Data Processing Errors

The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP

• Без аутентификации

microsoft · windows 1015 июн. 2016 г.

When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_t

• RCE

pivotal · spring security oauth25 мая 2017 г.

Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remot

• pre-auth RCE

ektron · ektron content management system30 окт. 2017 г.

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion fa

• Без аутентификации
• Отказ в обслуживании

isc · bind29 июл. 2015 г.

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Mo

• Без аутентификации
• Отказ в обслуживании

siemens · siprotec firmware18 июл. 2015 г.

BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attack

• pre-auth RCE

beanshell · beanshell7 апр. 2016 г.

The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to e

• pre-auth RCE

microsoft · windows 714 июл. 2015 г.

Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers

• pre-auth RCE

microsoft · excel11 мар. 2015 г.

The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds rea

• Без аутентификации

squid-cache · squid26 нояб. 2014 г.

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W

• pre-auth RCE

microsoft · windows 1020 дек. 2016 г.

The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 G

• pre-auth RCE

microsoft · windows 1020 дек. 2016 г.

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

• pre-auth RCE

microsoft · windows 714 авг. 2015 г.

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to exec

• pre-auth RCE

linux · linux kernel10 окт. 2016 г.

wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers

• Без аутентификации
• Отказ в обслуживании

wordpress · wordpress25 нояб. 2014 г.

Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary code due to the PECL YAML parser not handling PHP objects s

• pre-auth RCE

drupal · drupal6 авг. 2018 г.

Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wind

• pre-auth RCE

microsoft · windows 711 мар. 2015 г.

The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item

• pre-auth RCE
• Отказ в обслуживании

net-snmp · net-snmp19 авг. 2015 г.

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Offi

• pre-auth RCE

microsoft · office compatibility pack9 июн. 2015 г.

Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrar

• pre-auth RCE

microsoft · office9 июн. 2015 г.

Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion

• pre-auth RCE

exim · exim25 июл. 2019 г.

Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.

• Без аутентификации

microsoft · windows nt1 янв. 1999 г.

Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro

• pre-auth RCE

justsystems · ichitaro25 нояб. 2014 г.

The Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary cod

• pre-auth RCE

microsoft · windows 1020 дек. 2016 г.

Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v

• pre-auth RCE

microsoft · internet explorer9 июн. 2015 г.

The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via

• pre-auth RCE

apache · camel3 февр. 2016 г.