In cdev_get of char_dev.c there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153467744


In SurfaceFlinger there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150227563


In binder_thread_release of binder.c there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145286050References: Upstream kernel


In updatePreferenceIntents of AccountTypePreferenceLoader there is a possible confused deputy attack due to a race condition. This could lead to local escalation of privilege and launching privileged activities with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-150946634


In CamX code there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-123999783


Race condition in software installer for some Intel(R) Wireless Bluetooth(R) products on Windows* 7 8.1 and 10 may allow an unprivileged user to potentially enable escalation of privilege via local access.


In loadSoundModel and related functions of SoundTriggerHwService.cpp there is possible out of bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-136005905


In the netlink driver there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-65025077


In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


In the Easel driver there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112309571

race condition
escalated privilege
memory corruption


In the Easel driver there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112312381


In createEffect of AudioFlinger.cpp there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-122309228


In the Android kernel in the FingerTipS touchscreen driver there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.


In gasket_alloc_coherent_memory of gasket_page_table.c there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-151455484References: N/A


In memory management driver there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185193932


In memory management driver there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185196177


In vow there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-10 Android-11; Patch ID: ALPS05418265.


In vpu there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10 Android-11; Patch ID: ALPS05371580; Issue ID: ALPS05379093.


In pf_write_buf of FuseDaemon.cpp there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-192085766


In vpu there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10 Android-11; Patch ID: ALPS05371580; Issue ID: ALPS05379085.


In vow there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05852812.


In SUB2AF there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05881290; Issue ID: ALPS05881290.


In vow driver there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05837742.


In vow there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05852819; Issue ID: ALPS05852819.


In StatsService::command of StatsService.cpp there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141243101


Race condition in the SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to obtain sensitive information and conduct man-in-the-middle attacks by providing a UNIX socket for communication between this plug-in and the client (aka qspice-client) in qspice 0.3.0 and then accessing this socket.


Nortel Contivity VPN Client 2.1.7 3.00 3.01 4.91 and 5.01 when opening a VPN tunnel does not check the gateway certificate until after a dialog box has been displayed to the user which creates a race condition that allows remote attackers to perform a man-in-the-middle (MITM) attack.


Race condition in the XMPP library in Smack before 4.1.9 when the SecurityMode.required TLS setting has been set allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the \starttls\ feature from a server response.


In android for MSM Firefox OS for MSM QRD Android with all Android releases from CAF using the Linux kernel due to a race condition in the function audio_effects_shared_ioctl() memory corruption can occur.


Race

condition

between

the

camera

functions

due

to

lack

of

resource

lock

which

will

lead

to

memory

corruption

and

UAF

issue

in

Snapdragon

Auto

Snapdragon

Consumer

Electronics

Connectivity

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wearables

in

Nicobar


u'While processing SMCInvoke asynchronous message header message count is modified leading to a TOCTOU race condition and lead to memory corruption' in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Voice & Music Snapdragon Wired Infrastructure and Networking in IPQ6018 Kamorta MDM9205 MDM9607 Nicobar QCS404 QCS405 QCS605 QCS610 Rennell SA415M SA515M SA6155P SC7180 SC8180X SDM670 SDM710 SDX24 SDX55 SM6150 SM7150 SM8150 SM8250 SXR1130 SXR2130


A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note: This issue only affected Linux operating systems. Other operating systems are unaffected.* This vulnerability affects Thunderbird < 78.13 Thunderbird < 91 Firefox ESR < 78.13 and Firefox < 91.


Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page


Python

is

vulnerable

to

a

Heap-Buffer-Overflow

as

well

as

a

Heap-Use-After-Free.

Python

versions

prior

to

may

also

be

vulnerable

and

it

appears

that

Python

and

prior

may

also

be

vulnerable

however

this

has

not

been

confirmed.

The

vulnerability

lies

when

multiply

threads

are

handling

large

amounts

of

data.

In

both

cases

there

is

essentially

a

race

condition

that

occurs.

For

the

Heap-Buffer-Overflow

Thread

is

creating

the

size

for

a

buffer

but

is

already

writing

to

the

buffer

without

knowing

how

much

to

write.

So

when

a

large

amount

of

data

is

being

processed

it

is

very

easy

to

cause

memory

corruption

using

a

Heap-Buffer-Overflow.

As

for

the

Use-After-Free

Thread3->Malloc->Thread1->Free's->Thread2-Re-uses-Free'd

Memory.

The

PSRT

has

stated

that

this

is

not

a

security

vulnerability

due

to

the

fact

that

the

attacker

must

be

able

to

run

code

however

in

some

situations

such

as

function

as

a

service

this

vulnerability

can

potentially

be

used

by

an

attacker

to

violate

a

trust

boundary

as

such

the

DWF

feels

this

issue

deserves

a

CVE.


When trying to connect to a STUN server a race condition could have caused a use-after-free of a pointer leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.10 Firefox < 78 and Thunderbird < 68.10.0.


A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink resulting in a use-after-free memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 78.


An exploitable double fetch vulnerability exists in the SboxDrv.sys driver functionality of Invincea-X 6.1.3-24058. A specially crafted input buffer and race condition can result in kernel memory corruption which could result in privilege escalation. An attacker needs to execute a special application locally to trigger this vulnerability.


Race condition in Microsoft Internet Explorer 5.01 6 and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to install multiple language packs in a way that triggers memory corruption aka \Language Pack Installation Vulnerability.\

race condition
memory corruption
arbitrary code execution


Race condition in Panda ActiveScan 5.53.00 and other versions before 5.54.01 allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control which is not thread safe.


Race condition in W29N51.SYS in the Intel 2200BG wireless driver 9.0.3.9 allows remote attackers to cause memory corruption and execute arbitrary code via a series of crafted beacon frames. NOTE: some details are obtained solely from third party information.


In FreeBSD through 11.1 the smb_strdupin function in sys/netsmb/smb_subr.c has a race condition with a resultant out-of-bounds read because it can cause t2p->t_name strings to lack a final '\\0' character.


A

race

condition

occurs

while

processing

perf-event

which

can

lead

to

a

use

after

free

condition

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wearables

in

Qualcomm

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD


Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Voice & Music Snapdragon Wearables in MSM8909W QCS405 QCS605 Qualcomm 215 SD 425 SD 439 / SD 429 SD 450 SD 625 SD 632 SD 665 SD 675 SD 712 / SD 710 / SD 670 SD 730 SD 845 / SD 850 SD 855 SDM439 SDX24


Incorrect Access Control in Safescan Timemoto TM-616 and TA-8000 series allows remote attackers to read any file via the administrative API.


A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to read arbitrary files.


Extreme EXOS 16.x 21.x and 22.x allows administrators to read arbitrary files.


Cisco Adaptive Security Appliance (ASA) Software allows remote authenticated users to read files by sending a crafted URL to the HTTP server as demonstrated by reading the running configuration aka Bug ID CSCun78551.


In all Qualcomm products with Android releases from CAF using the Linux kernel when reading from sysfs nodes one can read more information than it is allowed to.


OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000.


In all Android releases from CAF using the Linux kernel a dynamically-protected DDR region could potentially get overwritten.


In BIG-IQ 6.0.0-7.0.0 a remote access vulnerability has been discovered that may allow a remote user to execute shell commands on affected systems using HTTP requests to the BIG-IQ user interface.


A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5 6.8.9 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.


A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.


A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2 8.6.0.8 8.5.0.12 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability.


Moxa EDR 810 all versions 5.1 and prior allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router which may allow an attacker to perform remote code execution.


In Studio-42 elFinder 2.1.60 there is a vulnerability that causes remote code execution through file name bypass for file upload.


In

version

there

is

a

remote

code

execution

vulnerability

in

and

where

attackers

can

obtain

server

permissions

and

control

the

server.


Delta Electronics TPEditor Versions 1.94 and prior. Multiple out-of-bounds write vulnerabilities may be exploited by processing specially crafted project files which may allow remote code execution.


Forced OGNL evaluation when evaluated on raw user input in tag attributes may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.


In DolphinScheduler 1.2.0 and 1.2.1 with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database.


This affects the package pwntools before 4.3.1. The shellcraft generator for affected versions of this module are vulnerable to Server-Side Template Injection (SSTI) which can lead to remote code execution.


Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root and then making a remote_agent.php request containing PHP code in a Client-ip header.


MacDown 0.7.1 (870) allows remote code execution via a file:\\\\\\ URI with a .app pathname in the HREF attribute of an A element. This is different from CVE-2019-12138.


Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name and then this PHP code can write other PHP code to a ../ pathname.


Ilch 2.1.22 allows remote code execution because php is listed under \Allowed files\ on the index.php/admin/media/settings/index page.


Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (within an HTML input file).


CScms 4.1 allows remote code execution as demonstrated by 1');eval($_POSTcmd);# in Web Name to upload\\plugins\\sys\\Install.php.


modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data leading to remote code execution.


.NET and Visual Studio Remote Code Execution Vulnerability.


H2 1.4.197 as used in Datomic before 0.9.5697 and other products allows remote code execution because CREATE ALIAS can execute arbitrary Java code.


Jenkins before versions 2.44 2.32.2 is vulnerable to a remote code execution vulnerability involving the deserialization of various types in javax.imageio in XStream-based APIs (SECURITY-383).


Adobe Bridge CC versions 9.0.2 have an out-of-bounds write vulnerability. Successful exploitation could lead to remote code execution.


Adobe Bridge CC versions 9.0.2 have a heap overflow vulnerability. Successful exploitation could lead to remote code execution.


In CMS Made Simple (CMSMS) through 2.2.7 the \module import\ operation in the admin dashboard contains a remote code execution vulnerability exploitable by an admin user because an XML Package can contain base64-encoded PHP code in a data element.


In CMS Made Simple (CMSMS) through 2.2.7 the \file unpack\ operation in the admin dashboard contains a remote code execution vulnerability exploitable by an admin user because a .php file can be present in the extracted ZIP archive.


