Exploits

Remote Desktop Services Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue …

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuratio…

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over…

Microsoft Exchange Server Remote Code Execution Vulnerability

Argument Injection in PHP-CGI

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, a…

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles ce…

Netlogon Elevation of Privilege Vulnerability

Windows SMB Remote Code Execution Vulnerability

.NET Framework Remote Code Execution Injection Vulnerability

Microsoft Security Update Guide entry — NVD enrichira.

.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

Windows SMB Remote Code Execution Vulnerability

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup…

LNK Remote Code Execution Vulnerability

Windows SMB Remote Code Execution Vulnerability

Scripting Engine Memory Corruption Vulnerability

Indexed via Android Security Bulletin — full NVD metadata pending.

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMon…

Scripting Engine Memory Corruption Vulnerability

Scripting Engine Memory Corruption Vulnerability

Microsoft Malware Protection Engine Remote Code Execution Vulnerability

Sudo before 1.9.17p1 allows local users to obtain root access

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the n…

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cry…

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.…

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams …

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

Microsoft Exchange Validation Key Remote Code Execution Vulnerability

Microsoft Office Memory Corruption Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Windows SMB Information Disclosure Vulnerability

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2…

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests…

.NET Framework Information Disclosure Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE…

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed…

The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products,…

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusi…

Skype for Business Elevation of Privilege Vulnerability