13538 matches found
Microsoft NTFS Elevation of Privilege (CVE-2018-1036)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Flash Player Out-of-bounds read (APSB18-19: CVE-2018-5001)
A out of bounds read vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
Adobe Flash Player Type Confusion (APSB18-19: CVE-2018-4945)
A type confusion vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Excel Remote Code Execution (CVE-2018-8248)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Flash Player Integer Overflow (APSB18-19: CVE-2018-5000)
An integer overflow vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows DNSAPI Remote Code Execution (CVE-2018-8225)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Desktop Bridge Elevation of Privilege (CVE-2018-8214)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Memory Corruption (CVE-2018-8110)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2018-8267)
A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Win32k Elevation of Privilege (CVE-2018-8233)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Memory Corruption (CVE-2018-8111)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft HIDParser Elevation of Privilege (CVE-2018-8169)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Memory Corruption (CVE-2018-8236)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-8229)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Remote Code Execution (CVE-2018-8210)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows Desktop Bridge Elevation of Privilege (CVE-2018-8208)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Flash Player Buffer Overflow (CVE-2018-5002)
A buffer overflow vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
ZIP Slip Arbitrary File Overwrite Remote Code Execution (CVE-2018-1002200; CVE-2018-1002201; CVE-2018-1002203; CVE-2018-1002204; CVE-2018-1002205; CVE-2018-1002206; CVE-2018-1002207; CVE-2018-1261; CVE-2018-8008; CVE-2018-8009; CVE-2021-43555)
A file overwrite vulnerability exist in archive formats. To trigger this issue, an attacker may create a malicious archive that will exploit this vulnerability. Successful exploitation of this vulnerability would allow a remote attacker to overwrite arbitrary files on the vulnerable system and...
Samba Printer Server spoolss Denial Of Service (CVE-2018-1050)
A Denial Of Service vulnerability exists in Samba Printer Service. The vulnerability is due to improper validation of user input...
Quagga aspath_put BGP Session Drop Denial of Service (CVE-2017-16227)
A denial-of-service vulnerability exists in Quagga. The vulnerability is due to an improper calculation of ASPATH. A remote attacker can exploit this vulnerability by sending a specially crafted request to the affected service. Successful exploitation would cause the target to crash, resulting in...
Apache httpd FilesMatch Directive Security Restriction Bypass (CVE-2017-15715)
A security policy bypass vulnerability exists in Apache httpd. A remote attacker can exploit this vulnerability by sending a HTTP request with crafted URI to the remote HTTP server. Successful exploitation could result security policy bypass and arbitrary file upload...
TP-Link TL-WR840N/TL-WR841N Authentication Bypass
An authentication bypass vulnerability exists in TP-Link WR840N and TL-WR841N routers. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...
D-Link DSL-2750B Remote Command Execution
A remote code execution vulnerability has been reported in D-Link DSL-2750B routers. Successful exploitation could lead to arbitrary code execution on the vulnerable device...
Squid Proxy ESI Response Processing Denial of Service v2
A denial-of-service vulnerability exists in Squid Proxy. The vulnerability is due to incorrect pointer handling when processing ESI responses...
Linksys WVBR0-25 Command Injection (CVE-2017-17411)
A command injection vulnerability exists in Linksys WVBR0-25. The vulnerability is due to insufficient input validation in the router's web management portal. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
Apache httpd mod_cache_socache Denial of Service (CVE-2018-1303)
A denial-of-service vulnerability exists in Apache httpd. The vulnerability is due to improper validation of the headers in HTTP requests...
Squid Proxy Denial of Service (CVE-2018-1172; CVE-2018-1000027)
A denial of service vulnerability exists in Squid Proxy. Successful exploitation of this vulnerability would allow remote attackers to cause denial of service on the affected system...
Adobe Acrobat and Reader Client Side Request Injection (APSB18-09: CVE-2018-4995)
A Security Bypass vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Dell EMC VMAX Virtual Appliance Manager Directory Traversal Remote Code Execution (CVE-2018-1215)
A directory traversal vulnerability exists in Dell EMC VMAX Virtual Appliance vApp. The vulnerability is due to improper handling of user-supplied requests for file uploads. Successful exploitation of this vulnerability could lead to arbitrary code execution...
NetGain Systems Enterprise Manager snmpwalk ip Directory Traversal (CVE-2017-16598)
A directory traversal vulnerability exists in NetGain Systems Enterprise Manager. The vulnerability is due to an improper input validation. Successful exploitation could lead to arbitrary code execution...
Apache Tika Chmparser Denial Of Service (CVE-2018-1339)
A denial-of-service vulnerability exists in Apache Tika. The vulnerability is due to improper handling of a Microsoft Compiled HTML Help file during enumerating its listing chunks...
QNAP QTS Remote Command Injection (CVE-2013-0143)
Remote command injection vulnerabilities exist in QNAP QTS. A remote attacker can exploit these weaknesses to execute arbitrary commands in the affected devices via a crafted request...
Netgear DGN2200B Cross-Site Scripting
A cross-site scripting vulnerability has been reported in Netgear DGN2200B routers. Successful exploitation will result in the attacker-controlled script code being executed in the target user's browser in the context of the affected machine...
Netgear WNDR4700 Router Authentication Bypass (CVE-2013-3071)
An authentication bypass vulnerability exists in Netgear WNDR4700 routers. This allows remote attackers to perform administrative actions without authentication...
VPNFilter Client Malicious Self-Signed Certificate
VPNFilter is multi-stage malware that infects certain routers. It uses a custom SSL certificate in order to download data required to proceed to the second stage of the infection. Successful exploitation may lead to the device being compromised...
NETGEAR WNR2000 Authentication Bypass (CVE-2016-10176)
An authentication bypass vulnerability exists in NETGEAR WMR2000 Routers. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...
NETGEAR DGN2200 Remote Code Execution (CVE-2017-5521; CVE-2017-6077)
A remote code execution vulnerability has been reported in NETGEAR DGN2200 routers. Successful exploitation could lead to arbitrary code execution...
Red Hat Linux DHCP Client Command Injection (CVE-2018-1111)
A remote command execution vulnerability exists in DHCP client implementation of Red Hat Linux. A remote attacker could exploit this vulnerability by sending a malicious request to the victim. Successful exploitation of this vulnerability can result in the execution of arbitrary code in the conte...
Cisco Prime File Upload Servlet Remote Code Execution (CVE-2018-0258)
A remote code execution vulnerability has been reported in Cisco Prime File Upload Servlet. This is due to improper input validation of the parameters in the HTTP request and a processing error in the role-based access control RBAC of URLs. A remote attacker could exploit this vulnerability by...
Quest NetVault Backup Multipart Request Authentication Bypass (CVE-2018-1163)
An authentication bypass vulnerability exists in the web interface component of Quest NetVault Backup. The vulnerability is due to how the server handles the HTTP requests...
OpenPGP and S/MIME eFail Information Disclosure
An information disclosure vulnerability exists in OpenPGP and S/MIME. Successful exploitation would allow the attacker to decrypt the traffic and obtain or modify sensitive information...
Electron NodeIntegration Remote Code Execution (CVE-2018-1000136)
A remote code execution vulnerability exists in Electron. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Adobe Flash Player Matrix3D Integer Overflow Remote Code Execution (APSB12-19: CVE-2012-5054)
A remote code execution vulnerability exists in Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
HPE Operations Orchestration backwards-compatibility beanutils Insecure Deserialization (CVE-2017-8994)
An insecure deserialization vulnerability exists in HPE Operations Orchestration. The vulnerability is due to the incomplete fix for deserialization of untrusted data in backwards-compatibility servlets...
NetGain Systems Enterprise Manager misc.sample_jsp type Directory Traversal (CVE-2017-16599)
A directory traversal vulnerability exists in NetGain Systems Enterprise Manager. The vulnerability is due to an input validation while processing type parameter in org.apache.jsp.u.jsp.reports.templates.misc.samplejsp servlet...
VMware VNC VMWDynResolution Heap Buffer Overflow (CVE-2017-4933)
A heap buffer overflow vulnerability exists in the VNC component of VMware. The vulnerability is due to an error in processing VMWDynResolution requests...
ManageEngine ServiceDesk DownloadSnapshotServlet Directory Traversal (CVE-2017-11512)
A directory traversal vulnerability exists in ManageEngine ServiceDesk for Microsoft Windows. The vulnerability is due to a lack of sanitization on user supplied input on requests to the DownloadSnapshotServlet before using the input in file operations...
Opera Browser Content Length Buffer Overflow (CVE-2010-1349)
A buffer overflow vulnerability exists in Opera Browser. The vulnerability is due to a boundary error in the way the browser processes HTTP server replies. Remote attackers could exploit this vulnerability by persuading a target user to connect to an attacker-controlled HTTP server with a...
Node.js Foundation Node.js zlib windowBits Denial of Service (CVE-2017-14919)
A denial of service vulnerability exists in Node.js. The vulnerability is due to a newer version of zlib that does not permit a value of 8 for windowBits, and crashes or throws an exception when passed said value...
Roundcube Webmail archive.php IMAP Command Injection (CVE-2018-9846)
An IMAP command injection vulnerability exists in Roundcube Webmail. The vulnerability is due to improper handling of the "uid" parameter within certain HTTP requests. A remote attacker can exploit this vulnerability by enticing an authenticated user to visit a page which sends a request to the...