Remote Code Execution (RCE) vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin which could let a remote malicious user exeuct arbitrary php code.


Remote Code Execution (RCE) vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field. .


Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload field.


Remote Code Execution (RCE) vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters..


Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page.


Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user to execute code on the hosting system via a module containing malicious PHP code.


Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.


Remote code execution in Hanwha Techwin Smartcams


Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to arbitrary commands as root on the devices.


Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution.


Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through web hook component resulting in remote code execution.


Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution.


Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution.


Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-41365 CVE-2021-42310 CVE-2021-42311 CVE-2021-42313 CVE-2021-42314 CVE-2021-43882 CVE-2021-43889.


Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-41365 CVE-2021-42310 CVE-2021-42313 CVE-2021-42314 CVE-2021-42315 CVE-2021-43882 CVE-2021-43889.


Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-41365 CVE-2021-42310 CVE-2021-42311 CVE-2021-42313 CVE-2021-42315 CVE-2021-43882 CVE-2021-43889.


Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-41365 CVE-2021-42311 CVE-2021-42313 CVE-2021-42314 CVE-2021-42315 CVE-2021-43882 CVE-2021-43889.


Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-41365 CVE-2021-42310 CVE-2021-42311 CVE-2021-42314 CVE-2021-42315 CVE-2021-43882 CVE-2021-43889.


Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-41365 CVE-2021-42310 CVE-2021-42311 CVE-2021-42313 CVE-2021-42314 CVE-2021-42315 CVE-2021-43889.


Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-41365 CVE-2021-42310 CVE-2021-42311 CVE-2021-42313 CVE-2021-42314 CVE-2021-42315 CVE-2021-43882.


Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-42310 CVE-2021-42311 CVE-2021-42313 CVE-2021-42314 CVE-2021-42315 CVE-2021-43882 CVE-2021-43889.


Microsoft Defender for IoT Remote Code Execution Vulnerability.


Remote Desktop Client Remote Code Execution Vulnerability


Remote Desktop Client Remote Code Execution Vulnerability.


Remote Desktop Client Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21990.


Remote Desktop Client Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-23285.


Remote Desktop Client Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21850.


Remote Desktop Client Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21851.


On D-Link DIR-550A and DIR-604M devices through v2.10KR a malicious user can forge an HTTP request to inject operating system commands that can be executed on the device with higher privileges aka remote code execution.


Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-33746 CVE-2021-33754 CVE-2021-33780 CVE-2021-34494.


Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-33746 CVE-2021-33754 CVE-2021-33780 CVE-2021-34525.


Windows DNS Server Remote Code Execution Vulnerability


Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-33754 CVE-2021-33780 CVE-2021-34494 CVE-2021-34525.


Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-33746 CVE-2021-33754 CVE-2021-34494 CVE-2021-34525.


Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-33746 CVE-2021-33780 CVE-2021-34494 CVE-2021-34525.


Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26893 CVE-2021-26894 CVE-2021-26895 CVE-2021-26897.


Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26877 CVE-2021-26894 CVE-2021-26895 CVE-2021-26897.


Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26877 CVE-2021-26893 CVE-2021-26894 CVE-2021-26895.


Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26877 CVE-2021-26893 CVE-2021-26894 CVE-2021-26897.


Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26877 CVE-2021-26893 CVE-2021-26895 CVE-2021-26897.


Windows DNS Server Remote Code Execution Vulnerability.


Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability


Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability.


Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability


Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21930 CVE-2022-21931.


Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21929 CVE-2022-21930.


Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21929 CVE-2022-21931.


Fuji Electric V-Server 4.0.3.0 and prior An integer underflow vulnerability has been identified which may allow remote code execution.


Fuji Electric V-Server 4.0.3.0 and prior Several out-of-bounds write vulnerabilities have been identified which may allow remote code execution.


Fuji Electric V-Server 4.0.3.0 and prior Multiple untrusted pointer dereference vulnerabilities have been identified which may allow remote code execution.


Fuji Electric V-Server 4.0.3.0 and prior A use after free vulnerability has been identified which may allow remote code execution.


Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).


Microsoft Excel Remote Code Execution Vulnerability


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28451.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28454.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-1714.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-1713.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-34501.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-34518.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24067 CVE-2021-24068 CVE-2021-24069.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24067 CVE-2021-24069 CVE-2021-24070.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24067 CVE-2021-24068 CVE-2021-24070.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24068 CVE-2021-24069 CVE-2021-24070.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-27054.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-27053.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40473 CVE-2021-40474 CVE-2021-40479 CVE-2021-40485.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40471 CVE-2021-40473 CVE-2021-40474 CVE-2021-40485.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40471 CVE-2021-40473 CVE-2021-40474 CVE-2021-40479.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40471 CVE-2021-40473 CVE-2021-40479 CVE-2021-40485.


Microsoft Excel Remote Code Execution Vulnerability


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40471 CVE-2021-40474 CVE-2021-40479 CVE-2021-40485.


Microsoft Excel Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-29110.


Microsoft Excel Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-29109.


Microsoft Excel Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-26901.


Microsoft Excel Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24473.


Microsoft Excel Remote Code Execution Vulnerability.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17019 CVE-2020-17064 CVE-2020-17066.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17122 CVE-2020-17123 CVE-2020-17125 CVE-2020-17127 CVE-2020-17129.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17122 CVE-2020-17123 CVE-2020-17127 CVE-2020-17128 CVE-2020-17129.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17019 CVE-2020-17065 CVE-2020-17066.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17122 CVE-2020-17123 CVE-2020-17125 CVE-2020-17127 CVE-2020-17128.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17122 CVE-2020-17123 CVE-2020-17125 CVE-2020-17128 CVE-2020-17129.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17122 CVE-2020-17125 CVE-2020-17127 CVE-2020-17128 CVE-2020-17129.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17019 CVE-2020-17064 CVE-2020-17065.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17064 CVE-2020-17065 CVE-2020-17066.


Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17123 CVE-2020-17125 CVE-2020-17127 CVE-2020-17128 CVE-2020-17129.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28481 CVE-2021-28482 CVE-2021-28483.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28480 CVE-2021-28482 CVE-2021-28483.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28480 CVE-2021-28481 CVE-2021-28482.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28480 CVE-2021-28481 CVE-2021-28483.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-31196 CVE-2021-31206.


Microsoft Exchange Server Remote Code Execution Vulnerability


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-31195.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-31198.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-31196 CVE-2021-34473.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-31206 CVE-2021-34473.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26854 CVE-2021-26855 CVE-2021-26857 CVE-2021-26858 CVE-2021-27065 CVE-2021-27078.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26412 CVE-2021-26854 CVE-2021-26855 CVE-2021-26858 CVE-2021-27065 CVE-2021-27078.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26412 CVE-2021-26854 CVE-2021-26857 CVE-2021-26858 CVE-2021-27065 CVE-2021-27078.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26412 CVE-2021-26855 CVE-2021-26857 CVE-2021-26858 CVE-2021-27065 CVE-2021-27078.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26412 CVE-2021-26854 CVE-2021-26855 CVE-2021-26857 CVE-2021-27065 CVE-2021-27078.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26412 CVE-2021-26854 CVE-2021-26855 CVE-2021-26857 CVE-2021-26858 CVE-2021-27065.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26412 CVE-2021-26854 CVE-2021-26855 CVE-2021-26857 CVE-2021-26858 CVE-2021-27078.


Microsoft Exchange Server Remote Code Execution Vulnerability.


Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21855 CVE-2022-21969.


Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21846 CVE-2022-21855.


Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21846 CVE-2022-21969.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17083.


Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17084.


Adobe Experience Manager versions 6.5 and 6.4 have an authentication bypass vulnerability. Successful exploitation could lead to remote code execution.


Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct remote code execution.


A flaw was found in Moodle in versions 3.11 to 3.11.3 3.10 to 3.10.7 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified.


Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images could lead to remote code execution.


Windows Graphics Component Remote Code Execution Vulnerability


Windows Graphics Component Remote Code Execution Vulnerability.


Windows Hyper-V Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40461.


Windows Hyper-V Remote Code Execution Vulnerability


Windows Hyper-V Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-38672.


Windows Hyper-V Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22008 CVE-2022-22009 CVE-2022-23257.


Windows Hyper-V Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22009 CVE-2022-23257 CVE-2022-24537.


Windows Hyper-V Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22008 CVE-2022-23257 CVE-2022-24537.


Windows Hyper-V Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22008 CVE-2022-22009 CVE-2022-24537.


Windows Hyper-V Remote Code Execution Vulnerability.


Raw Image Extension Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28466.


Raw Image Extension Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28468.


Raw Image Extension Remote Code Execution Vulnerability


Raw Image Extension Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-23295.


Raw Image Extension Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-23300.


Raw Image Extension Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17078 CVE-2020-17082 CVE-2020-17086.


Raw Image Extension Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17079 CVE-2020-17082 CVE-2020-17086.


Raw Image Extension Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17078 CVE-2020-17079 CVE-2020-17086.


Raw Image Extension Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17078 CVE-2020-17079 CVE-2020-17082.


SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in GitHub repository rtxteam/rtx prior to checkpoint_2022-04-20 . This vulnerability is critical as it can lead to remote code execution and thus complete server takeover.


There is a vulnerability in actionpack_page-caching gem < v1.2.1 that allows an attacker to write arbitrary files to a web server potentially resulting in remote code execution if the attacker can write unescaped ERB to a view.


vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP file on the server and gain code execution.


ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution.


In JetBrains TeamCity before 2019.1.4 insecure Java Deserialization could potentially allow remote code execution.


In JetBrains TeamCity before 2021.1.2 remote code execution via the agent push functionality is possible.


In JetBrains TeamCity before 2020.2.3 argument injection leading to remote code execution was possible.


LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address which may allow remote code execution data exfiltration or cause a system crash.


LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file which may allow remote code execution data exfiltration or cause a system crash.


LCDS Laquis SCADA prior to version 4.1.0.4150 allows the opening of a specially crafted report format file that may cause an out of bounds read which may cause a system crash allow data exfiltration or remote code execution.


LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution data exfiltration or cause a system crash.


