Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0834 CVE-2018-0835 CVE-2018-0837 CVE-2018-0838 CVE-2018-0840 CVE-2018-0856 CVE-2018-0857 CVE-2018-0858 CVE-2018-0859 CVE-2018-0860 CVE-2018-0861 and CVE-2018-0866.


ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution due to how the Chakra scripting engine handles objects in memory aka \Chakra Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0872 CVE-2018-0873 CVE-2018-0874 CVE-2018-0931 CVE-2018-0933 CVE-2018-0934 CVE-2018-0936 and CVE-2018-0937.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0945 CVE-2018-0951 CVE-2018-0953 CVE-2018-0954 CVE-2018-0955 CVE-2018-1022 CVE-2018-8114 CVE-2018-8122 CVE-2018-8128 CVE-2018-8137 CVE-2018-8139.


ChakraCore allows remote code execution due to how the ChakraCore scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0834 CVE-2018-0835 CVE-2018-0836 CVE-2018-0837 CVE-2018-0838 CVE-2018-0840 CVE-2018-0856 CVE-2018-0857 CVE-2018-0859 CVE-2018-0860 CVE-2018-0861 and CVE-2018-0866.


Internet

Explorer

in

Microsoft

Windows

Windows

Server

Windows

and

Windows

RT

Windows

Server

and

and

Internet

Explorer

and

Microsoft

Edge

in

Windows

Gold

and

Windows

Server

allows

remote

code

execution

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Equation Editor in Microsoft Office 2003 Microsoft Office 2007 Microsoft Office 2010 Microsoft Office 2013 and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory aka \Microsoft Word Memory Corruption Vulnerability\.


Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0834 CVE-2018-0835 CVE-2018-0836 CVE-2018-0837 CVE-2018-0838 CVE-2018-0840 CVE-2018-0856 CVE-2018-0857 CVE-2018-0858 CVE-2018-0860 CVE-2018-0861 and CVE-2018-0866.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0991 CVE-2018-0997 CVE-2018-1018 CVE-2018-1020.


ChakraCore allows remote code execution due to how the ChakraCore scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0876 CVE-2018-0889 CVE-2018-0893 and CVE-2018-0935.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8130 CVE-2018-8133 CVE-2018-8145 CVE-2018-8177.


ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the Chakra scripting engine handles objects in memory aka \Chakra Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0872 CVE-2018-0873 CVE-2018-0930 CVE-2018-0931 CVE-2018-0933 CVE-2018-0934 CVE-2018-0936 and CVE-2018-0937.


Equation Editor in Microsoft Office 2007 Microsoft Office 2010 Microsoft Office 2013 and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory aka \Microsoft Office Memory Corruption Vulnerability\. This CVE is unique from CVE-2018-0797 and CVE-2018-0812.


Microsoft Edge in Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0876 CVE-2018-0893 CVE-2018-0925 and CVE-2018-0935.


Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0834 CVE-2018-0835 CVE-2018-0836 CVE-2018-0837 CVE-2018-0838 CVE-2018-0840 CVE-2018-0856 CVE-2018-0857 CVE-2018-0858 CVE-2018-0859 CVE-2018-0861 and CVE-2018-0866.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0876 CVE-2018-0889 CVE-2018-0893 and CVE-2018-0925.


Microsoft Office 2007 SP2 Microsoft Office Word Viewer Microsoft Office 2010 SP2 Microsoft Office 2013 SP1 and RT SP1 Microsoft Office 2016 and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability due to how Office handles objects in memory aka \Microsoft Office Memory Corruption Vulnerability\. This CVE is unique from CVE-2018-0852.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0870 CVE-2018-0991 CVE-2018-1018 CVE-2018-1020.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0945 CVE-2018-0946 CVE-2018-0951 CVE-2018-0954 CVE-2018-0955 CVE-2018-1022 CVE-2018-8114 CVE-2018-8122 CVE-2018-8128 CVE-2018-8137 CVE-2018-8139.


Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0834 CVE-2018-0835 CVE-2018-0836 CVE-2018-0838 CVE-2018-0840 CVE-2018-0856 CVE-2018-0857 CVE-2018-0858 CVE-2018-0859 CVE-2018-0860 CVE-2018-0861 and CVE-2018-0866.


ChakraCore and Microsoft Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows remote code execution due to how the Chakra scripting engine handles objects in memory aka \Chakra Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0872 CVE-2018-0873 CVE-2018-0874 CVE-2018-0930 CVE-2018-0933 CVE-2018-0934 CVE-2018-0936 and CVE-2018-0937.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0979 CVE-2018-0980 CVE-2018-0990 CVE-2018-0994 CVE-2018-0995 CVE-2018-1019.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-0988 CVE-2018-0996.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge aka \Chakra Scripting Engine Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-0979 CVE-2018-0980 CVE-2018-0990 CVE-2018-0993 CVE-2018-0994 CVE-2018-0995.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10. This CVE ID is unique from CVE-2018-0870 CVE-2018-0991 CVE-2018-0997 CVE-2018-1018.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0870 CVE-2018-0991 CVE-2018-0997 CVE-2018-1020.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability.\ This affects ChakraCore Internet Explorer 11 Microsoft Edge. This CVE ID is unique from CVE-2018-0945 CVE-2018-0946 CVE-2018-0951 CVE-2018-0953 CVE-2018-0954 CVE-2018-0955 CVE-2018-8114 CVE-2018-8122 CVE-2018-8128 CVE-2018-8137 CVE-2018-8139.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673 CVE-2020-0674 CVE-2020-0710 CVE-2020-0712 CVE-2020-0713 CVE-2020-0767.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768 CVE-2020-0823 CVE-2020-0825 CVE-2020-0826 CVE-2020-0827 CVE-2020-0829 CVE-2020-0830 CVE-2020-0831 CVE-2020-0832 CVE-2020-0833 CVE-2020-0848.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768 CVE-2020-0823 CVE-2020-0825 CVE-2020-0826 CVE-2020-0827 CVE-2020-0828 CVE-2020-0829 CVE-2020-0831 CVE-2020-0832 CVE-2020-0833 CVE-2020-0848.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673 CVE-2020-0674 CVE-2020-0710 CVE-2020-0711 CVE-2020-0712 CVE-2020-0713.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768 CVE-2020-0823 CVE-2020-0826 CVE-2020-0827 CVE-2020-0828 CVE-2020-0829 CVE-2020-0830 CVE-2020-0831 CVE-2020-0832 CVE-2020-0833 CVE-2020-0848.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673 CVE-2020-0710 CVE-2020-0711 CVE-2020-0712 CVE-2020-0713 CVE-2020-0767.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673 CVE-2020-0674 CVE-2020-0711 CVE-2020-0712 CVE-2020-0713 CVE-2020-0767.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768 CVE-2020-0823 CVE-2020-0825 CVE-2020-0826 CVE-2020-0827 CVE-2020-0828 CVE-2020-0830 CVE-2020-0831 CVE-2020-0832 CVE-2020-0833 CVE-2020-0848.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768 CVE-2020-0823 CVE-2020-0825 CVE-2020-0826 CVE-2020-0827 CVE-2020-0828 CVE-2020-0829 CVE-2020-0830 CVE-2020-0832 CVE-2020-0833 CVE-2020-0848.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768 CVE-2020-0825 CVE-2020-0826 CVE-2020-0827 CVE-2020-0828 CVE-2020-0829 CVE-2020-0830 CVE-2020-0831 CVE-2020-0832 CVE-2020-0833 CVE-2020-0848.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768 CVE-2020-0823 CVE-2020-0825 CVE-2020-0826 CVE-2020-0828 CVE-2020-0829 CVE-2020-0830 CVE-2020-0831 CVE-2020-0832 CVE-2020-0833 CVE-2020-0848.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673 CVE-2020-0674 CVE-2020-0710 CVE-2020-0711 CVE-2020-0713 CVE-2020-0767.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0823 CVE-2020-0825 CVE-2020-0826 CVE-2020-0827 CVE-2020-0828 CVE-2020-0829 CVE-2020-0830 CVE-2020-0831 CVE-2020-0832 CVE-2020-0833 CVE-2020-0848.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768 CVE-2020-0823 CVE-2020-0825 CVE-2020-0826 CVE-2020-0827 CVE-2020-0828 CVE-2020-0829 CVE-2020-0830 CVE-2020-0831 CVE-2020-0832 CVE-2020-0848.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673 CVE-2020-0674 CVE-2020-0710 CVE-2020-0711 CVE-2020-0712 CVE-2020-0767.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768 CVE-2020-0823 CVE-2020-0825 CVE-2020-0826 CVE-2020-0827 CVE-2020-0828 CVE-2020-0829 CVE-2020-0830 CVE-2020-0831 CVE-2020-0833 CVE-2020-0848.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768 CVE-2020-0823 CVE-2020-0825 CVE-2020-0826 CVE-2020-0827 CVE-2020-0828 CVE-2020-0829 CVE-2020-0830 CVE-2020-0831 CVE-2020-0832 CVE-2020-0833.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0674 CVE-2020-0710 CVE-2020-0711 CVE-2020-0712 CVE-2020-0713 CVE-2020-0767.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768 CVE-2020-0823 CVE-2020-0825 CVE-2020-0827 CVE-2020-0828 CVE-2020-0829 CVE-2020-0830 CVE-2020-0831 CVE-2020-0832 CVE-2020-0833 CVE-2020-0848.


An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A specially crafted malformed file can trigger an out of bounds memory modification which can result in remote code execution. To trigger this vulnerability victim needs to access an attacker-provided malformed file.


A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user aka \Scripting Engine Memory Corruption Vulnerability.\

remote code execution
memory corruption
arbitrary code execution


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user a.k.a. \Internet Explorer Memory Corruption Vulnerability.\


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user aka \Microsoft Edge Memory Corruption Vulnerability.\


A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user aka \Scripting Engine Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0201.


A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user aka \Scripting Engine Memory Corruption Vulnerability.\


A remote code execution vulnerability exists in Internet Explorer in the way that the JScript and VBScript engines render when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user aka \Scripting Engine Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0093.


The JScript scripting engine 5.1 5.6 5.7 and 5.8 in JScript.dll in Microsoft Windows as used in Internet Explorer does not properly load decoded scripts into memory before execution which allows remote attackers to execute arbitrary code via a crafted web site that triggers memory corruption aka \JScript Remote Code Execution Vulnerability.\


Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirmed.


Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows Server 2012 Gold and R2 allow remote authenticated users to execute arbitrary code via a crafted NetLogon request aka \Windows Netlogon Memory Corruption Remote Code Execution Vulnerability.\


Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveUnreliableSegment() leading to a Heap-Based Buffer Underflow and a free() of memory not from the heap resulting in a memory corruption and probably even a remote code execution.

remote code execution
memory corruption
buffer underflow


Fuji Electric V-Server 4.0.3.0 and prior An out-of-bounds read vulnerability has been identified which may allow remote code execution.


An exploitable out-of-bounds read vulnerability exists in the LabelSst record parser of Aspose Aspose.Cells 19.1.0 library. A specially crafted XLS file can cause an out-of-bounds read resulting in remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.


An exploitable out-of-bounds read vulnerability exists in the Number record parser of Aspose Aspose.Cells 19.1.0 library. A specially crafted XLS file can cause an out-of-bounds read resulting in remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.


An issue was discovered in PHOENIX CONTACT PC Worx through 1.86 PC Worx Express through 1.86 and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-of-bounds Read and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project to be able to manipulate data inside. After manipulation the attacker needs to exchange the original files with the manipulated ones on the application programming workstation.


A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied input data when a malicious CGF file is imported to IGSS Definition.


A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing length checks when a malicious WSP file is being parsed by IGSS Definition.


A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of user-supplied data validation when a malicious CGF file is imported to IGSS Definition.


An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send malicious smart contract to trigger this vulnerability.


CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to crash due to lacking user input validation for processing project files. Which may allow an attacker to gain remote code execution with administrator privileges if exploited.


OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTPD it is possible to attack a server because the server code launches the client code during bounce handling.


A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.


mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation.


LAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read vulnerabilities which may allow remote code execution.


In several functions of the V8 library there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9 Android-11 Android-8.1Android ID: A-162604069


In Veraport G3 ALL on MacOS a race condition when calling the Veraport API allow remote attacker to cause arbitrary file download and execution. This results in remote code execution.


A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that will be disallowed. The application allows an authenticated user to upload a file when he/she creates a new ticket via front/fileupload.php. This feature is protected using different types of security features like the check on the file's extension. However the application uploads and creates a file though this file is not allowed and then deletes the file in the uploadFiles method in inc/glpiuploaderhandler.class.php.


In RW_SetActivatedTagType of rw_main.cc there is possible memory corruption due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-192472262

remote code execution
race condition
memory corruption


A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2. An authenticated user with privileges to manipulate layouts can insert a malicious payload into the layout.


A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.


A Remote Code Execution (RCE) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to execute system commands as root remotely via a simple HTTP request.


A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10 Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can craft a malicious CSRF payload that can result in arbitrary command execution.


A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3. An authenticated admin user with privileges to access product attributes can leverage layout updates to trigger remote code execution.


A remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x. An authenticated admin user can modify configuration parameters via crafted support configuration. The modification can lead to remote code execution.


A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10 Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to manipulate CMS section of the website can trigger remote code execution via custom layout update.


A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can insert a malicious payload through PageBuilder template methods.


A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10 Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to manipulate layouts and images can insert a malicious payload into the page layout.


GDI+ Remote Code Execution Vulnerability


A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments which lets a malicoius user upload a web shell script.


A Remote Code Execution (RCE) vulnerabilty exists in LimeSurvey 5.2.4 via the upload and install plugins function which could let a remote malicious user upload an arbitrary PHP code file.


A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows an unauthenticated remote attacker to upload a maliciously crafted PHP via photo upload.


A Remote Code Execution (RCE) vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file through elfinder in connetor.php.


A Remote Code Execution (RCE) vulnerability exists in ThinkPHP 3.x.x via value_filename in index.php which could let a malicious user obtain server control privileges.


