Advisories

2023

---

• [ZDI] NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] KeySight N6841A RF Sensor deleteEmbeddedApp Directory Traversal Local Privilege Escalation Vulnerability

---

• [ZDI] KeySight N6841A RF Sensor deleteFirmwarePackage Directory Traversal Local Privilege Escalation Vulnerability

---

• [ZDI] KeySight N6841A RF Sensor addFirmwarePackage Directory Traversal Local Privilege Escalation Vulnerability

---

• [ZDI] KeySight N6841A RF Sensor smsRestoreDatabaseZip Exposed Dangerous Function Local Privilege Escalation Vulnerability

---

• [ZDI] NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability

---

• [ZDI] NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability

---

• [ZDI] NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability

---

• [ZDI] NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability

---

• [ZDI] NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability

---

• [ZDI] NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability

---

• [ZDI] NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability

---

• [ZDI] NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability

---

• [ZDI] NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] TP-Link Archer AX20/AX21 minidlnad db_dir Remote Code Execution Vulnerability

---

• [SRC] PTC Thingworx Edge C-SDK mulitpartMessageStoreEntry_Create Array Indexing Out-of-Bounds Write Remote Code Execution Vulnerability

---

• [SRC] PTC Thingworx Edge C-SDK twHeader_fromStream Integer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cacti poll_for_data Command Injection Remote Code Execution Vulnerability

---

2022

---

• [SRC] VMWare Workspace ONE Access ClaimTransformationHelper validateClaimRuleCondition Remote Code Execution Vulnerability

---

• [ZDI] (Pwn2Own) Softing Secure Integration Server wbemcomn Uncontrolled Search Path Element Privilege Escalation Vulnerability

---

• [ZDI] (Pwn2Own) Softing Secure Integration Server UnZipFolder Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] (Pwn2Own) Softing Secure Integration Server Cleartext Transmission of Sensitive Information Authentication Bypass Vulnerability

---

• [SRC] VMWare Cloud Foundation NSX-V VsmUsernamePasswordAuthenticationFilter parseUsernamePasswordFromXML XML External Entity Processing Information Disclosure Vulnerability

---

• [SRC] VMWare Cloud Foundation NSX-V XStream Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [SRC] VMware vRealize Operations Manager generateSupportBundle VCOPS_BASE Privilege Escalation Vulnerability

---

• [SRC] VMware vRealize Operations Manager SupportLogAction Information Disclosure Vulnerability

---

• [SRC] VMware vRealize Operations Manager DeploymentNodeLevelController Information Disclosure Vulnerability

---

• [SRC] VMware vRealize Operations Manager MainPortalFilter Authentication Bypass Vulnerability

---

• [ZDI] ICONICS GENESIS64 colorpalletes Directory Traversal Information Disclosure Vulnerability

---

• [ZDI] (Pwn2Own) ICONICS GENESIS64 ColorPaletteEntry Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [SRC] VMware Workspace ONE Access ntpServer.hzn Privilege Escalation Vulnerability

---

• [SRC] VMware Workspace ONE Access ApplicationSetupController dbTestConnection JDBC Injection Remote Code Execution Vulnerability (patch bypass)

---

• [ZDI] OPC Labs QuickOPC Connectivity Explorer Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [SRC] Inductive Automation Ignition ScriptInvoke Remote Code Execution Vulnerability

---

• [SRC] Inductive Automation Ignition GatewaySessionManagerImpl Authentication Bypass Vulnerability

---

• [SRC] VMware Workspace ONE Access BrandingResource getBranding Information Disclosure Vulnerability

---

• [SRC] VMware Workspace ONE Access gatherConfig.hzn Privilege Escalation Vulnerability

---

• [SRC] VMware Workspace ONE Access DBConnectionCheckController Cross-Site Request Forgery Vulnerability

---

• [SRC] VMware Workspace ONE Access DBConnectionCheckController dbCheck JDBC Injection Remote Code Execution Vulnerability

---

• [SRC] VMware Workspace ONE Access ApplicationSetupController dbTestConnection JDBC Injection Remote Code Execution Vulnerability

---

• [SRC] VMware Workspace ONE Access OAuth2ActivateResource ACS Authentication Bypass Vulnerability

---

• [SRC] VMware Workspace ONE Access OAuth2TokenResourceController ACS Authentication Bypass Vulnerability

---

• [SRC] VMware Workspace ONE Access customError.ftl Server-side Template Injection Remote Code Execution Vulnerability

---

• [SRC] Microsoft SharePoint Server SPWebRequest SafeCreate TOCTOU DNS Rebinding Security Feature Bypass Vulnerability

---

• [SRC] Adobe Acrobat Reader DC abs Type 2 Font Parsing Charstring Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Zoho ManageEngine Desktop Central ChangeAmazonPasswordServlet Elevation of Privilege Vulnerability

---

• [SRC] Zoho ManageEngine Desktop Central StateFilter Arbitrary Forward Authentication Bypass Vulnerability

---

2021

---

• [SRC] Dedecms GetCookie Type Juggling Authentication Bypass Vulnerability

---

• [ZDI] Commvault CommCell Demo_ExecuteProcessOnGroup Exposed Dangerous Function Remote Code Execution Vulnerability

---

• [ZDI] Commvault CommCell DownloadCenterUploadHandler Arbitrary File Upload Remote Code Execution Vulnerability

---

• [ZDI] Commvault CommCell DataProvider JavaScript Sandbox Escape Vulnerability

---

• [ZDI] Commvault CommCell CVSearchService Authentication Bypass Vulnerability

---

• [SRC] Foxit Reader Field OnBlur event Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader Field Calculate event Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader Field Keystroke event Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader Field Format event Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader Field OnFocus event Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader Annotation transitionToState Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Dedecms ShowMsg Template Injection Remote Code Execution Vulnerability

---

• [ZDI] (Pwn2Own) Microsoft Exchange Server CabUtility ExtractCab Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Microsoft SharePoint CabUtility ExtractCab Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Microsoft SharePoint Missing Check of Message Integrity Vulnerability

---

• [SRC] League flysystem removeFunkyWhiteSpace Time-Of-Check Time-Of-Use File Write Remote Code Execution Vulnerability

---

• [SRC] Eclipse PHP Development Tools DBGP XML External Entity Processing Information Disclosure Vulnerability

---

• [SRC] Microsoft SharePoint Server ProfilePropertyLoader Information Disclosure Vulnerability

---

• [SRC] Microsoft SharePoint Server OAuth Authorization Code Leak Elevation of Privilege Vulnerability

---

• [SRC] Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure Vulnerability

---

• [SRC] Microsoft SharePoint Server InputFormRegularExpressionValidator Denial of Service Vulnerability

---

• [ZDI] (Pwn2Own) Microsoft Exchange Server Missing Check of Message Integrity Vulnerability

---

• [SRC] zzzcms zzzphp parserIfLabel Template Injection Remote Code Execution Vulnerability

---

• [SRC] Progress MOVEit Transfer (DMZ) SILHuman FolderApplySettingsRecurs SQL Injection Remote Code Execution Vulnerability

---

• [SRC] Microsoft Exchange Server DlpUtils AddTenantDlpPolicy ruleParameters TOCTOU Remote Code Execution Vulnerability (patch bypass)

---

• [SRC] Microsoft Exchange Server ImportTransportRuleCollection ProcessE15Format Remote Code Execution Vulnerability (patch bypass)

---

• [SRC] Microsoft Exchange Server DlpUtils AddTenantDlpPolicy Remote Code Execution Vulnerability (patch bypass)

---

• [SRC] Smarty Template Engine Smarty_Internal_Runtime_TplFunction Sandbox Escape Remote Code Execution Vulnerability

---

• [SRC] Smarty Template Engine template_object Sandbox Escape Remote Code Execution Vulnerability

---

• [SRC] NetMotion Mobility Server webrepdb StatusServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [SRC] NetMotion Mobility Server MvcUtil valueStringToObject Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [SRC] NetMotion Mobility Server RpcServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [SRC] NetMotion Mobility Server SupportRpcServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [SRC] Microsoft Exchange Server msExchEcpCanary Cross Site Request Forgery Elevation of Privilege Vulnerability

---

• [SRC] Microsoft SharePoint Server SPSqlDataSource Information Disclosure Vulnerability (patch bypass)

---

• [SRC] CS-Cart templates.manage Server Side Template Injection Remote Code Execution Vulnerability

---

• [SRC] Microsoft SharePoint Server ContentEditorWebPart GetHttpWebResponse Server-Side Request Forgery Information Disclosure Vulnerability

---

2020

---

• [SRC] Microsoft SharePoint Server SPSqlDataSource Information Disclosure Vulnerability

---

• [SRC] Microsoft Exchange Server ImportTransportRuleCollection ProcessE15Format Remote Code Execution Vulnerability

---

• [SRC] Microsoft Exchange Server DlpUtils AddTenantDlpPolicy Remote Code Execution Vulnerability (patch bypass)

---

• [SRC] Microsoft Exchange Server EWS RouteComplaint ParseComplaintData XML External Entity Processing Information Disclosure Vulnerability

---

• [SRC] Microsoft Exchange Server OWA OneDriveProUtilities GetWacUrl XML External Entity Processing Information Disclosure Vulnerability

---

• [SRC] Microsoft SharePoint Server DataFormParameter ParameterBinding Elevation of Privilege Vulnerability

---

• [SRC] Microsoft SharePoint Server PasswordRecovery Information Disclosure Vulnerability

---

• [SRC] Microsoft Exchange Server NewExchangeCertificate WriteRequest File Overwrite Denial of Service Vulnerability

---

• [SRC] Microsoft Exchange Server NewExchangeCertificate WriteRequest File Write Remote Code Execution Vulnerability

---

• [SRC] Microsoft Exchange Server ExportExchangeCertificate WriteCertiricate File Write Remote Code Execution Vulnerability

---

• [SRC] Microsoft SharePoint Server TOCTOU ControlParameter Binding Remote Code Execution Vulnerability

---

• [SRC] Microsoft SharePoint Server SoapDataSource GetResponseString Server-Side Request Forgery Information Disclosure Vulnerability

---

• [SRC] Microsoft SharePoint Server DataFormWebPart CreateChildControls Server-Side Include Remote Code Execution Vulnerability

---

• [SRC] Microsoft SharePoint Server SPHashtagHelper MakeOLSGetRequest Server-Side Request Forgery Information Disclosure Vulnerability

---

• [SRC] Microsoft SharePoint Server ExchangeAutodiscover GetDataFromURL Blind Server-Side Request Forgery Tampering Vulnerability

---

• [SRC] Microsoft Exchange Server DlpUtils AddTenantDlpPolicy Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition prefs sync_calendars Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition attendees fb_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition fb fb_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Sort sortpref Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Poll nav_poll Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Remote Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Event event_alarms Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition CalendarsManager _checkDisplayCals Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Search filter Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Search vfolder Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Flags msgflags Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Expanded expanded_folders Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Upgrade upgrade_tasks Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Horde last_logintasks Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Compose reply_lang Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition prefs sync_calendars Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Nag show_external Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Prefs sync_lists Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition prefs sync_lists Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Nag display_tasklists Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition List tasklist_columns Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Task task_alarms Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Nag display_tasklists Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Nag display_tasklists Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Ui generateUI Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Kronolith remote_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Mnemo display_notepads Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition prefs sync_notepads Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Kronolith show_time Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition prefs sync_notepads Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Collection portal_layout Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition Kronolith remote_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition remote_edit remote_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Horde Groupware Webmail Edition remote_unsubscribe remote_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Reader DC Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Foxit Reader Heap Buffer Overflow Remote Code Execution vulnerability

---

• [SRC] Foxit Reader XObject Stream Uninitialized Object Information Disclosure Vulnerability

---

• [SRC] Foxit Reader Link Index Out-of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] (0Day) (Pwn2Own) Rockwell Automation Studio 5000 AML File Parsing XML External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] (Pwn2Own) ICONICS Genesis64 IcoFwxServer Deserialization Of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] (Pwn2Own) Rockwell Automation FactoryTalk Linx CopyRenameProject Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] (Pwn2Own) Rockwell Automation Studio 5000 Version Missing Authentication for Critical Function Information Disclosure Vulnerability

---

• [ZDI] (0Day) (Pwn2Own) Inductive Automation Ignition ServerMessageHeader Deserialization of Untrusted Data Information Disclosure Vulnerability

---

• [ZDI] (Pwn2Own) Inductive Automation Ignition ServerMessageHeader Deserialization Of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Schneider Electric EcoStruxure Operator Terminal Expert VXDZ File Parsing Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] (Pwn2Own) Triangle Microworks SCADA Data Gateway DNP3 GET_FILE_INFO Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] Cisco UCS Director MyCallable call Directory Traversal Remote Code Execution Vulnerability

---

• [SRC] Cisco UCS Director CIMCDownloadDiagnosticsReport doFormSubmit Directory Traversal Information Disclosure Vulnerability

---

• [ZDI] Cisco UCS Director saveWindowsNetworkConfig Directory Traversal Denial-of-Service Vulnerability

---

• [ZDI] Cisco UCS Director saveStaticConfig Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Cisco UCS Director ScriptModuleAddJarPage Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Cisco UCS Director CopyFileRunnable run Symlink Following Remote Code Execution Vulnerability

---

• [ZDI] Cisco UCS Director isEnableRestKeyAccessCheckForUser Authentication Bypass Vulnerability

---

• [ZDI] Cisco UCS Director ApplianceStorageUtil unzip Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Cisco UCS Director ApplianceStorageUtil unzip Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Cisco UCS Director downloadFile Directory Traversal Information Disclosure Vulnerability

---

• [ZDI] OPC Foundation UA .NET Standard CreateSessionRequest Race Condition Denial-of-Service Vulnerability

---

• [ZDI] Adobe Photoshop Type 1 Font Parsing Charstring Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] ManageEngine Desktop Central FileStorage getChartImage Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [SRC] Schneider Electric EcoStruxure Operator Terminal Expert Hardcoded Cryptographic Key Information Disclosure Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center viewTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center userSelectPagingContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center tvxlanLegend Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center wmiConfigContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center forwardredirect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center viewBatchTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center powershellConfigContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center smsRulesDownload Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center thirdPartyPerfSelectTask Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center reportpage index Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center sshConfig Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center perfAddorModDeviceMonitor Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center navigationTo Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center select Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectCommand Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectDeviceSeries Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectDymicParam Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center perfSelectTask Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center selectUserGroup Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center actionSelectContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center operationSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center reportTaskSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center soapConfigContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center templateSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center quickTemplateSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center guiDataDetail Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center operatorGroupTreeSelectContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center operatorGroupSelectContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center selViewNavContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center mediaForAction Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center ictExpertDownload Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectDevType Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center faultParasSet Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center faultInfo_content Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center select Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center faultTrapGroupSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center faultStatChooseFaultType Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center ifViewSelectPage Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectRules Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center faultFlashEventSelectFact Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center deviceSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center devSoftSel Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center deviceThresholdConfig Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center compareFilesResult Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center deploySelectSoftware Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center deploySelectBootrom Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center devGroupSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center customTemplateSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] (0Day) Hewlett Packard Enterprise Intelligent Management Center choosePerfView Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Cisco Data Center Network Manager SystemFileDAO saveData Directory Traversal Remote Code Execution Vulnerability

---

• [SRC] Cisco Data Center Network Manager SystemFileDAO getFile Directory Traversal Information Disclosure Vulnerability

---

• [SRC] Cisco Data Center Network Manager SystemFileDAO deleteFile Directory Traversal Denial of Service Vulnerability

---

• [SRC] Cisco Data Center Network Manager PortMapperHandler getPortMappingDataLength SQL Injection Information Disclosure Vulnerability

---

• [SRC] Cisco Data Center Network Manager ConfigTemplateHandler getConfigTemplateJobInstance SQL Injection Remote Code Execution Vulnerability

---

• [SRC] Cisco Data Center Network Manager SwitchCredentialsHandler deleteCredentials SQL Injection Remote Code Execution Vulnerability

---

• [SRC] Cisco Data Center Network Manager SMUJobController getSMUTasks SQL Injection Remote Code Execution Vulnerability

---

• [SRC] Cisco Data Center Network Manager ConfigArchiveRest importConfiguration Directory Traversal Denial of Service Vulnerability

---

• [SRC] Cisco Data Center Network Manager HealthRest sqlCommandAPI Arbitrary SQL Execution Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getLanSwitchDataLength SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getTopologyVlanList XML External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager CablePlans XML External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getDeployContent Directory Traversal Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager addGroupNavigation XML External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager checkLinkUUID SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSwitchsDataLength SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getInventoryIslList XML External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSwitchName SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getRpmJobLength SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getConfigTemplateFileName SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSwitchDbIdBySerialNumber SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getGirTaskLength SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getVpcCount SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getJobLength SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getZoneDataLength SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getVsanDataLength SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSanSwitchDataLength SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager AFW Image Upload Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager createLanFabric Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager writeToFile Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager importTS Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getDiscoveredDeviceCount groupId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getDiscoveredDeviceCount hostname SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getDiscoveredDeviceCount switchIdList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager setVxlanProperties SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager createSite SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager createSite getIp SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager checkDiscoveryEthSwCandidates4List SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getN3KBufferStatList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getEndDeviceStatListWithVsan SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getNpvLinkStatJoinList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getFlowStatList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getTaskList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager modifyGroupName SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getVpcCount SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getLanSwitchBandwidthStatList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSanSwitchBandwidthStatList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getAllVpcs SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getLanEthernetStatListES SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSanIslStatList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getPortGroupStatList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getLanIslStatList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getNpvLinkStatList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getLanIslStatJoinList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getLanGigEStatList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSanGigEStatList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSanIslStatJoinList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getLanSwitchListWithoutUsedPorts SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getLanStatEntities SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSanStatEntities SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getOidSanStatList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getOidLanStatList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getPortGroupMember SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getHostEnclList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSanZoneList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getVsanList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getEndPortConnectionsForStorageSystem SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getEndPortConnectionsForStorageEnclosure SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getVmHostData SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getDeployerTaskDetails SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getJobList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getVsanListForEnclosures SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getAllGroups SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getZoneListByZoneNameAndParentId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSanIslListWithPM SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getEndDeviceList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSwitches SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSwitches SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getModulesBySwitch SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getLanIslStatListES SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getModules SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getNpvLinks SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getBackupStatusCount SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSanIslStatListESBySQL SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getFlowStatListES SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSanGigEStatListES SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getCustomPGStatList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getEndDeviceStatListESBySQL SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getIslListWithPMForTopology SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getHostEnclList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getLanSwitchList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getLanIslList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getisls SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getInterfacesBySwitch SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getHostEnclList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getHostEnclList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getEndPorts SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getLicenses SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getAllTemplate SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getRPMTasks SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getJobExecutionDetails SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager DeviceModuleRest getDeviceModulesupport SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSyslogEventList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager VirtualPortChannel getDomain SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getHostEnclDataLength SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getVpcPeerHistory SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getVpcHistory SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getAllVpc SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager deleteVpcHistory SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getSMUTasks SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager ImageManagement SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager getTokenInfo SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager persistUserInfo SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager readConfigFileFromDB Directory Traversal Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager ReportWS deleteReportTemplate Directory Traversal Denial-of-Service Vulnerability

---

• [ZDI] Cisco Data Center Network Manager JBoss_4_2Encrypter Hardcoded Cryptographic Key Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager serverinfo Hardcoded Password Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager DbAdminRest installSwitchLicense Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager readConfigFileFromDBAsXML Directory Traversal Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager WebAnalysisWSService storeConfigToFS Directory Traversal Denial-of-Service Vulnerability

---

• [ZDI] Cisco Data Center Network Manager SecurityManager Hard-coded Cryptographic Key Authentication Bypass Vulnerability

---

• [ZDI] Cisco Data Center Network Manager reportTemplateUploadPolicy Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager ConfigArchiveRest getRestoreLog Directory Traversal Information Disclosure Vulnerability

---

• [ZDI] Cisco Data Center Network Manager DbAdminRest runZoneMigrationForBrocade Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager DbAdminRest saveLicenseFileToServer Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Cisco Data Center Network Manager TrustedClientTokenValidator Hard-coded Cryptographic Key Authentication Bypass Vulnerability

---

2019

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center faultDevParasSet Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center eventInfo_content Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center addVsiInterfaceInfo Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center addDeviceToView Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center operatorOnlineList_content Privilege Escalation Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center SyslogTempletSelectWin Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center legend Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center UrlAccessController Authentication Bypass Vulnerability

---

• [SRC] Cisco Prime Infrastructure Health Monitor HA TarArchive Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Foxit Studio Photo JPEG Batch Processing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type PostScript File Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type PostScript File Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type PostScript File Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type PostScript File Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type PostScript File Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type PostScript File Out-of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC RestorePlugInFrame Memory Corruption Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC Distiller PostScript JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript CharString Directory NULL Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop JSX File ExtendScript Folder.rename Insufficient UI Warning Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop JSX File ExtendScript Folder.remove Insufficient UI Warning Denial-of-Service Vulnerability

---

• [ZDI] Adobe Photoshop JSX File ExtendScript File.copy Insufficient UI Warning Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop JSX File ExtendScript File.remove Insufficient UI Warning Denial-of-Service Vulnerability

---

• [ZDI] Adobe Photoshop JSX File ExtendScript File.readch Insufficient UI Warning Information Disclosure Vulnerability

---

• [ZDI] Adobe Photoshop JSX File ExtendScript File.rename Insufficient UI Warning Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop JSX File ExtendScript File.read Insufficient UI Warning Information Disclosure Vulnerability

---

• [ZDI] Adobe Photoshop JSX File ExtendScript File.readln Insufficient UI Warning Information Disclosure Vulnerability

---

• [ZDI] Adobe Photoshop JSX File ExtendScript File.writeln Insufficient UI Warning Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop JSX File ExtendScript File.write Insufficient UI Warning Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop JSX File ExtendScript File.execute Insufficient UI Warning Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop JSX File ExtendScript app.system Insufficient UI Warning Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript executive Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop PostScript load Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop PostScript blend Out-Of-Bounds Read Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop PostScript load Out-Of-Bounds Read Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop PostScript callothersubr Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop JSX File ExtendScript Folder.execute Insufficient UI Warning Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop PostScript drop Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop PostScript callothersubr Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Photoshop PostScript put Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop PostScript callothersubr Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop PostScript sbw Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop PostScript hsbw Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Photoshop PostScript put Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop PostScript put Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop PostScript put Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop PostScript load Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop PostScript File Font Parsing Charstring store Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Photoshop PostScript File Font Parsing Charstring index Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type 2 Charstring put Out-of-Bounds Write Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type 2 Charstring put Integer Overflow Information Disclosure Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type 2 Charstring put Out-of-Bounds Write Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type 2 Charstring put Integer Overflow Information Disclosure Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type 2 Charstring put Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type 2 Charstring put Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type 2 Charstring put Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type 2 Charstring put Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type 2 Charstring put Out-of-Bounds Write Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type 2 Charstring put Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Type 2 Charstring put Out-of-Bounds Write Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC ASCII85Decode filter Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Adobe Photoshop CC Type 2 Font Charstring error Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Adobe Photoshop CC image length Heap Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] Adobe Photoshop CC ASCII85Decode filter Heap Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] Adobe Photoshop CC ASCII85Decode filter Heap Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] Adobe Photoshop CC Type 1 Font FontBBox array Stack Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] Adobe Photoshop CC Type 1 Font FontInfo dictionary Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Adobe Photoshop CC Type 2 Font Charstring callothersubr Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [SRC] Artifex MuJS regcompx pattern Integer Overflow Remote Code Execution Vulnerability Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center imcrs ConfFileResource renameFile Directory Traversal Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center ConfFileResource syncaddOrModFile Directory Traversal Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center SSHParameterResource addSSHParameterKeyFile Directory Traversal Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center Standard OperatorMgrImpl isAccountBindingWithOperator SQL Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center Standard OperatorMgrImpl isAccountCanceled SQL Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center SqlResource queryDataBySQL Arbitrary SQL Execution Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center ImcplatResServiceSkeleton queryDataBySQL Arbitrary SQL Execution Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Intelligent Management Center Standard DhcpServerDaoImpl queryIpAllocateInfoBySubnetIp SQL Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Intelligent Management Center Standard DhcpServerDaoImpl queryOptionInfosByIp SQL Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Intelligent Management Center Standard DhcpServerDaoImpl queryServerByIp SQL Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Intelligent Management Center Standard AirWaveApConvergedDaoImpl readListBySql SQL Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Intelligent Management Center Standard SmscCfgDaoImpl updateSmsSendingWay SQL Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Intelligent Management Center Standard SmscCfgDaoImpl updateEmailSuffix SQL Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Intelligent Management Center Standard DhcpServerDaoImpl queryIpAllocateInfoByServerIp SQL Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center ForwardRedirect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center ByteMessageResource transformEntity Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center choosePerfView Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center devSoftSel Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center operationSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center ifViewSelectPage Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center smsRulesDownload Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center faultTrapGroupSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center faultEventSelectFact Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center WebSocket Shape3DWebSocketServlet Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center powershellConfigContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Cisco Prime Infrastructure DbTableListDetailAction orderByColumn SQL Injection Information Disclosure Vulnerability

---

• [SRC] Cisco Prime Infrastructure DbTableListAction orderByColumn SQL Injection Information Disclosure Vulnerability

---

• [SRC] Cisco Prime Infrastructure SampleFileDownloadServlet Directory Traversal Information Disclosure Vulnerability

---

• [SRC] Cisco Prime Infrastructure XmpFileUploadServlet Directory Traversal Remote Code Execution Vulnerability

---

• [SRC] Cisco Prime Infrastructure XmpMultiPathDownloadServlet Directory Traversal Information Disclosure Vulnerability

---

• [SRC] Cisco Prime Infrastructure XmpLogFilesDownloadServlet Directory Traversal Information Disclosure Vulnerability

---

• [SRC] Cisco Prime Infrastructure XmpLogFilesDownloadServlet Directory Traversal Remote Code Execution Vulnerability

---

• [SRC] Cisco Prime Infrastructure Health Monitor HA TarArchive Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC imageDistiller Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ASCII85Decode Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC JPEG File Parsing Use-After-Free Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript colorimage Use-After-Free Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC Font Parsing Memory Corruption Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center Standard ImcLoginMgrImpl Hard-coded Cryptographic Key Credentials Disclosure Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center dbman Use of Hard-coded Credentials Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center AMF3 Externalizable Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center AccessMgrServlet className Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center TopoMsgServlet Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center soapConfigContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center iccSelectDevType Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Foxit Reader localFileStorage Directory Traversal Remote Code Execution Vulnerability

---

• [SRC] Oracle Application Testing Suite DownloadServlet File Read Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader PDF Printer Request Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Foxit Reader PDF Printer proxyPreviewAction Stack Buffer Overflow Elevation of Privilege Vulnerability

---

• [SRC] Foxit Reader PDF Printer proxyGetAppEdition Stack Buffer Overflow Elevation of Privilege Vulnerability

---

• [SRC] Foxit Reader PDF Printer proxyDoAction opcode 0x100000 Stack Buffer Overflow Elevation of Privilege Vulnerability

---

• [SRC] Foxit Reader PDF Printer proxyDoAction opcode 0x200000 Stack Buffer Overflow Elevation of Privilege Vulnerability

---

• [SRC] Foxit Reader PDF Printer proxyCheckLicence Stack Buffer Overflow Elevation of Privilege Vulnerability

---

• [SRC] Foxit Reader PDF Printer proxyCPDFAction Stack Buffer Overflow Elevation of Privilege Vulnerability

---

• [SRC] Foxit Reader PDF Printer proxyDoAction opcode Stack Buffer Overflow Elevation of Privilege Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] OMRON CX-One CX-Programmer CXP File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Distiller PostScript File maxlength operand Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Distiller PostScript File Parsing dvips TeXDict Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Distiller DCTDecode JPEG parsing SOS Marker Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Distiller PostScript File Parsing Use-After-free Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center navigationTo Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center selViewNavContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center faultStatChooseFaultType Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center faultFlashEventSelectFact Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center wmiConfigContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center iccSelectDymicParam Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center perfSelectTask Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center viewBatchTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Jaspersoft JasperReports Server DiagnosticDataCipherer Hard-coded Cryptographic Key Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC PostScript File Parsing Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center mediaForAction Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center userSelectPagingContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center sshConfig Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center TopoMsgServlet Java Reflection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center ictExpertDownload Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center deploySelectSoftware Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center operatorGroupTreeSelectContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center customTemplateSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center iccSelectRules Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center addDeviceToView Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Vanilla Forums AddonManager getSingleIndex Directory Traversal File Inclusion Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center templateSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center reportTaskSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center selectUserGroup Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center deploySelectBootrom Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center iccSelectDeviceSeries Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center deviceThresholdConfig Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center MyFaces Static Key ViewState Use of Default Credentials Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center select Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center tvxlanLegend Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center thirdPartyPerfSelectTask Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center operatorGroupSelectContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center operatorOnlineList_contentOnly Cleartext Storage of Sensitive Information Privilege Escalation Vulnerability

---

• [ZDI] Jaspersoft JasperReports Server ResourceForwardingServlet URI Improper Access Control Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center FileUploadServlet Unrestricted File Upload Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center CommonUtils unzip Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center TopoDebugServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center TopoDebugServlet Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center TopoDebugServlet Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center GWT perfAddFormServer getAddFormBean Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center GWT perfInsListServer getInsListBean Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center GWT deviceservice saveSelectedInterfaces Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center GWT deviceservice queryCustomCondition Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center GWT deviceservice saveSelectedDevices Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center GWT perfSelItemServer getSelItemBean Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center viewTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center quickTemplateSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center deviceSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center guiDataDetail Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center select Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center perfAddorModDeviceMonitor Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center faultParasSet Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center reportpage index Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Distiller PostScript File Parsing grestore Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC Distiller PostScript File Parsing grestore Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Distiller PostScript File Parsing dvips TeXDict Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Distiller PostScript File Parsing Type 1 Font FontInfo Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Distiller PostScript File Parsing Type 1 Font FontBBox Stack Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC Distiller PostScript File Parsing TBuildCharDict grestore Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor SCS File Parsing Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor SCS File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center faultInfo_content Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center faultDevParasSet Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center eventInfo_content Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center UrlAccessController Authentication Bypass Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center compareFilesResult Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center legend Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center SyslogTempletSelectWin Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center actionSelectContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center devGroupSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center addVsiInterfaceInfo Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center iccSelectCommand Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center PrimeFaces Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor SCS File Parsing CStringData Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor scs File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor sr3 File Parsing MoveFile Arbitrary File Creation Vulnerability

---

• [ZDI] OMRON CX-Supervisor sr3 File Parsing CopyFile Arbitrary File Creation Vulnerability

---

• [ZDI] OMRON CX-Supervisor sr3 File Parsing ExecuteJScriptFile Command Injection Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor sr3 File Parsing ExecuteVBScriptFile Command Injection Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor sr3 File Parsing ViewReport Command Injection Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor sr3 File Parsing GenerateReport API File Write Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor sr3 File Parsing DeleteFile Arbitrary File Deletion Vulnerability

---

• [ZDI] OMRON CX-Supervisor sr3 File Parsing EditFile API Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor sr3 File Parsing WriteMessage Arbitrary File Creation Vulnerability

---

• [ZDI] OMRON CX-Supervisor sr3 File Parsing UploadPLCProgram API Arbitrary File Deletion Vulnerability

---

• [ZDI] OMRON CX-Supervisor sr3 File Parsing RunApplication API Command Injection Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor sr3 Code Injection Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA LQS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LQS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LQS File Parsing Improper Control of Generation of Code Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA LGX Report File BlockWrite Arbitrary File Creation Vulnerability

---

• [ZDI] LAquis SCADA LGX Report File Open Path Traversal Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LGX Report TextFile Read Directory Traversal Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LGX Report File Open Path Traversal Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LGX Report Ini WriteNumber Arbitrary File Creation Vulnerability

---

• [ZDI] LAquis SCADA LGX Report AddComboFile Arbitrary File Creation Vulnerability

---

• [ZDI] LAquis SCADA LGX Report TextFile Append Arbitrary File Creation Vulnerability

---

• [ZDI] LAquis SCADA LGX Report MemoryReadLong Untrusted Pointer Dereference Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LGX Report MemoryReadByte Untrusted Pointer Dereference Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LGX Report MemoryReadDouble Untrusted Pointer Dereference Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LGX Report MemoryReadWord Untrusted Pointer Dereference Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LGX Report Memory ReAlloc Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA LGX Report Memory Byte Untrusted Pointer Dereference Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LGX Report MemoryWriteWord Memory Corruption Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA LGX Report MemoryWriteLong Memory Corruption Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA LGX Report MemoryWriteDouble Memory Corruption Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA LGX Report File Write Arbitrary File Creation Vulnerability

---

• [ZDI] LAquis SCADA LGX Report MemoryWriteByte Memory Corruption Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA LGX Report Ini WriteString Arbitrary File Creation Vulnerability

---

• [ZDI] LAquis SCADA LGX Report Memory Integer Untrusted Pointer Dereference Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LGX Report Memory Double Untrusted Pointer Dereference Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LGX Report Memory Free Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA lgx Report Memory Long Untrusted Pointer Dereference Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LGX Report Memory Word Untrusted Pointer Dereference Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LGX Report Memory PChar Untrusted Pointer Dereference Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LGX Report Edit Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA LGX Report TextFile Write Arbitrary File Creation Vulnerability

---

• [ZDI] LAquis SCADA LGX Report ShellExecute Command Injection Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA Web Server URI Parsing Authentication Bypass Vulnerability

---

• [ZDI] LAquis SCADA Web Server Hardcoded Credentials Authentication Bypass Vulnerability

---

• [ZDI] LAquis SCADA Web Server relatorionome NOME Command Injection Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA Web Server relatorionome TAG Command Injection Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA Web Server relatorionome TITULO Command Injection Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA Web Server acompanhamentotela TAGALTERE Command Injection Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA Web Server acompanhamentotela PAGINA Command Injection Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA Web Server relatorioindividual TITULO Command Injection Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA LQS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA Web Server relatorioindividual TAG Command Injection Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA Web Server Directory Traversal Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LGX Report Format File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA LQS File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [SRC] Oracle Application Testing Suite ActionServlet processFileUpload Directory Traversal Remote Code Execution Vulnerability

---

• [SRC] Oracle Application Testing Suite UploadServlet External Entity Injection Information Disclosure Vulnerability

---

• [ZDI] OMRON CX-One CX-Protocol CObject Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-One CX-Protocol CObject Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-One CX-Protocol CObject Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Microsoft Windows Jet Database Engine TblPage CreateColumns Out-Of-Bounds Read Remote Code Execution Vulnerability

---

• [SRC] Microsoft Windows Jet Database TblPage ColumnLvBinary Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Microsoft Windows Jet Database Table FindIndexFromName Array Indexing Remote Code Execution Vulnerability

---

• [ZDI] Microsoft Windows JET Database Engine Out-Of-Bounds Read Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader SDK ActiveX URI Parsing Stack Based Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader SDK ActiveX Launch Action New Window Command Injection Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader SDK ActiveX Link Launch Action Command Injection Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader SDK ActiveX Pro TextBox Field OpenFile Action Command Injection Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader SDK ActiveX Pro exportAsFDF File Write Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader SDK ActiveX Pro createDataObject File Write Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader SDK ActiveX Pro launchURL Command Injection Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader SDK ActiveX Pro Uninitialized Object Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader SDK ActiveX Pro TextBox Field Validate Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader SDK ActiveX Pro TextBox Field Mouse Enter Use-After-Free Remote Code Execution Vulnerability

---

2018

---

• [SRC] Vanilla Forums AddonManager getSingleIndex Directory Traversal File Inclusion Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-One CXP File Parsing Stack-based Buffer Overflow Code Execution Vulnerability

---

• [ZDI] OMRON CX-One CX-Programmer CXP File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-One CX-Position NCI File Parsing Stack-Based Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] Cisco Webex Meetings Desktop App Update Service DLL Planting Elevation of Privilege Vulnerability

---

• [SRC] Vanilla Forums XenforoPassword splitHash Unserialize Remote Code Execution Vulnerability

---

• [SRC] Vanilla Forums Gdn_Format unserialize Unserialize Remote Code Execution Vulnerability

---

• [SRC] Vanilla Forums ImportController index file_exists Unserialize Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor scs File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC HTML2PDF HTML Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Vanilla Forums domGetImages getimagesize Unserialize Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA lqs File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA lqs File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] LAquis SCADA LQS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

---

• [ZDI] LAquis SCADA LQS File Parsing Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA setInterval Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField editValue Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField getItemState Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA host response Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField colSpan Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField mandatory Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField deleteItem Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField resolveNode Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA mouseUp Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Form count Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Form Model insertInstance Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA isPropertySpecified Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA setElement Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Form Model moveInstance Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField getDisplayItem Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA aliasNode Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA host title Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA host gotoURL Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField resolveNodes Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField addItem Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA host resetData Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA getAttribute Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA host messageBox Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Field style Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA host beep Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA host importData Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader TextBox Validate Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA isCompatibleNS Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA host currentPage Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA desc Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA loadXML Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA host exportData Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA host print Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA xfdf removeAttribute Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA localeSet name Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA xmpmeta content Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField fillColor Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField boundItem Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField vAlign Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField rotate Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField setAttribute Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA TimeField setAttribute Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Microsoft Windows Jet Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player ARF File Parsing Memory Corruption Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player PROVIDER ARF File Integer Underflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player PROVIDER ARF File Integer Underflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player ATPDMOD ARF File Heap-based Buffer Overflow Vulnerability

---

• [SRC] Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader DataView Uninitialized Object Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF EMR_COMMENT Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader OCG setAction Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Link setAction Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Barcode Calculate Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Foxit Reader TextBox Format Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader TextBox Calculate Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader TextBox Validate Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader ListBox Selection Change Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader CheckBox onFocus Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader CheckBox onBlur Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader CheckBox Mouse Exit Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader setInterval Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player NMVC RtpConfig Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player NMVC RtpConfig Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player ATPDMOD Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player NMVC ARF File Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player ATPDMOD ARF File Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player NBRPFW Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player NBRPFW Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player NBRPD Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Recorder and Player ATAS32 Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player NMVC Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player ATPDMOD Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player ATPDMOD Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player ATPDMOD Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player NBRQA Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Recorder and Player ATAUDIO Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Recorder and Player ATAS32 Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Recorder and Player ATAS32 Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Recorder and Player ATAS32 Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Recorder and Player ATDL2006 Decompression Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Cisco WebEx Recorder and Player ATAS32 Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Fuji Electric V-Server Lite File Parsing Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Fuji Electric V-Server VPR File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Fuji Electric V-Server VPR File Parsing CArchive Read Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Fuji Electric V-Server VPR File Parsing CArchive Read Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Fuji Electric V-Server VPR File Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Fuji Electric V-Server VPR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

---

• [ZDI] Fuji Electric V-Server VPR File Parsing Integer Underflow Remote Code Execution Vulnerability

---

• [ZDI] Fuji Electric V-Server VPR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Fuji Electric V-Server VPR File Parsing Type Confusion Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Fuji Electric V-Server VPR File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Fuji Electric V-Server VPR File Parsing CArchive Read Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Fuji Electric V-Server VPR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Fuji Electric V-Server VPR File Parsing CArchive Read Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Fuji Electric V-Server VPR File Parsing CObArray Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player NBRQA Integer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player NBRQA Integer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player NBRQA Integer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player NBRQA Integer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player NBRQA Integer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Recorder and Player WRF File Heap-based Buffer Overflow Vulnerability

---

• [SRC] Docker dockerBackend HandleRequestAsync Deserialization of Untrusted Data Elevation of Privilege Vulnerability

---

• [ZDI] Novell NetIQ Access Manager dhost Service Shared Memory Section Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] VMWare Horizon Client wswc_sharedMem_shared Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Microsoft Edge Undo Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Foxit Reader exportAsFDF Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Event Handling Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Event Handling Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Field object signatureSetSeedValue Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Link borderWidth Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Button buttonSetIcon Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader PolyLine Annotation addAdLayer Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Text Annotation noteIcon Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader StrikeOut Annotation contents Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Square Annotation name Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Sound Annotation soundIcon Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Polygon Annotation borderEffectIntensity Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Line Annotation leaderExtend Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Ink Annotations subject Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader FreeText Annotation width Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Circle Annotation borderEffectStyle Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader FileAttachment attachIcon Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader FlateDecode stream Uninitialized Pointer Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader exportData Arbitrary File Write Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader exportAsFDF Arbitrary File Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] Adobe Flash Player SWF Parsing Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Adobe Acrobat Pro DC XPS OpenType Font Parsing idDelta Heap Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC HTML2PDF HTML Parsing window getMatchedCSSRules Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC HTML2PDF HTML Parsing img setAttribute Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF Parsing Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion XPS Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion XPS font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF Parsing Uninitialized Pointer Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF EMR_COMMENT Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF GIF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF EMR_STRETCHDIBITS Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion XPS Parsing Memory Corruption Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Micro Focus Client for Open Enterprise Server Buffer Overflow Privilege Escalation Vulnerability

---

• [ZDI] Advantech WebAccess Node webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess Node webvrpcs drawsrv Arbitrary File Deletion Vulnerability

---

• [ZDI] Advantech WebAccess Node screnc Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess Node bwmakdir Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess Node webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess Node webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess Node webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess Node webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess Node webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess Node webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess Node webvrpcs ViewDll1 Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF GIF ImageData Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF EMR_CREATEDIBPATTERNBRUSHPT Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF GIF ImageDescriptor Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF EMR_COMMENT Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF EMR_STRETCHDIBITS Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF EMR_STRETCHDIBITS Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Encryption for Email Gateway requestDomains hidDomains SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Encryption for Email Gateway formChangePass username SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Encryption for Email Gateway formConfiguration saveValue SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Encryption for Email Gateway emailSearch SearchString SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Encryption for Email Gateway LauncherServer DownloadBlackList Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Encryption for Email Gateway register2 Client SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Encryption for Email Gateway editPolicy hidRuleId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Encryption for Email Gateway editPolicy editRuleId SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Encryption for Email Gateway Registration Authentication Bypass Vulnerability

---

• [ZDI] Trend Micro Encryption for Email Gateway DBCrypto Authentication Weakness Vulnerability

---

• [SRC] Foxit Reader Signature Field lineWidth Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader field event userName Setter Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader PDF Parsing U3D Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader PDF Parsing U3D Array Indexing Out-of-Bounds Write Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader PDF Parsing U3D Out-of-Bounds Read Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader PDF Parsing U3D Out-of-Bounds Read Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader PDF Parsing U3D Out-of-Bounds Read Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader PDF Parsing U3D Out-of-Bounds Write Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader PDF Parsing U3D Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader PDF Parsing U3D Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader PDF Parsing U3D Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess HMI Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess HMI Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess HMI Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess HMI Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess HMI Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess HMI Designer PM3 File Parsing Double Free Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess HMI Designer PM2 File Conversion Double Free Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess HMI Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader shift event Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader ePub Parsing Out-of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Foxit Reader XFA Button execEvent Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Button boundItem Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader TextBox Keystroke Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader TextBox Format Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader TextBox Calculate Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Link setAction Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader OCG name Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Annotation author Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Field rect Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Field textColor Setter Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader pageNum Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Text Annotations point Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Button resetData Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Button title Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Button resolveNode Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Button y Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Button resolveNodes Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Button formattedValue Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader AFSimple_Calculate Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader GIF DataSubBlock Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Foxit Reader addField Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader addAnnot Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader PrintParams interactive Uninitialized Memory Information Disclosure Vulnerability

---

• [ZDI] Foxit Reader PrintParams bitmapDPI Uninitialized Memory Information Disclosure Vulnerability

---

• [ZDI] Foxit Reader XFA borderColor Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader BMP Image Parsing BITMAPINFOHEADER biWidth Integer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Microsoft Office Excel Slicer Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Adobe Digital Editions ePub otf Font Parsing TableRecord offset Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Beckoff TwinCAT3 Multiple Kernel Drivers Untrusted Pointer Dereference Privilege Escalation Vulnerabilities

---

• [ZDI] Adobe Acrobat Pro DC XPS Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center UrlAccessController Authentication Bypass Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center redirectviewer Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center operatorOnlineList_contentOnly Information Disclosure Vulnerability

---

• [SRC] Synology Photo Station SYNOPHOTO_Flickr_MultiUpload Race Condition File Write Remote Code Execution Vulnerability

---

• [SRC] Synology Photo Station LogList Stored Cross Site Scripting Authentication Bypass Vulnerability

---

• [ZDI] Trend Micro Control Manager TMCM_MembershipProvider ValidateUser Password Hash Usage Authentication Bypass Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet ID_QUERY_COMMAND_TRACKING_USER_ID SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager AdHocQuery_Processor External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Control Manager ThreatDistributedTrail SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager ClearSelectedTreeNode SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager AntiVirusSummary SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager ApplicationCompliance SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager ApplicationStatus SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager ComponentCompliance SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager ContentSecuritySummary SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager SpywareSummary SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager GetChannelList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager NetworkVirusSummary SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager PersonalFirewallSummary SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager PolicyResult SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager DLPIncidentJobWidget SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager GetScheduleSubscription SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager GetOnetimeSubscription SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager sp_DDI_GetInterestedIPByJobID2 SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager sp_DeleteSelectedTreeNodesByRefKey SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TemplateMatch SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TemplateMatchByChannel SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TemplateMatchByTemplate SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager InsertSelectedTreeNodeWithACL SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager SensitiveFilesOverTime SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager sCloudService GetProductServerType SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager ViolationStatus SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager WebSecuritySummary SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager UserStatusBySeverity SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager GetRuleList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager ThreatStastics SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TopViolatorsByChannel SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager ViolationCnt SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TopXThreatTrail SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TopViolatorsByTemplate SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TopXThreat SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager ViolationCntByChannel SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TopViolators SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TopTemplateByChannel SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TopTemplateMatches SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TopViolationPolicy SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TopSensitiveMachines SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TopSensitiveFilesDetected SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TopChannelByTemplate SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager ViolationCntByTemplate SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager AdHocQuery_Processor ProductLogQuery SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager sCloudService GetPassword SQL Injection Remote Code Execution Vulnerability

---

• [SRC] Delta Industrial Automation Screen Editor Project File Parsing CThemeWnd Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Delta Industrial Automation Screen Editor Project File Parsing stopbits Out-of-Bounds Write Remote Code Execution Vulnerability

---

• [SRC] Delta Industrial Automation Screen Editor Project File Parsing CDocument Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Delta Industrial Automation Screen Editor Project File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv Arbitrary Free Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess BwSyncDb Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess BwOpcImg Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess bwscrp Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess cnvlgxtag Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess Notify2 Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess BWRPswd Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess BWRPswd Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess BwPSLinkZip Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess bwthinfl Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess BwFreRPT Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess BwSyncLg Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess BwOpcBs Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess bwprtscr Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess bwmail Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess jpegconv Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess BwNodeIP Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess bwwfaa Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess bwstwww Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess DrawCMD Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess bwstmps Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLNumParams Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLNumResultCols Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLExecDirect Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLDescribeParam Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLExecute Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLSetParam Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLPrepare Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLFetch Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLPutData Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLParamData Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLFetchScroll Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLCancel Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess mSignin SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess LogList ChkAdminViewUsrPwd1 SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess mailPg ChkAdminViewUsrPwd1 SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess bwMQTT Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess makensis Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLSetStmtAttr Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLFreeStmt Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLAllocStmt Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLDisconnect Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLFreeConnect Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLFreeEnv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLSetEnvAttr Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLConnect Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv SQLSetConnectOption Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx ARF File DLL Planting Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx ARF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

2017

---

• [SRC] Kingsoft Antivirus and Internet Security Kernel Stack Buffer Overflow Privilege Escalation Vulnerability

---

• [ZDI] Ecava IntegraXor Report getdata name SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Ecava IntegraXor Report batchlist SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise clt_report_sms_status Uninitialized Pointer Information Disclosure Vulnerability

---

• [ZDI] Netgain Systems Enterprise Manager script_test Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability

---

• [ZDI] Advantech WebAccess webvrpcs ViewDll1 Stack-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx ARF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx ARF File Parsing Uninitialized Memory Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC iframe Same Origin Policy Bypass Information Disclosure Vulnerability

---

• [ZDI] Foxit Reader Document author Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA ImageField Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Foxit Reader Field alignment Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader FormCalc closeDoc Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader FormCalc app Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Layout pageSpan Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Annotations modDate Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Layout page Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader FileAttachment Annotations style Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Text Annotations style Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Caret Annotations style Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Circle Annotations author Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFAScriptObject setFocus Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFAScriptObject openList Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Layout w Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Nodes append Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Nodes formNodes Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFAScriptObject remove Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFAScriptObject insert Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA Signature Object signer Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Link setAction Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Field value Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Annotations arrowEnd Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center perfAccessMgrServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center TopoReqServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center TopoBroadcastServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center TopoDebugServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center AccessMgrServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center TopoMsgServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center flexFileUpload Directory Traversal Remote Code Execution Vulnerability

---

• [SRC] Oracle Java SE Web Start jnlp XML External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10012 Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center mibFileServlet Directory Traversal Denial of Service Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center mibFileServlet Directory Traversal Denial of Service Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center WebDMServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center WebDMDebugServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center MibBrowserTopoFilterServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center mibFileServlet Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise get_moveto_group_list Device_DeviceId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise delete_admin_account UserName SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise add_app_category Name SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise upload_img_file Unrestricted File Upload Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise eas_agent_check_upgrade SlinkId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise eas_agent_sync_client_info SlinkId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise eas_agent_sync_all_devices SlinkId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise eas_agent_unregister SlinkId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise eas_agent_upload_new_devices SlinkId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise eas_agent_command SlinkId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise eas_agent_register SlinkId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise cancel_command_list CmdUUID SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise delete_user Id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise remove_command_list CmdUUID SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise resend_command_list CmdUUID SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise edit_eas_note Id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise save_eas_agent_setting SlinkId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise remove_eas_agent_info SlinkId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise show_eas_agent_info SlinkId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise create_db SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise upload_font_file Unrestricted File Upload Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise upload_wallpaper_file Unrestricted File Upload Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise mdm_register_new_connector SlinkId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise diagnose_eas_status SlinkId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise reinvite_user Id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise upload_app_file Unrestricted File Upload Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise assign_policy Id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise remote_selective_wipe_device id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise get_dep_profile Id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise upload_web_app AppFile SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise invite_devices user_name SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise update_group Id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise delete_group ParentId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise remote_lock_device Device_DeviceId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise export_devices Device_DeviceGroupId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise get_subgroup_list id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise Proxy Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise notify_devices_to_update id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise get_device_detail_info id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise query_user search_by SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise get_device_list_brief_by_group id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise search_device_invitations user_name SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise edit_user id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise widgetforsecurity talker Authentication Bypass Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise change_device_user id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise reset_device_passwd id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise get_remote_unlockstring Device_DeviceId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise get_user_list LDAPAccount SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise move_group Id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise query_installed_applications application_name SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise edit_device id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise locate_device id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise search_user_for_report user_name SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise get_device_location Device_DeviceId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise search_users_for_vpp user_name SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise query_event_log AdminName SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise add_group Name SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise remote_wipe_device id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise Proxy Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise broadcast_group GroupId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise search_devices group_id SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise invite_devices email SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise stop_mirroring Device_DeviceId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise change_ios_setting Device_DeviceId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise export_eas_devices Domain SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise broadcast_devices Device_DeviceDeviceId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise notify_groups_to_update DeviceGroupId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise delete_devices Device_DeviceId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise show_eas_devices Domain SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise move_devices Device_DeviceDeviceId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise notify_devices_to_scan Device_DeviceDeviceId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise notify_groups_to_scan DeviceGroupId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Mobile Security for Enterprise change_user Device_DeviceId SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Microsoft Office Excel xlsb File Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader XFA gotoURL Command Injection Remote Code Execution Vulnerability

---

• [SRC] Jungo DriverWizard WinDriver Kernel Pool Overflow Privilege Escalation Vulnerability #2

---

• [SRC] Jungo DriverWizard WinDriver Kernel Pool Overflow Privilege Escalation Vulnerability #1

---

• [SRC] Jungo DriverWizard WinDriver Kernel Out-of-Bounds Write Privilege Escalation Vulnerability #2

---

• [SRC] Jungo DriverWizard WinDriver Kernel Out-of-Bounds Write Privilege Escalation Vulnerability #1

---

• [ZDI] Foxit Reader saveAs Arbitrary File Write Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center mibWidgetService Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center soapConfigContent Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center selViewNavContent Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center powershellConfigContent Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center navigationTo Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload SyslogIctTableExportToCSVBean Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload IctTableExportToCSVBean Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload FaultIctTableExportToCSVBean Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center faultInfo_content Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center faultDevParasSet Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center eventInfo_content Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center devGroupSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center addVsiInterfaceInfo Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center actionSelectContent Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Hewlett Packard Enterprise Intelligent Management Center SyslogTempletSelectWin Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center wmiConfigContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center index Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center operatorGroupSelectContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center guiDataDetail Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center quickTemplateSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center userSelectPagingContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center perfAddorModDeviceMonitor Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center faultEventSelectFactWithRecover Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center operationSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center iccSelectDymicParam Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center iccSelectRules Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center devSoftSel Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center perfSelectTask Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center deviceThresholdConfig Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center iccSelectDeviceSeries Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center dnd Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center select Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center smsRulesDownload Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center operatorGroupTreeSelectContent Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center deploySelectBootrom Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center deploySelectSoftware Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center compareFilesResult Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center iccSelectCommand Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center iccSelectDevType Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center templateSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center reportTaskSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center select Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center ictExpertDownload Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center customTemplateSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center deviceSelect Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center sshConfig Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center selectUserGroup Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center mediaForAction Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center queryCustomCondition Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center saveSelectedInterfaces Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center safeSelectedDevices Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center perfSelInsServer Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center perfInsListServer Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center perfSelItemServer Expression Language Injection Remote Code Execution Vulnerability

---

• [ZDI] Hewlett Packard Enterprise Intelligent Management Center perfAddFormServer Expression Language Injection Remote Code Execution Vulnerability

---

• [SRC] Adobe Reader DC execMenuItem Off-by-One Heap Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC ImageConversion EMF parsing EMR_EXTTEXTOUTA Array Indexing Remote Code Execution Vulnerability

---

• [SRC] Adobe Digital Editions ePub Container File External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Adobe Digital Editions ePub Font Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion TIFF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion XPS Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion XPS Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion PCX Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Digital Editions ePub JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Trend Micro OfficeScan Proxy Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro OfficeScan Proxy Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Messaging Security Proxy Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Messaging Security Proxy Command Injection Remote Code Execution Vulnerability

---

• [SRC] Nitro PDF Pro Doc.saveAs and App.launchURL Remote Code Execution Vulnerabilities

---

• [ZDI] Microsoft Windows OTL Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Foxit Reader execMenuItem Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader print Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader setItem Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader App alert Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader AFParseDateEx Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player ARF File Memory Corruption Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player ARF File Memory Corruption Remote Code Execution Vulnerability

---

• [ZDI] Cisco WebEx Network Recording Player ARF File CImageList Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Lepide LepideAuditor Suite Malicious Server Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader JPXDecode stream Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [SRC] AContent Directory Traversal Information Disclosure and Remote Code Execution Vulnerabilities

---

• [ZDI] Foxit Reader getAnnot Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Annotations lock Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Annotations style Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Annotations opacity Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Annotations arrowEnd Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader importAnXFDF Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Field setAction Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Link setAction Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader getURL Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader spawnPageFromTemplate Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Field insertItemAt Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader scroll Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader exportAsFDF Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader resetForm Use-After-Free Information Disclosure Vulnerability

---

• [ZDI] Foxit Reader Field buttonSetCaption Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader response Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Field getItemAt Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader addAnnot Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion GIF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion TIFF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Adobe Reader DC Annotations Object Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC ImageConversion TIFF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Adobe Acrobat Pro DC ImageConversion EMF iType Out-Of-Bounds Read Remote Code Execution Vulnerability

---

• [SRC] Adobe Acrobat Pro DC ImageConversion TIFF Parsing Use-After-Free Read Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Smart Protection Server wcs_bwlists_handler Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance transparent_setting CRLF Injection Authentication Bypass Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance TestConfigure Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration datagateIPv6Changed Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration isMgntDHCPIPv6Changed Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance PacFileManagement delete_pac_files Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration hostname Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigBackup Information Disclosure Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ManageIPConfig setHostname Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance uihelper Privilege Escalation Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration manageIP6 Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration gateChanged Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration dataIP6Changed Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ContentCacheSSAction Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance PacFileManagement Unrestricted File Upload Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ManageIPConfig setMgmtIPConfig Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance DomainList TestingADKerberos Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ManagePatches untarPatchFile Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration mgmtPingChanged Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance DeploymentWizardAction GetClusterInfo Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration dataPingChanged Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration primaryDNS6 Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance VerboseLog Directory Traversal Information Disclosure Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ManageIPConfig setMgmtIPConfig Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance LogSettingHandler doPostMountDevice Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ManagePatches rollbackPatch Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration mgmtIPv6Changed Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ReportHandler DoCmd Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration manageEth Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration isDHCP Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ManageIPConfig setDataIPConfig static IP Information Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ClusterManagement ChangeNodeSetting Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance config_date_time Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance WmiDCDetector getAdHost Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance LogDelete processRequest method Directory Traversal Denial of Service Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration mgnt_gateway6 Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration isDHCP6_data Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration proxyEthChanged Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration dataIPChanged Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ManageIPConfig setDataIPConfig DNS Information Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Web Security Virtual Appliance ManageIPConfig setDataIPConfig DHCP Information Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro InterScan Messaging Security Suite DetailReportAction Directory Traversal Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet SpecialSpywarePolicyResult SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager AdHocQueryExportProcessing SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet IDTB_SV parameters SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet ID_HIDDEN_UG_STR SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager cgiCMUIDispatcher ScheduleDownloadSavedEnableList SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet ID_QUERY_COMMAND_TRACKING_ID SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager cgiCMUIDispatcher ManualDownloadResult SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Field buttonGetIcon Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader ePub Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader openDoc Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Field deleteItemAt Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader execMenuItem Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader execMenuItem Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader execMenuItem Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise displayName_get SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise count_ad_members SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise restartService Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise rollback Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise get_device_info SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise get_replacement Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise license Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise get_nic_device SQL Injection Information Disclosure Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise reconnect_nfs_device Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise reconnect_iscsi_device Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise reconnect_local_device Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise mount_local_device Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise mount_iscsi_device Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise replace_local_disk Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise dead_local_device Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise dead_iscsi_device Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise discovery_iscsi_device Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise save_local_config Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise save_iscsi_config Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro SafeSync for Enterprise check_nfs_server_status Command Injection Remote Code Execution Vulnerability

---

• [ZDI] Adobe Digital Editions PDF Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Digital Editions PDF Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Digital Editions PDF Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Digital Editions PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Digital Editions PDF Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Digital Editions FlateDecode Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Digital Editions FlateDecode Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Adobe Digital Editions JPEG2000 Parsing Array Indexing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Control Manager cgiRedAlertStatusTracking SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet NotificationMethodResult SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager AdHocQuery_Result XML External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet CnCContactAlertResult SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet HighRiskDetectionResult SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet DLPIncidentStatusChangeResult SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet StealthProgramFoundResult SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet SHA1DenyDetectionResult SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet CorrelatedIncidentResult SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet DLPIncidentScheduleSummaryResult SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet VirtualAnalysisDetectionResult SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet KnownAttackDetectionResult SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet SuspiciousThreat parameters SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet ID_HIDDEN_RED_ALERT_TASK_ID SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet EmailMessageDetected parameters SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet CnC parameters SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet ThreatSentToWatchlistResult SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager ProductTree_TreeManagement1 XML External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Control Manager ProductTree_Table XML External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet IDTB_ Parameters SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet IDTB_GroupName SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager TreeUserControl_process_tree_event XML External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Control Manager ProductTree XML External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Control Manager CCGIServlet IDCB_SuspiciousThreat SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager ProductTree_RightWindow XML External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Control Manager ProductTree_LeftWindow XML External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Control Manager DeploymentPlan_Event_Handler XML External Entity Processing Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Control Manager ProgressReportCGI SQL Injection Authentication Bypass Vulnerability

---

• [ZDI] Trend Micro Control Manager cgiCMUIDispatcher Login Token SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager dlp_policy Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager dlp_policy Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager dlp_policy Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager modDLPViolationCnt_drildown Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager modDLPViolationCnt_drildown Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager modDLPViolationCnt_drildown Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager modDLPTemplateMatch_drildown Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager modDLPTemplateMatch_drildown Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager modDLPTemplateMatch_drildown Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager importFile Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Trend Micro Control Manager download Directory Traversal Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Control Manager download Directory Traversal Information Disclosure Vulnerability

---

• [ZDI] Trend Micro Control Manager importFile Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader alert Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Reader DC JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Reader DC JPEG2000 Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

---

2016

---

• [ZDI] Adobe Digital Editions FlateDecode Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Microsoft Internet Explorer HyperlinkString Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Microsoft Office Excel MakeAbsoluteSD pDacl Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [SRC] Microsoft Office Word Array Indexing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Microsoft Office Word OneTableDocumentStream Integer Underflow Information Disclosure Vulnerability

---

• [VCP] Microsoft Office Excel Use-after-Free Vulnerability

---

• [VCP] Microsoft Word Memory Corruption Code Execution Vulnerability

---

• [VCP] Microsoft Word Memory Corruption Code Execution Vulnerability

---

• [VCP] Microsoft Office Out-of-Bounds Read Information Leak Vulnerability

---

• [VCP] Microsoft Word 2010 Out-of-Bounds Write Heap Corruption Vulnerability

---

• [ZDI] Adobe Reader DC XObject stream Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader JPXDecode filters Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Reader DC FlateDecode Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Foxit Reader FlateDecode Use-After-Free Remote Code Execution Vulnerability

---

• [VCP] Adobe Acrobat DC FlateDecode Stream Processing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Acrobat Pro DC XObject stream Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Adobe Digital Editions ePub Font Parsing Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Microsoft Office Excel Art Data Memory Corruption Remote Code Execution Vulnerability

---

• [VCP] Microsoft Office Excel Binary Worksheet Out-of-Bounds Read Remote Code Execution Vulnerability

---

• [VCP] Microsoft Office Excel Binary Worksheet Arbitrary Free Remote Code Execution Vulnerability

---

• [SRC] Microsoft Office Excel Binary Worksheet Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Microsoft Windows PDF Library PostScript Calculator Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Microsoft Office Excel EOF Record Type Confusion Remote Code Execution Vulnerability

---

• [SRC] Microsoft Office Excel Binary Worksheet Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Microsoft Office Excel Binary Worksheet Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Microsoft Internet Explorer HyperlinkString Out-of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Reader DC FlateDecode Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Reader DC FlateDecode Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Reader DC FlateDecode Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Adobe Reader DC FlateDecode Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Samsung Security Manager Apache Felix Gogo Remote Code Execution Vulnerability

---

• [SRC] Samsung Security Manager Redis Server Injection Remote Code Execution Vulnerability

---

• [SRC] Samsung Security Manager ActiveMQ Broker Service PUT Method Remote Code Execution Vulnerability

---

• [SRC] Samsung Security Manager ActiveMQ Broker Service MOVE Method Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader ConvertToPDF TIFF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader ConvertToPDF TIFF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader JPXDecode Out-of-Bounds Write Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader ConvertToPDF BMP Parsing Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Foxit Reader ConvertToPDF TIF Parsing Out-of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Foxit Reader FlateDecode Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader JPXDecode Out-of-Bounds Read Remote Code Execution Vulnerability

---

• [ZDI] Apple OS X ACMP4AACBaseDecoder Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [SRC] Oracle Knowledge Management Forum Attachment Upload Remote Code Execution Vulnerability

---

• [SRC] Oracle Knowledge Management Castor Library XML External Entity Injection Information Disclosure Vulnerability

---

• [ZDI] Foxit Reader ConvertToPDF TIFF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader FlateDecode Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader Pattern Uninitialized Pointer Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader FlateDecode Use-After-Free Remote Code Execution Vulnerability

---

• [SRC] Foxit Reader ConvertToPDF TIFF SamplesPerPixel Parsing Heap Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Unitronics VisiLogic OPLC IDE vlp File Parsing Stack Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Adobe Reader DC FlateDecode Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Panasonic FPWIN Pro SCTASK Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Panasonic FPWIN Pro SelectFCS Array Indexing Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Panasonic FPWIN Pro ReleaseBuffer Integer Overflow Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Panasonic FPWIN Pro DeleteAndCreateSysRegDecls_And_SaveSysRegDeclsDatabaseIdsToTheSysRegDeclInfoMap Type Confusion Remote Code Execution Vulnerability

---

• [ZDI] Panasonic FPWIN Pro createLoadContent Out-Of-Bounds Write Remote Code Execution Vulnerability

---

• [ZDI] Panasonic FPWIN Pro CPlcSetting::Load Uninitialized Pointer Remote Code Execution Vulnerability

---

• [ZDI] Panasonic FPWIN Pro GetBlock Heap Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Panasonic FPWIN Pro OPNISAMX Heap Buffer Overflow Remote Code Execution Vulnerability

---

• [SRC] Microsoft Office Component FSupportSAEXTChar Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Apple QuickTime Atom Processing Heap Corruption Remote Code Execution Vulnerability

---

• [ZDI] Apple QuickTime moov Atom Heap Corruption Remote Code Execution Vulnerability

---

• [ZDI] Ecava IntegraXor Report batch SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Ecava IntegraXor Report batchlist SQL Injection Remote Code Execution Vulnerability

---

• [ZDI] Ecava IntegraXor Report summary SQL Injection Remote Code Execution Vulnerability

---

• [VCP] Microsoft Office Excel Binary Worksheet Uninitialized Pointer Remote Code Execution Vulnerability

---

• [SRC] Microsoft Office Excel BIFFRecord Length Out-of-Bounds Read Remote Code Execution Vulnerability

---

• [ICS] Cogent DataHub Gamma Script Elevation of Privilege Vulnerability

---

• [ZDI] IBM Informix portmap Service Privilege Escalation Vulnerability

---

• [ZDI] IBM Informix nsrexecd Service Privilege Escalation Vulnerability

---

• [ZDI] IBM Informix nsrd Service Privilege Escalation Vulnerability

---

• [SRC] ATutor LMS view_transcript File Disclosure Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS get_course_icon File Disclosure Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS view_transcript File Disclosure Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS view_item File Disclosure Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS password_reminder ‘UPDATE’ Type Juggling Authentication Bypass Vulnerability

---

• [SRC] ATutor LMS write_temp_file File Write Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS zip Directory Traversal Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS ims_import Directory Traversal Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS confirm ‘UPDATE’ Type Juggling Authentication Bypass Vulnerability

---

• [SRC] ATutor LMS import_test Directory Traversal Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS question_import Directory Traversal Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS password_reminder TOCTOU Authentication Bypass Vulnerability

---

• [SRC] ATutor LMS confirm ‘SELECT’ Type Juggling Authentication Bypass Vulnerability

---

• [SRC] ATutor LMS searchFriends SQL Injection Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS updateAdditionalInformation SQL Injection Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS searchMembers SQL Injection Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS SocialGroups search SQL Injection Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS PhotoAlbum search SQL Injection Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS Multiple Reflected Cross Site Scripting Vulnerabilities

---

• [SRC] ATutor LMS install_modules CSRF Remote Code Execution Vulnerability

---

• [SRC] ATutor LMS login_functions.inc.php Password Hash Usage Authentication Bypass Vulnerability

---

• [ZDI] SAP 3D Visual Enterprise Viewer SketchUp document Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] SAP 3D Visual Enterprise Viewer SketchUp document Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] SAP 3D Visual Enterprise Viewer SketchUp document Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] SAP 3D Visual Enterprise Viewer SketchUp document Use-After-Free Remote Code Execution Vulnerability

---

• [VCP] Microsoft Wordpad Open Document Text Out-of-Bounds Read Vulnerability

---

• [VCP] Advantech WebAccess ExportImportAction importWidgetVerify Remote Code Execution Vulnerability

---

• [VCP] Advantech WebAccess ExportImportAction restoreAll Remote Code Execution Vulnerability

---

• [VCP] Advantech WebAccess ExportImportAction importProjectVerify Remote Code Execution Vulnerability

---

• [VCP] Advantech WebAccess ExportImportAction importDashboardVerify Remote Code Execution Vulnerability

---

• [VCP] Advantech WebAccess FileAjaxAction saveGeneralFile Remote Code Execution Vulnerability

---

• [VCP] Advantech WebAccess FileAjaxAction uploadDrawImage/uploadDraw Remote Code Execution Vulnerability

---

• [VCP] Advantech WebAccess UploadAjaxActionx uploadFile Remote Code Execution Vulnerability

---

• [VCP] Advantech WebAccess UploadAjaxAction uploadImageCommon Remote Code Execution Vulnerability

---

• [VCP] Advantech WebAccess FileAjaxAction openWidget Directory Traversal Information Disclosure Vulnerability

---

• [VCP] Advantech WebAccess FileAjaxAction removeFolder Denial of Service Vulnerability

---

• [VCP] Advantech WebAccess FileAjaxAction renameFolder Denial of Service Vulnerability

---

• [VCP] Advantech WebAccess UploadAjaxAction deleteFile Denial of Service Vulnerability

---

• [VCP] Advantech WebAccess UploadAjaxAction removeFolder Denial of Service Vulnerability

---

• [ZDI] Proface GP-Pro EX D-Script Heap Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Proface GP-Pro EX Out-Of-Bounds Read Information Disclosure Vulnerability

---

• [ZDI] Proface GP-Pro EX Stack Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] Unitronics VisiLogic OPLC IDE File Parsing Buffer Overflow Remote Code Execution Vulnerability

---

2015

---

• [ZDI] Microsoft Office Excel Binary Worksheet Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Unitronics VisiLogic OPLC IDE TChart.ITChart ActiveX Control RemoveSeries Remote Code Execution Vulnerability

---

• [ZDI] Unitronics VisiLogic OPLC IDE TeePreviewer.ITeePreviewer ActiveX Control ChartLink Remote Code Execution Vulnerability

---

• [ZDI] Unitronics VisiLogic OPLC IDE TeeCommander.ITeeCommander ActiveX Control ChartLink Remote Code Execution Vulnerability

---

• [ZDI] Oracle Beehive prepareAudioToPlay Arbitrary File Write Remote Code Execution Vulnerability

---

• [ZDI] Microsoft Office Excel Binary Worksheet Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Microsoft Office Excel Binary Worksheet Uninitialized Pointer Remote Code Execution Vulnerability

---

• [ICS] Infinite Automation Systems Mango Automation graphicalViewUploads Remote Code Execution Vulnerability

---

• [ZDI] SAP 3D Visual Enterprise Viewer Filmbox document Memory Corruption Remote Code Execution Vulnerability

---

• [ZDI] SAP 3D Visual Enterprise Viewer Flic Animation Heap Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] SAP 3D Visual Enterprise Viewer FBX Out-Of-Bounds Indexing Remote Code Execution Vulnerability

---

• [ZDI] SAP 3D Visual Enterprise Viewer JPEG2000 Out-Of-Bounds Indexing Remote Code Execution Vulnerability

---

• [ZDI] SAP 3D Visual Enterprise Viewer LWO Out-Of-Bounds Indexing Remote Code Execution Vulnerability

---

• [ZDI] SAP 3D Visual Enterprise Viewer U3D Out-Of-Bounds Indexing Remote Code Execution Vulnerability

---

• [ZDI] SAP 3D Visual Enterprise Viewer 3DM Buffer Overflow Remote Code Execution Vulnerability

---

• [ZDI] InduSoft Web Studio Remote Agent Remote Code Execution Vulnerability

---

• [ZDI] Symantec Ghost Out-Of-Bounds Indexing Remote Code Execution Vulnerability

---

• [ZDI] Apache ActiveMQ RestFilter Directory Traversal Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader GIF Conversion Heap Corruption Remote Code Execution Vulnerability

---

• [ZDI] Foxit Reader TIFF Conversion Remote Code Execution Vulnerability

---

• [ZDI] Oracle Endeca Information Discovery Integrator ETL Server File Download Remote Code Execution Vulnerability

---

• [ZDI] Oracle Endeca Information Discovery Integrator ETL Server Authentication Bypass Vulnerability

---

• [ZDI] Oracle Endeca Information Discovery Integrator ETL Server UploadFileContent Remote Code Execution Vulnerability

---

• [ZDI] Oracle Endeca Information Discovery Integrator ETL Server CopyFile Remote Code Execution Vulnerability

---

• [ZDI] Oracle Endeca Information Discovery Integrator ETL Server MoveFile Remote Code Execution Vulnerability

---

• [ZDI] Oracle Endeca Information Discovery Integrator ETL Server RenameFile Remote Code Execution Vulnerability

---

• [SRC] Oracle Endeca Tools and Frameworks AMF Request Beanshell Script Remote Code Execution Vulnerability

---

• [SRC] Oracle Endeca Tools and Frameworks Session Generation Authentication Bypass Vulnerability

---

• [ZDI] Apple QuickTime code Atom Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Visual Mining NetCharts Server Arbitrary File Upload Remote Code Execution Vulnerability

---

• [SRC] Microsoft Windows Journal Use-After-Free Remote Code Execution Vulnerability

---

• [ZDI] Oracle Endeca Tools and Frameworks Script.action Remote Code Execution Vulnerability

---