Windows

LDAP

Remote

Code

Execution

Vulnerability.

This

CVE

ID

is

unique

from


Windows LDAP Remote Code Execution Vulnerability.


TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.


Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.


Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload leading to remote code execution.


Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution.


Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite leading to remote code execution.


Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution.


Zoho ManageEngine ADManager Plus before 7110 allows remote code execution.


Zoho ManageEngine ADSelfService Plus through 6101 is vulnerable to unauthenticated Remote Code Execution while changing the password.


Zoho ManageEngine ADSelfService Plus through 6102 allows unauthenticated remote code execution in non-English editions.


Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution.


Zoho ManageEngine ADSelfService Plus before 5815 allows unauthenticated remote code execution.


Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location which leads to remote code execution.


Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Reports module.


Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the FileStorage class. This is related to the CewolfServlet and MDMLogUploaderServlet servlets.


Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite.


Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution.


Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class.


Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108.


Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not required.


Windows Network File System Remote Code Execution Vulnerability


Windows Network File System Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24497.


Windows Network File System Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24491.


Windows Network File System Remote Code Execution Vulnerability.


InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_12028. This vulnerability is triggered via a crafted packet.


InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component get_cgi_from_memory. This vulnerability is triggered via a crafted packet.


InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component ipsec_secrets. This vulnerability is triggered via a crafted packet.


InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_122D0. This vulnerability is triggered via a crafted packet.


InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component config_ovpn. This vulnerability is triggered via a crafted packet.


InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet.


InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_12168. This vulnerability is triggered via a crafted packet.


InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_10F2C. This vulnerability is triggered via a crafted packet.


InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_1791C. This vulnerability is triggered via a crafted packet.


Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution.


Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19 and IQ Server before 72 has remote code execution.


Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.


Microsoft Office Graphics Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-38658.


Microsoft Office Graphics Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-38660.


Microsoft Office Graphics Remote Code Execution Vulnerability


Microsoft Office Graphics Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-31941.


Microsoft Office Graphics Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-31940.


Microsoft Office Graphics Remote Code Execution Vulnerability.


Microsoft Office Remote Code Execution Vulnerability


Microsoft Office Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-27057 CVE-2021-27059.


Microsoft Office Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-31176 CVE-2021-31177 CVE-2021-31179.


Microsoft Office Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-31175 CVE-2021-31176 CVE-2021-31177.


Microsoft Office Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-31175 CVE-2021-31177 CVE-2021-31179.


Microsoft Office Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-31175 CVE-2021-31176 CVE-2021-31179.


Microsoft Office Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24108 CVE-2021-27059.


Microsoft Office Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24108 CVE-2021-27057.


Microsoft Office Remote Code Execution Vulnerability.


Microsoft Office Visio Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-38653.


Microsoft Office Visio Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-38654.


Microsoft Office Visio Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40481.


Microsoft Office Visio Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40480.


Microsoft Office Visio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24461 CVE-2022-24510.


Microsoft Office Visio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24509 CVE-2022-24510.


Microsoft Office Visio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24461 CVE-2022-24509.


Microsoft Office Visio Remote Code Execution Vulnerability.


Hands-on Vulnerability Learning Tool \AppGoat\ for Web Application V3.0.2 and earlier allows remote code execution via unspecified vectors a different vulnerability than CVE-2017-2181 and CVE-2017-2182.


Hands-on Vulnerability Learning Tool \AppGoat\ for Web Application V3.0.0 and earlier allows remote code execution via unspecified vectors.


NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service bound to the network and are susceptible to unauthenticated remote code execution.


Home Owners Collection Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the parameter \cover\ in SystemSettings.php.


A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files leading to arbitrary remote code execution.


Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization of file attachments uploaded with forms through upload.php.


NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1131 CVE-2019-1139 CVE-2019-1140 CVE-2019-1195 CVE-2019-1196 CVE-2019-1197.


A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1397 CVE-2019-1398.


A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts aka 'OpenType Font Parsing Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1419.


Remote Code Execution in PAN-OS 7.1.18 and earlier PAN-OS 8.0.11-h1 and earlier and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.


A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1350 CVE-2019-1352 CVE-2019-1354 CVE-2019-1387.


A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117 CVE-2019-1118 CVE-2019-1119 CVE-2019-1120 CVE-2019-1121 CVE-2019-1122 CVE-2019-1124 CVE-2019-1127 CVE-2019-1128.


A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server aka 'Remote Desktop Client Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1295 CVE-2019-1296.


A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory aka 'Microsoft Outlook Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts aka 'Microsoft Graphics Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1144 CVE-2019-1149 CVE-2019-1150 CVE-2019-1151 CVE-2019-1152.


A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts aka 'OpenType Font Parsing Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1456.


In bta_hl_sdp_query_results of bta_hl_main.cc there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-116222069.


A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user aka 'Microsoft Windows Media Foundation Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117 CVE-2019-1118 CVE-2019-1119 CVE-2019-1120 CVE-2019-1121 CVE-2019-1122 CVE-2019-1123 CVE-2019-1124 CVE-2019-1128.


