Dotkliwość: Krytyczna

Exim contains an out-of-bounds write vulnerability which can allow for remote code execution.

Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise.

The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring…

The login_mgr.cgi script in D-Link DNS-320 is vulnerable to remote code execution.

SIMalliance Toolbox Browser contains an command injection vulnerability that could allow remote attackers to retrieve location and IMEI information or execute a range of other attacks by…

Wstrzyknięcie poleceń w Webmin umożliwia zdalne wykonanie kodu.

SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection.

Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.

Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.

Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection.

Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.

Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi.

Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP…

Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.

Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF module that allows an unauthenticated attacker to execute arbitrary code…

Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.

A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.

Nieprawidłowa kontrola dostępu w Citrix Workspace App umożliwia nieautoryzowany dostęp.

Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using…

LG N1A1 NAS 3718.510 is affected by a remote code execution vulnerability.

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number.

Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI.

Zyxel P660HN-T1A routers contain a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user and exploited via the…

Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating…