Skip to content
COOEY
LIVE FEED
3621 events · 4 sources · newest first
2022-06-14 CISA KEV
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the...
2022-06-09 CISA KEV
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
2022-06-09 CISA KEV
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.
2022-06-09 CISA KEV
SAP NetWeaver contains a vulnerability that allows unrestricted file upload.
2022-06-08 CISA KEV
Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.
2022-06-08 CISA KEV
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
2022-06-08 CISA KEV
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
2022-06-08 CISA KEV
Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web...
2022-06-08 CISA KEV
A deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an attacker to execute code with root privileges.
2022-06-08 CISA KEV
Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers...
2022-06-08 CISA KEV
Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.
2022-06-08 CISA KEV
Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that...
2022-06-08 CISA KEV
Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that...
2022-06-08 CISA KEV
Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.
2022-06-08 CISA KEV
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that...
2022-06-08 CISA KEV
Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium,...
2022-06-08 CISA KEV
Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write operations, leading to code execution, via a crafted HTML page. This vulnerability...
2022-06-08 CISA KEV
Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This...
2022-06-08 CISA KEV
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.
2022-06-08 CISA KEV
Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.
2022-06-08 CISA KEV
Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.
2022-06-08 CISA KEV
Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.
2022-06-08 CISA KEV
The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to...
2022-06-08 CISA KEV
The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).
2022-06-08 CISA KEV
Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
2022-06-08 CISA KEV
Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
2022-06-08 CISA KEV
Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.
2022-06-08 CISA KEV
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
2022-06-08 CISA KEV
Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).
2022-06-08 CISA KEV
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.
2022-06-08 CISA KEV
Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.
2022-06-08 CISA KEV
Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.
2022-06-08 CISA KEV
Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.
2022-06-08 CISA KEV
Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.
2022-06-08 CISA KEV
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.
2022-06-08 CISA KEV
QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system.
2022-06-08 CISA KEV
Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.
2022-06-08 CISA KEV
QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.
2022-06-08 CISA KEV
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
2022-06-02 NVD CVE
ACEweb Online Portal 3.5.065 was discovered to contain a SQL injection vulnerability via the criteria parameter in showschedule.awp.
◀ PREV PAGE 69 / 91 NEXT ▶