A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory aka 'Comctl32 Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts aka 'Microsoft Graphics Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1144 CVE-2019-1145 CVE-2019-1149 CVE-2019-1150 CVE-2019-1152.


A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1034.


A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input aka 'MS XML Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1358.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240 CVE-2019-1241 CVE-2019-1242 CVE-2019-1243 CVE-2019-1246 CVE-2019-1248 CVE-2019-1249 CVE-2019-1250.


A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory aka 'GDI+ Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts aka 'Microsoft Graphics Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1144 CVE-2019-1145 CVE-2019-1150 CVE-2019-1151 CVE-2019-1152.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1146 CVE-2019-1147 CVE-2019-1156 CVE-2019-1157.


A security vulnerability exists in Zingbox Inspector version 1.293 and earlier that allows for remote code execution if the Inspector were sent a malicious command from the Zingbox cloud or if the Zingbox Inspector were tampered with to connect to an attacker's cloud endpoint.


A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall Cisco RV130W Wireless-N Multifunction VPN Router and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit this vulnerability by sending malicious HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of the affected device as a high-privilege user. RV110W Wireless-N VPN Firewall versions prior to 1.2.2.1 are affected. RV130W Wireless-N Multifunction VPN Router versions prior to 1.0.3.45 are affected. RV215W Wireless-N VPN Router versions prior to 1.3.1.1 are affected.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1331.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240 CVE-2019-1241 CVE-2019-1242 CVE-2019-1246 CVE-2019-1247 CVE-2019-1248 CVE-2019-1249 CVE-2019-1250.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1236.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1238.


A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user aka 'LNK Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389 CVE-2019-1397.


A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts aka 'Microsoft Graphics Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1144 CVE-2019-1145 CVE-2019-1149 CVE-2019-1151 CVE-2019-1152.


A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1035.


A remote code execution vulnerability in the PAN-OS SSH device management interface that can lead to unauthenticated remote users with network access to the SSH management interface gaining root access to PAN-OS. This issue affects PAN-OS 7.1 versions prior to 7.1.24-h1 7.1.25; 8.0 versions prior to 8.0.19-h1 8.0.20; 8.1 versions prior to 8.1.9-h4 8.1.10; 9.0 versions prior to 9.0.3-h3 9.0.4.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1359.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240 CVE-2019-1241 CVE-2019-1242 CVE-2019-1243 CVE-2019-1247 CVE-2019-1248 CVE-2019-1249 CVE-2019-1250.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240 CVE-2019-1241 CVE-2019-1243 CVE-2019-1246 CVE-2019-1247 CVE-2019-1248 CVE-2019-1249 CVE-2019-1250.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1239.


A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1257 CVE-2019-1295.


A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349 CVE-2019-1352 CVE-2019-1354 CVE-2019-1387.


A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1201.


A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117 CVE-2019-1118 CVE-2019-1119 CVE-2019-1120 CVE-2019-1121 CVE-2019-1123 CVE-2019-1124 CVE-2019-1127 CVE-2019-1128.


A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user aka '.NET Framework Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'VBScript Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1205.


A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts aka 'Microsoft Graphics Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1145 CVE-2019-1149 CVE-2019-1150 CVE-2019-1151 CVE-2019-1152.


A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory aka 'Microsoft PowerPoint Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349 CVE-2019-1350 CVE-2019-1352 CVE-2019-1387.


A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1118 CVE-2019-1119 CVE-2019-1120 CVE-2019-1121 CVE-2019-1122 CVE-2019-1123 CVE-2019-1124 CVE-2019-1127 CVE-2019-1128.


A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117 CVE-2019-1118 CVE-2019-1119 CVE-2019-1120 CVE-2019-1121 CVE-2019-1122 CVE-2019-1123 CVE-2019-1124 CVE-2019-1127.


A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell aka 'Microsoft Exchange Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts aka 'Microsoft Graphics Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1144 CVE-2019-1145 CVE-2019-1149 CVE-2019-1150 CVE-2019-1151.


A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117 CVE-2019-1118 CVE-2019-1120 CVE-2019-1121 CVE-2019-1122 CVE-2019-1123 CVE-2019-1124 CVE-2019-1127 CVE-2019-1128.


A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory aka 'Windows Imaging API Remote Code Execution Vulnerability'.


A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server aka 'Windows DHCP Server Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1146 CVE-2019-1147 CVE-2019-1155 CVE-2019-1157.


A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts aka 'Win32k Graphics Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user aka 'LNK Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1241 CVE-2019-1242 CVE-2019-1243 CVE-2019-1246 CVE-2019-1247 CVE-2019-1248 CVE-2019-1249 CVE-2019-1250.


A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349 CVE-2019-1350 CVE-2019-1354 CVE-2019-1387.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1208.


A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117 CVE-2019-1118 CVE-2019-1119 CVE-2019-1121 CVE-2019-1122 CVE-2019-1123 CVE-2019-1124 CVE-2019-1127 CVE-2019-1128.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1110.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1147 CVE-2019-1155 CVE-2019-1156 CVE-2019-1157.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240 CVE-2019-1241 CVE-2019-1242 CVE-2019-1243 CVE-2019-1246 CVE-2019-1247 CVE-2019-1249 CVE-2019-1250.


A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787 CVE-2019-0788 CVE-2019-1291.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240 CVE-2019-1241 CVE-2019-1242 CVE-2019-1243 CVE-2019-1246 CVE-2019-1247 CVE-2019-1248 CVE-2019-1249.


A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117 CVE-2019-1118 CVE-2019-1119 CVE-2019-1120 CVE-2019-1121 CVE-2019-1122 CVE-2019-1123 CVE-2019-1127 CVE-2019-1128.


In ih264d_fmt_conv_420sp_to_420p of ih264d_format_conv.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-118399205


A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1257 CVE-2019-1296.


A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117 CVE-2019-1118 CVE-2019-1119 CVE-2019-1120 CVE-2019-1122 CVE-2019-1123 CVE-2019-1124 CVE-2019-1127 CVE-2019-1128.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1327.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1111.


A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1146 CVE-2019-1155 CVE-2019-1156 CVE-2019-1157.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307 CVE-2019-1308 CVE-2019-1335.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240 CVE-2019-1241 CVE-2019-1242 CVE-2019-1243 CVE-2019-1246 CVE-2019-1247 CVE-2019-1248 CVE-2019-1250.


In ihevcd_fmt_conv_420sp_to_420p of ihevcd_fmt_conv.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-118453553


A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787 CVE-2019-0788 CVE-2019-1290.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307 CVE-2019-1308 CVE-2019-1366.


A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389 CVE-2019-1398.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'.


An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the context of NT AUTHORITY\\system thereby escaping the Sandbox.The security update addresses the vulnerability by ensuring that Azure App Service sanitizes user inputs. aka 'Azure App Service Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117 CVE-2019-1119 CVE-2019-1120 CVE-2019-1121 CVE-2019-1122 CVE-2019-1123 CVE-2019-1124 CVE-2019-1127 CVE-2019-1128.


A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input aka 'Windows OLE Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1146 CVE-2019-1147 CVE-2019-1155 CVE-2019-1156.


A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system aka 'Windows Hyper-V Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0989 CVE-2019-0991 CVE-2019-0992 CVE-2019-0993 CVE-2019-1003 CVE-2019-1024 CVE-2019-1051 CVE-2019-1052.


An issue was found in Git before v2.24.1 v2.23.1 v2.22.2 v2.21.1 v2.20.2 v2.19.3 v2.18.2 v2.17.3 v2.16.6 v2.15.4 and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names allowing very targeted attacks via remote code execution in recursive clones.


A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input aka 'MS XML Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory aka 'Microsoft Browser Memory Corruption Vulnerability'.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240 CVE-2019-1242 CVE-2019-1243 CVE-2019-1246 CVE-2019-1247 CVE-2019-1248 CVE-2019-1249 CVE-2019-1250.


A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update addresses the vulnerability by correcting how Office handles these files. aka 'Office Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0620 CVE-2019-0722.


A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory aka 'GDI+ Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Windows improperly handles objects in memory aka 'Windows Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user aka '.NET Framework and Visual Studio Remote Code Execution Vulnerability'.


A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager (fxpc) on all EX QFX and MX Series devices in a Virtual Chassis configuration. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. This issue only occurs when the crafted packet it destined to the device. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D47 on EX and QFX Virtual Chassis Platforms; 15.1 versions prior to 15.1R7-S3 all Virtual Chassis Platforms 15.1X53 versions prior to 15.1X53-D50 on EX and QFX Virtual Chassis Platforms.


A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790 CVE-2019-0791 CVE-2019-0793 CVE-2019-0795.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka 'Microsoft Edge Memory Corruption Vulnerability'.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0666 CVE-2019-0667 CVE-2019-0772.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka 'Internet Explorer Memory Corruption Vulnerability'.


A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project aka 'Visual Studio Code Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0721.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739 CVE-2019-0753 CVE-2019-0862.


A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input aka 'MS XML Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Microsoft Speech API (SAPI) improperly handles text-to-speech (TTS) input aka 'Microsoft Speech API Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790 CVE-2019-0791 CVE-2019-0792 CVE-2019-0795.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912 CVE-2019-0913 CVE-2019-0914 CVE-2019-0915 CVE-2019-0916 CVE-2019-0917 CVE-2019-0922 CVE-2019-0923 CVE-2019-0924 CVE-2019-0925 CVE-2019-0933 CVE-2019-0937.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846 CVE-2019-0851 CVE-2019-0877 CVE-2019-0879.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912 CVE-2019-0913 CVE-2019-0914 CVE-2019-0915 CVE-2019-0916 CVE-2019-0917 CVE-2019-0922 CVE-2019-0924 CVE-2019-0925 CVE-2019-0927 CVE-2019-0933 CVE-2019-0937.


A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0630.


A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard redirection aka 'Remote Desktop Services Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0788 CVE-2019-1290 CVE-2019-1291.


When

running

on

Windows

with

enableCmdLineArguments

enabled

the

CGI

Servlet

in

Apache

Tomcat

to

to

and

to

is

vulnerable

to

Remote

Code

Execution

due

to

a

bug

in

the

way

the

JRE

passes

command

line

arguments

to

Windows.

The

CGI

Servlet

is

disabled

by

default.

The

CGI

option

enableCmdLineArguments

is

disable

by

default

in

Tomcat

(and

will

be

disabled

by

default

in

all

versions

in

response

to

this

vulnerability).

For

a

detailed

explanation

of

the

JRE

behaviour

see

Markus

Wulftange's

blog

and

this

archived

MSDN

blog


A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790 CVE-2019-0792 CVE-2019-0793 CVE-2019-0795.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889 CVE-2019-0890 CVE-2019-0891 CVE-2019-0893 CVE-2019-0894 CVE-2019-0895 CVE-2019-0896 CVE-2019-0897 CVE-2019-0898 CVE-2019-0900 CVE-2019-0901 CVE-2019-0902.


A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.


A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790 CVE-2019-0791 CVE-2019-0792 CVE-2019-0793.


A remote code execution vulnerability exists when the IOleCvt interface renders ASP webpage content aka 'Windows IOleCvt Interface Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input aka 'Windows OLE Remote Code Execution Vulnerability'.


Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation when evaluated on raw user input in tag attributes may lead to remote code execution.


A remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry) versions 7.10 7.20 7.30 7.31 7.40 7.50. Because of this an attacker can exploit Services Registry potentially enabling them to take complete control of the product including viewing changing or deleting data by injecting code into the working memory which is subsequently executed by the application. It can also be used to cause a general fault in the product causing the product to terminate.


A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0620 CVE-2019-0709.


A remote code execution vulnerability exists in the way that ActiveX Data Objects (ADO) handle objects in memory aka 'ActiveX Data Objects (ADO) Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system aka \Windows Hyper-V Remote Code Execution Vulnerability.\ This affects Windows 10 Servers Windows 10 Windows Server 2019. This CVE ID is unique from CVE-2019-0551.


A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0604.


A remote code execution vulnerability exists in the way that the ActiveX Data objects (ADO) handles objects in memory aka 'Windows ActiveX Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0709 CVE-2019-0722.


A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.


A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process on QFX5000 series EX4300 EX4600 devices. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. Affected releases are Juniper Networks Junos OS on QFX 5000 series EX4300 EX4600 are: 14.1X53; 15.1X53 versions prior to 15.1X53-D235; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2 17.3R4; 17.4 versions prior to 17.4R2-S1 17.4R3; 18.1 versions prior to 18.1R3-S1 18.1R4; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R2.


A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0791 CVE-2019-0792 CVE-2019-0793 CVE-2019-0795.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0665 CVE-2019-0666 CVE-2019-0772.


A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787 CVE-2019-1290 CVE-2019-1291.


A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633.


A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory aka 'Comctl32 Remote Code Execution Vulnerability'.


In callGenIDChangeListeners and related functions of SkPixelRef.cpp there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-124232283.


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116469592


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-114749542


In ihevcd_ref_list of ihevcd_ref_list.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140692129


In floor0_inverse1 of floor0.c there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-119120561.


In ihevcd_ref_list of ihevcd_ref_list.c in Android 10 there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117496180


In rw_i93_sm_set_read_only of rw_i93.cc there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139188579


In JSCallTyper of typer.cc there is an out of bounds write due to an incorrect bounds check. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.1 Android-9 Android ID: A-117554758


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116617847


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117099943


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116473261


In ihevcd_parse_buffering_period_sei of ihevcd_parse_headers.c in Android 8.0 8.1 and 9 there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118386824


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117883804


In MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1. Android ID: A-130651570.


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117494734


In MakeMP>G4VideoCodecSpecificData of APacketSource.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-123701862


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115908308


In loop of DnsTlsSocket.cpp there is a possible heap memory corruption due to a use after free. This could lead to remote code execution in the netd server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-122856181.


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117832864


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118619159


In isPreferred of HidProfile.java in Android 7.1.1 7.1.2 8.0 8.1 and 9 there is a possible device type confusion due to a permissions bypass. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117216549


In GetMBheader of combined_decode.cpp there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-136175447


In parseMPEGCCData of NuPlayerCCDecoder.cpp there is a possible out of bounds write due to missing bounds checks. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-129068792.


In CompilationJob::FinalizeJob of compiler.cc there is a possible remote code execution due to type confusion. This could lead to escalation of privilege from a malicious proxy configuration with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-132073833.


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118143575


In addLinks of Linkify.java there is a possible phishing vector due to an unusual root cause. This could lead to remote code execution or misdirection of clicks with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-116321860


n ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140322595


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112610994


In FileInputStream::Read of file_input_stream.cc there is a possible memory corruption due to uninitialized data. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-116114182.


In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc there is a possible memory corruption due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139806216


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-114735603


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-114745929


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117495103


In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338


In libxaac there is a possible out of bounds write to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117100484


In PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-134578122


In ParseContentEncodingEntry of mkvparser.cc there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368.


In l2c_lcc_proc_pdu of l2c_fcr.cc there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120665616


In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116114402