. Successful exploitation would allow an attacker to execute arbitrary code on the target machine...

Microsoft Windows NT 4.0 DHCP Server Request Buffer Overflow - Ver2 (CVE-2004-0900)

A buffer overflow vulnerability has been reported in Microsoft Windows NT. An attacker could exploit this vulnerability via a malformed DHCP message. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application...

SAP Business One License Manager Buffer Overflow - Ver2 (CVE-2009-4988)

A buffer overflow vulnerability exists in SAP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

SUN-RPC Portmapper DUMP Call

SUN-RPC has a scanning interface. This mode may be used to gather information on a server, such as the services and applications running on it. This protection detects use of the SUN-RPC interface scanning...

SUN-RPC Segmentation Evasion Technique

SunRPC protocol is vulnerable to evasion techniques over its data connection. An attacker may try to evade inspection using segmentation evasion technique...