DirectWrite Remote Code Execution Vulnerability


Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to (1) Dashboard's Avatar image (2) Posts Folder image (3) Pages Folder image and (4) Gallery Folder image.


A Remote Code Execution (RCE) vulnerability exists in DataRobot through 2021-10-28 because it allows submission of a Docker environment or Java driver.


A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 ( and previous versions via the bot_avatar parameter in SystemSettings.php.


A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process.


A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the checkNet function in /cgi-bin/luci/api/auth.


A Remote Code Execution (RCE) vulnerability exists in The-Secretary 2.5 via install.php.


A Remote Code Execution (RCE) vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request.


A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the runPackDiagnose function in /cgi-bin/luci/api/diagnose.


A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the setSessionTime function in /cgi-bin/luci/api/common..


A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the switchFastDhcp function in /cgi-bin/luci/api/diagnose.


A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the updateVersion function in /cgi-bin/luci/api/wireless.


A Remote Code Execution (RCE) vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.php via the doInsert function which validates images with getImageSizei. .


A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library. Remote attackers can induce exploit malicious code using this function.


A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517 allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012 until Collection 2021.


A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used the user-supplied SPOOLDIR value (which might contain PHP code) is injected into config/configuration.php.


A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins.


A

Remote

Code

Execution

(RCE)

vulnerability

exists

in

Pixelimity

via

admin/admin-ajax.php?action=install_theme.


A Remote Code Execution (RCE) vulnerability exists in waimairen 9.1 via wx.php


A remote code execution vulnerability in HPE intelligent Management Center (iMC) PLAT iMC Plat 7.3 E0504P2 and earlier was found.


A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.


A remote code execution vulnerability in HPE intelligent Management Center (iMC) PLAT version Plat 7.3 E0504P4 and earlier was found.


A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.


A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor e.g. before 5.3.8p2 5.4.x before 5.4.5p5 5.5.x before 5.5.4p3 5.6.x before 5.6.3p1 and 2017.x before 2017.1.0p4.


A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0 7.1.1 7.1.2 8.0 8.1. ID: A-68160703.


A

remote

code

execution

vulnerability

in

the

Android

media

framework

Product:

Android.

Versions:

Android

ID


A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 7.0 7.1.1 7.1.2 8.0. Android ID A-37160362.


A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-37273547.


A remote code execution vulnerability in the Android libraries (libgdx). Product: Android. Versions: 7.1.1 7.1.2 8.0. Android ID: A-62218744.


A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-62214264.


A

remote

code

execution

vulnerability

in

the

Android

media

framework

Product:

Android.

Versions:

Android

ID:


A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1 7.1.2. Android ID: A-35639138.


A remote code execution vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0 7.1.1 7.1.2 8.0. Android ID A-65290323.


A

remote

code

execution

vulnerability

in

the

Android

media

framework

(libjhead).

Product:

Android.

Versions:

Android

ID:


A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-36006815.


A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0 7.1.1 7.1.2. Android ID: A-36576151.


A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-64964675.


A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34231163.


A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-37561455.


A

remote

code

execution

vulnerability

in

the

Android

media

framework.

Product:

Android.

Versions:

Android

ID:


A

remote

code

execution

vulnerability

in

the

Android

media

framework

decoder).

Product:

Android.

Versions:

Android

ID:


A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34779227.


A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-37430213.


A

remote

code

execution

vulnerability

in

the

Android

system

(bluetooth).

Product:

Android.

Versions:

Android

ID:


A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-37008096.


A remote code execution vulnerability in the Android libraries. Product: Android. Versions: 4.4.4. Android ID: A-34514762.


A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-36998372.


A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-37273673.


A

remote

code

execution

vulnerability

in

the

Android

media

framework

(libhevc).

Product:

Android.

Versions:

Android

ID:


A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1 7.1.2. Android ID: A-36385715.


A

remote

code

execution

vulnerability

in

the

Android

media

framework

(libstagefright).

Product:

Android.

Versions:

Android

ID:


A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-36996978.


A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-66372937.


A

remote

code

execution

vulnerability

in

the

Android

media

framework

Product:

Android.

Versions:

Android

ID:


A remote code execution vulnerability in the Broadcom networking driver. Product: Android. Versions: Android kernel. Android ID: A-37168488. References: B-RB#116402.


A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory aka \Microsoft Edge Remote Code Execution Vulnerability.\


A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-36035074.


A

remote

code

execution

vulnerability

in

the

Android

libraries

(sfntly).

Product:

Android.

Versions:

Android

ID:


A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-36492741.


A

remote

code

execution

vulnerability

in

the

Android

media

framework

decoder).

Product:

Android.

Versions:

Android

ID:


A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0 7.1.1 7.1.2. Android ID: A-36588422.


A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-33974623.


A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0. Android ID: A-38448381.


A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0. Android ID: A-62872863.


A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-37237396.


A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1 7.1.2. Android ID: A-36621442.


A

remote

code

execution

vulnerability

in

the

Android

system

(libutils).

Product:

Android.

Versions:

Android

ID:


A

remote

code

execution

vulnerability

in

the

Android

media

framework

(libvorbis).

Product:

Android.

Versions:

Android

ID:


A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0. Android ID: A-62896384.


A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 8.0. Android ID A-65186291.


A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-36715268.


A

remote

code

execution

vulnerability

in

the

Android

media

framework.

Product:

Android.

Versions:

Android

ID:


A

remote

code

execution

vulnerability

in

the

Android

system

(bluetooth).

Product:

Android.

Versions:

Android

ID:


A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-37968755.


A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0 7.1.1 7.1.2. Android ID: A-36591008.


A

remote

code

execution

vulnerability

in

the

Android

media

framework

(avc

decoder).

Product:

Android.

Versions:

Android

ID:


A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-37203196.


A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10 10.11 10.20 10.21 10.22 10.30 10.31 10.32 and 10.33 could be remotely exploited to allow code execution.


A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.


A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3.x) all versions prior to 4.4.7 RP702 (for OCMP 4.x).


A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.


A remote code execution vulnerability in HPE Network Automation version 9.1x 9.2x 10.0x 10.1x and 10.2x were found.


A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.


A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in memory aka \Microsoft Office Publisher Remote Code Execution\.


A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506 was found.


A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found.


A remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506P03 was found.


A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 and earlier was found.


A remote code execution vulnerability exists in Microsoft Excel for Mac 2011 when it fails to properly handle objects in memory aka \Microsoft Office Remote Code Execution\.


A Remote Code Execution vulnerability in HPE Aruba AirWave Glass version v1.0.0 and 1.0.1 was found.


A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory aka \Microsoft PowerPoint Remote Code Execution Vulnerability\.


A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content aka \Skype for Business Remote Code Execution Vulnerability\.


A

Remote

Code

Execution

vulnerability

in

HPE

UCMDB

version

was

found.


A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found.


Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.


A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory aka \Microsoft PowerPoint Remote Code Execution Vulnerability.\ This affects Microsoft PowerPoint.


A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package aka \Microsoft SharePoint Remote Code Execution Vulnerability.\ This affects Microsoft SharePoint.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka \Microsoft Excel Remote Code Execution Vulnerability.\ This affects Microsoft Office.


A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content aka \Microsoft PowerPoint Remote Code Execution Vulnerability.\ This affects Microsoft Office.


A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory aka \GDI+ Remote Code Execution Vulnerability.\ This affects Windows Server 2008 Windows 7 Windows Server 2008 R2.


A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file aka \.NET Framework Remote Code Execution Vulnerability.\ This affects .NET Framework 4.7.2 Microsoft .NET Framework 4.7.2.


A remote code execution vulnerability exists in Microsoft InfoPath when the software fails to properly handle objects in memory aka \Microsoft InfoPath Remote Code Execution Vulnerability.\ This affects Microsoft Infopath.


A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages aka \Microsoft Exchange Remote Code Execution Vulnerability.\ This affects Microsoft Exchange Server.


A remote code execution vulnerability exists when Windows Shell improperly handles URIs aka \Windows Shell Remote Code Execution Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka \Windows VBScript Engine Remote Code Execution Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10.


A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths aka \Windows Shell Remote Code Execution Vulnerability.\ This affects Windows 10 Servers Windows 10.


A remote code execution vulnerability exists in the Yammer desktop application due to the loading of arbitrary content aka \Yammer Desktop Application Remote Code Execution Vulnerability.\ This affects Yammer Desktop App.


A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory aka \Microsoft Access Remote Code Execution Vulnerability.\ This affects Microsoft Access Microsoft Office.


A remote code execution vulnerability exists in PowerShell Editor Services aka \PowerShell Editor Services Remote Code Execution Vulnerability.\ This affects PowerShell Editor PowerShell Extension.


A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading executable libraries aka \Internet Explorer Remote Code Execution Vulnerability.\ This affects Internet Explorer 11 Internet Explorer 10.


A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file aka \Word PDF Remote Code Execution Vulnerability.\ This affects Microsoft Word Microsoft Office.


A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data aka \Hyper-V vSMB Remote Code Execution Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers.


A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors.


A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.


A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT 7.3 E0506P07. The vulnerability was resolved in iMC PLAT 7.3 E0605P04 or subsequent version.


A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than version IMC WSM 7.3 E0506P02.


A remote code execution was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than version v2.60 and HPE Integrated Lights-Out 5 (iLO 5) earlier than version v1.30.


A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.


A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04.


A remote code execution (RCE) in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file.


A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3 allows remote attackers to upload a custom plugin which can contain arbitrary code and obtain a webshell via the theme/plugin installer.


A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server


Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2 11.1.2b and 10.2.8


A remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows attackers to execute arbitrary PHP code via the \ml\ and \title\ parameters.


A remote code execution (RCE) vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modification of a PHP file.


A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress which allows unauthenticated users to upload any type of file including PHP files via the wmuUploadFiles AJAX action.


A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5 v9.607 MR7 and v9.511 MR11


Addressed remote code execution vulnerability in reg_device.php due to insufficient validation of user input.in Western Digital My Cloud Devices prior to 5.4.1140.


Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114


A remote code execution vulnerability in SEOPanel 4.6.0 has been fixed for 4.7.0. This vulnerability allowed for remote code execution through an authenticated file upload via the Settings Panel>Import website function.


A remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can cause local file inclusion. An attacker can send an HTTP request to trigger this vulnerability.


A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a Service.AppService.exec call that mishandles the URL repository username and password.


A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file aka 'Visual Studio JSON Remote Code Execution Vulnerability'.


A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code.


A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16951.


A remote code execution vulnerability exists when Windows Network Address Translation (NAT) fails to properly handle UDP traffic aka 'Windows NAT Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets aka 'Windows TCP/IP Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook file aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory aka 'GDI+ Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory aka 'Microsoft Outlook Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system aka 'Windows Hyper-V Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1167.


A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11 aka 'Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16952.


A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory aka 'Microsoft Office Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in helpUS(remote administration tool) due to improper validation of parameter of ShellExecutionExA function used for login.


A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0906.


A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory aka 'Microsoft Word Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0651 CVE-2020-0653.


A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory aka 'Microsoft COM for Windows Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0881.


A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory aka 'Active Directory Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0761.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0650 CVE-2020-0653.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'VBScript Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0979.


A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory aka 'GDI+ Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0760.


A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0734.


A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0883.


A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project aka 'Visual Studio Code Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.


A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0650 CVE-2020-0651.


A remote code execution vulnerability exists in the way that Windows handles objects in memory aka 'Windows Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system aka 'Windows Hyper-V Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory aka 'Windows Text Service Module Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts aka 'Microsoft Graphics Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0967.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.


An remote code execution vulnerability exists in Microsoft Dynamics Business Central aka 'Dynamics Business Central Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly aka '.NET Framework Remote Code Execution Injection Vulnerability'.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0966.


A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server aka 'Remote Desktop Client Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory aka 'Active Directory Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0718.


A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE.


A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1425.


A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests aka 'Windows DNS Server Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1574 CVE-2020-1585.


A remote code execution vulnerability exists when Microsoft .NET Framework processes input aka '.NET Framework Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory aka 'GDI+ Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory aka 'Microsoft Color Management Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446 CVE-2020-1448.


A remote code execution vulnerability exists in the way that Windows handles objects in memory aka 'Windows Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input aka 'PerformancePoint Services Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts aka 'Microsoft Graphics Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1560 CVE-2020-1574.


A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1560 CVE-2020-1585.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1058 CVE-2020-1060 CVE-2020-1093.


A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447 CVE-2020-1448.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.


A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory aka 'DirectWrite Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035 CVE-2020-1058 CVE-2020-1060.


A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server aka 'Remote Desktop Client Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1562.


A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory aka 'Microsoft Outlook Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1338.


A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects aka 'Windows Media Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory aka 'Microsoft Access Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages aka 'Microsoft SharePoint Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1319.


A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory aka 'GDI+ Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory aka 'Microsoft Office Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input aka 'Windows OLE Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035 CVE-2020-1058 CVE-2020-1093.


A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) files aka 'Microsoft Office Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory aka 'Microsoft Office Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'VBScript Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446 CVE-2020-1447.


A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects aka 'Windows Media Audio Decoder Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1508.


A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1129.


A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1561.


A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests aka 'Windows SMB Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11 aka 'Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035 CVE-2020-1060 CVE-2020-1093.


A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Dynamics Business Central aka 'Dynamics Business Central Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file aka 'Microsoft Project Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1218.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.


A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects aka 'Windows Media Audio Decoder Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1593.


A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16923.


A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project aka 'Visual Studio Code ESLint Extention Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory aka 'Microsoft Script Runtime Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory aka 'Microsoft Excel Remote Code Execution Vulnerability'.


A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code execution upon uploading a carefully crafted JPEG file as part of the profile avatar.


A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center was found.


A

Remote

Code

Execution

vulnerability

in

HPE

Network

Automation

using

RPCServlet

and

Java

Deserialization

version

was

found.


A remote code execution vulnerability in HPE Operations Orchestration Community edition and Enterprise edition prior to v10.70 was found.


A remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android ID: A-34389927. References: QC-CR#1091408.


A remote code execution security vulnerability has been identified in all versions of the HP ArcSight WINC Connector prior to v7.3.0.


A remote code execution vulnerability was identified in HP Business Service Management (BSM) using Apache Commons Collection Java Deserialization versions v9.20-v9.26


A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2. An authenticated user with admin privileges to layouts can execute arbitrary code through a crafted XML layout update.

remote code execution
arbitrary code execution


Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious python pickle file which will execute arbitrary code on the server.


A remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file.


Authenticated

remote

code

execution

(RCE)

in

Composr-CMS

and

earlier

allows

remote

attackers

to

execute

arbitrary

code

via

uploading

a

PHP

shell

through

/adminzone/index.php?page=admin-commandr.


A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file.


A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file.


A remote code execution (RCE) vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields.


A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute arbitrary code via a crafted string written to the file application/config/config.php.


A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbitrary code via uploading a crafted PHP file.


A remote code execution (RCE) vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function.


A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows attackers to execute arbitrary code via a crafted payload.


A remote code execution (RCE) vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package.


A

remote

code

execution

(RCE)

vulnerability

in

/root/run/adm.php?admin-ediy&part=exdiy

of

imcat

allows

authenticated

attackers

to

execute

arbitrary

code.


A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input.An attacker could execute arbitrary code in the context of the current user aka 'MSHTML Engine Remote Code Execution Vulnerability'.


A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS_RM3_3.7.0 (2421) allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request.

remote code execution
arbitrary command execution


A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitrary commands via a crafted PHP file.


A

remote

code

execution

(RCE)

vulnerability

in

the

component

/admin/index.php?id=themes&action=edit_template&filename=blog

of

Monstra

allows

attackers

to

execute

arbitrary

commands

via

a

crafted

PHP

file.


A remote code execution (RCE) vulnerability in the \\Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands.


A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the doSwitchApi function in /cgi-bin/luci/api/switch.


Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 (issue 3 of 3).

remote code execution
escalated privilege


Addressed remote code execution vulnerability in cgi_api.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114.


An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory aka \Microsoft Edge PDF Remote Code Execution Vulnerability.\ This affects Microsoft Edge.

remote code execution
improper memory object handle


A remote code execution vulnerability exists when Windows improperly handles objects in memory aka \Windows Remote Code Execution Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8210.


A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory aka \Windows PDF Remote Code Execution Vulnerability.\ This affects Windows 10 Servers Windows 10.


A remote code execution vulnerability exists when HTTP Protocol Stack (Http.sys) improperly handles objects in memory aka \HTTP Protocol Stack Remote Code Execution Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers.


A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory aka 'Windows Camera Codec Pack Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16968.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory aka 'Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16856.


A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory aka 'Windows Camera Codec Pack Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16967.


A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory aka 'Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16874.


A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory aka 'Windows Camera Codec Pack Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051 CVE-2020-1174 CVE-2020-1176.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1473 CVE-2020-1557 CVE-2020-1558.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1401 CVE-2020-1407.


A remote code execution vulnerability exists when Windows improperly handles objects in memory aka 'Windows Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory aka 'Microsoft Edge PDF Remote Code Execution Vulnerability'.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1473 CVE-2020-1557 CVE-2020-1564.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1557 CVE-2020-1558 CVE-2020-1564.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1236.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051 CVE-2020-1175 CVE-2020-1176.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1400 CVE-2020-1407.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1074.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1174 CVE-2020-1175 CVE-2020-1176.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1039.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1400 CVE-2020-1401.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051 CVE-2020-1174 CVE-2020-1175.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1208.


A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1473 CVE-2020-1558 CVE-2020-1564.


A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884 CVE-2019-0918.

remote code execution
memory corruption vulnerability


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0222.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0226.


A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka \Scripting Engine Memory Corruption Vulnerability\. This vulnerability is unique from CVE-2017-0252.


A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka \Scripting Engine Memory Corruption Vulnerability\. This vulnerability is unique from CVE-2017-0223.


A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\.


A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages aka \Microsoft Office Memory Corruption Vulnerability\.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This affects Internet Explorer 11 Internet Explorer 10.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8473.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8377.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8111 CVE-2018-8236.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0978.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-8447.


A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory aka \Microsoft Browser Memory Corruption Vulnerability.\ This affects Internet Explorer 11 Microsoft Edge Internet Explorer 10.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This affects ChakraCore.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8110 CVE-2018-8111.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8110 CVE-2018-8236.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-8491.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-8460.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8387.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This affects Internet Explorer 11.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability.\ This affects Internet Explorer 9 Internet Explorer 11 Internet Explorer 10.


A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory aka \Microsoft Browser Memory Corruption Vulnerability.\ This affects ChakraCore Internet Explorer 11 Microsoft Edge.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore. This CVE ID is unique from CVE-2018-8509.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability.\ This affects ChakraCore. This CVE ID is unique from CVE-2018-8267.


A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory aka \Microsoft Exchange Memory Corruption Vulnerability.\ This affects Microsoft Exchange Server.


A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory aka \Microsoft Browser Memory Corruption Vulnerability.\ This affects Microsoft Edge ChakraCore.


A remote code execution vulnerability exists in the way that the IEToEdge Browser Helper Object (BHO) plugin on Internet Explorer handles objects in memory aka 'Internet Explorer Browser Helper Object (BHO) Memory Corruption Vulnerability'.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka 'Internet Explorer Memory Corruption Vulnerability'.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0812.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.


A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory aka 'Microsoft Exchange Memory Corruption Vulnerability'.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0968.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0811.


A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory aka 'Microsoft Edge Memory Corruption Vulnerability'.


A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory aka 'Microsoft Browser Memory Corruption Vulnerability'.


A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory aka 'Microsoft Office Memory Corruption Vulnerability'.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1057 CVE-2020-1172.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based) aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1380 CVE-2020-1570.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1555 CVE-2020-1570.


A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1380 CVE-2020-1555.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1062.


A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in memory aka 'Microsoft Outlook Memory Corruption Vulnerability'.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1172 CVE-2020-1180.


A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1092.


A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.


A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1057 CVE-2020-1180.


Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the vlanid parameter in the SetIPTVCfg function.


Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the SetIPTVCfg function.


An

issue

was

discovered

on

Wifi-soft

UniBox

controller

devices.

The

tools/controller/diagnostic_tools_controller

Diagnostic

Tools

Controller

is

vulnerable

to

Remote

Command

Execution

allowing

an

attacker

to

execute

arbitrary

system

commands

on

the

server

with

root

user

privileges.

Authentication

for

accessing

this

component

can

be

bypassed

by

using

Hard

coded

credentials.


A remote command execution (RCE) vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $_POSTr_name is directly passed into the $mysqlstr and is executed by exec.


A remote command execution vulnerability in shopxo 1.9.3 allows an attacker to upload malicious code generated by phar where the suffix is JPG which is uploaded after modifying the phar suffix.


A remote command execution vulnerability exists in add_server_service of PPTP_SERVER in Mercury Router MER1200 v1.0.1 and Mercury Router MER1200G v1.0.1.


A vulnerability in Cisco IOS XE Software could allow an authenticated remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attacker who has valid administrator access to an affected device could exploit this vulnerability by supplying a username with a malicious payload in the web UI and subsequently making a request to a specific endpoint in the web UI. A successful exploit could allow the attacker to run arbitrary commands as the root user allowing complete compromise of the system.

remote command execution
improper user input sanitization


A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input.

remote command execution
arbitrary command execution


A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs.


A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5 6.8.9 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.


A remote cross-site scripting vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to resolve this vulnerability in HPE OneView Global Dashboard.


A remote cross-site scripting (XSS) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.13.0. Aruba has released upgrades for the Aruba AirWave Management Platform that address this security vulnerability.


A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.


A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.


A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10 10.11 10.20 10.21 10.22 10.30 10.31 10.32 and 10.33 could be remotely exploited to allow cross-site scripting.


A remote cross-site scripting (XSS) vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT version v7.3 (E0506). The vulnerability is fixed in Intelligent Management Center PLAT 7.3 E0605P04 or subsequent version.


PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files via a URL in the pathtoashnews parameter to (1) ashnews.php and (2) ashheadlines.php.


PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL (%00) in the index parameter.


PHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote attackers to execute arbitrary PHP code via a URL in the globrootDir parameter.


PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter.


PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter.


PHP remote file include vulnerability in inc/backend_settings.php in Loudblog 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the $GLOBALSpath parameter.


PHP remote file include vulnerability in index.php in 99Articles.com (aka ArticlesOne.com) Free articles directory allows remote attackers to include and execute arbitrary PHP code via a URL in the page parameter.


PHP remote file include vulnerability in PageController.php in KnowledgebasePublisher 1.2 allows remote attackers to include and execute arbitrary PHP code via a URL in the dir parameter.


PHP remote file include vulnerability in index.php in SMartBlog (aka SMBlog) 1.2 allows remote attackers to include and execute arbitrary PHP files via (1) the pg parameter and (2) a query string without a parameter.


PHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to execute arbitrary PHP code via a URL in the act parameter.


PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to execute arbitrary PHP code via the match parameter.


PHP remote file include vulnerability in Yawp library 1.0.6 and earlier as used in YaWiki and possibly other products allows remote attackers to include arbitrary files via the _Yawpconf_path parameter.