remote code vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv2

A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to arbitrary remote code execution....

Blaauwproducts Remote Kiln Control 3.0.0 Blaauwproducts Remote Kiln Control1 Github repository available

5

CVSSv2

Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php....

Code-garage Com Noticeboard 1.31 EDB exploit available

9.3

CVSSv2

A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code Execution Vulnerability'....

Microsoft Visual Studio Code Eslint Extension2 Github repositories available

5

CVSSv2

Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, including source code. This affects /ajax/, /common/, /engine/, /flash/, /images/, /Images/, /jscripts/, /lang/, /layout/, /programs/, and /sms/....

Blaauwproducts Remote Kiln Control Blaauwproducts Remote Kiln Control 3.0.01 Github repository available

6.8

CVSSv2

Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the `pretty` option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug...

Pugjs Pug Pugjs Pug-code-gen

7.5

CVSSv2

Buffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute arbitrary code via a long pre-authentication request to TCP port 6129....

Dameware Development Mini Remote Control Server 3.70 .0.0 Dameware Development Mini Remote Control Server 3.71 .0.0 Dameware Development Mini Remote Control Server 3.72 .0.04 EDB exploits available

7.8

CVSSv2

The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous connections to the service....

Code-crafters Ability Mail Server 1.18

9.3

CVSSv2

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability...

Microsoft Remote Development -

5.1

CVSSv2

Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of...

Juniper Netscreen Remote Security Client 8.0 Juniper Netscreen Remote Vpn Client 8.0

4.6

CVSSv2

ftusbbus2.sys in FabulaTech USB for Remote Desktop through 2020-02-19 allows privilege escalation via crafted IoCtl code related to a USB HID device....

Fabulatech Usb For Remote Desktop6 Github repositories available

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook