Improper Input Validation

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

• pre-auth RCE

apache · log4j10 дек. 2021 г.

PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

• pre-auth RCE
• Инъекция команд

paloaltonetworks · pan-os12 апр. 2024 г.

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because o

• pre-auth RCE

drupal · drupal29 мар. 2018 г.

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

• pre-auth RCE

microsoft · sharepoint enterprise server5 мар. 2019 г.

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache San

• pre-auth RCE

zohocorp · manageengine access manager plus18 янв. 2023 г.

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker

• pre-auth RCE

cisco · ios28 мар. 2018 г.

Adobe Commerce checkout improper input validation leads to remote code execution

• pre-auth RCE

adobe · commerce16 февр. 2022 г.

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknow

• Без аутентификации

atlassian · confluence data center4 окт. 2023 г.

A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthe

• Без аутентификации

cisco · ios17 мар. 2017 г.

The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message t

• pre-auth RCE

apache · struts10 июл. 2017 г.

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows

• pre-auth RCE

microsoft · windows server 200814 июл. 2020 г.

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute

• pre-auth RCE

paloaltonetworks · pan-os11 дек. 2017 г.

Microsoft Outlook Elevation of Privilege Vulnerability

• Без аутентификации

microsoft · 365 apps14 мар. 2023 г.

Microsoft Outlook Remote Code Execution Vulnerability

• pre-auth RCE

microsoft · 365 apps13 февр. 2024 г.

Remote Code injection in Barracuda Email Security Gateway

• pre-auth RCE
• Инъекция команд

barracuda · email security gateway 300 firmware24 мая 2023 г.

Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to e

• pre-auth RCE

adobe · acrobat reader19 мар. 2009 г.

Adobe Commerce | Improper Input Validation (CWE-20)

• Без аутентификации

adobe · commerce9 сент. 2025 г.

Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability

• pre-auth RCE

cisco · ip phone 8865 firmware15 апр. 2020 г.

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an

• pre-auth RCE

microsoft · server message block16 мар. 2017 г.

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x befor

• RCE

imagemagick · imagemagick5 мая 2016 г.

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

• Без аутентификации
• Обход пути

cisco · adaptive security appliance software22 июл. 2020 г.

A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause

• Без аутентификации
• Обход аутентификации
• Обход пути

cisco · adaptive security appliance software7 июн. 2018 г.

In SugarCRM before 12.0.

sugarcrm · sugarcrm11 янв. 2023 г.

Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

• RCE
• Инъекция команд

cisco · rv320 firmware24 янв. 2019 г.

The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Se

• RCE

microsoft · windows 710 апр. 2012 г.